Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/5VjeyTo623P3JCowbYwyjNQ8fJU.roa
File:                     5VjeyTo623P3JCowbYwyjNQ8fJU.roa (raw, json)
Hash identifier:          l8XTLgTut+yLorHXOKC3u72uEKesRDIfzk1FzZpYxqI=
Subject key identifier:   E5:58:DE:C9:3A:3A:DB:73:F7:24:2A:30:6D:8C:32:8C:D4:3C:7C:95
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       04D3
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/5VjeyTo623P3JCowbYwyjNQ8fJU.roa
Signing time:             Tue 01 Apr 2025 01:53:02 +0000
ROA not before:           Tue 01 Apr 2025 01:53:02 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:6b:1c00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 14 Apr 2025 05:12:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1235 (0x4d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr  1 01:53:02 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=E558DEC93A3ADB73F7242A306D8C328CD43C7C95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:70:53:82:01:13:6b:61:30:d2:85:39:5b:87:
                    ee:8c:e1:8d:76:e9:19:4c:8f:43:f3:d5:db:6b:7d:
                    0d:4b:8d:5d:cb:3c:23:c8:5f:3b:c7:09:00:31:fb:
                    ca:27:32:1c:1e:c7:66:8c:2a:63:f4:9b:86:7c:6f:
                    c9:b4:0b:78:79:91:67:03:83:54:10:94:f0:99:08:
                    62:39:97:0e:87:49:dd:1e:0b:9c:a5:a5:f8:00:90:
                    cd:db:3b:f0:c1:8b:fd:4a:13:56:f7:41:b3:e9:eb:
                    b0:1e:b0:dc:cd:6d:54:09:dc:87:62:52:7b:7b:63:
                    d3:e9:d8:ac:33:d1:b3:e7:6e:96:ac:0e:8c:8c:9f:
                    e6:87:86:53:0a:1e:7c:6f:fc:be:dd:06:f0:ee:8c:
                    5f:a8:1e:3e:8e:19:78:06:f6:0b:6d:f8:0e:ec:68:
                    fa:40:4a:f5:4d:8d:43:51:a6:bb:01:51:2b:91:24:
                    d8:84:52:c7:e6:7b:38:4b:f8:49:8e:79:da:1c:8b:
                    ba:e9:67:33:00:0f:ba:2b:ab:c6:04:eb:94:d2:10:
                    97:d1:3a:9c:a0:4f:fb:09:b5:a2:1b:16:84:3f:ca:
                    52:82:76:5f:29:ff:75:ab:c7:6b:d4:e8:0a:5a:7f:
                    ee:27:87:c4:e8:04:6a:18:aa:67:f8:b3:1e:d6:6e:
                    e7:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:58:DE:C9:3A:3A:DB:73:F7:24:2A:30:6D:8C:32:8C:D4:3C:7C:95
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/5VjeyTo623P3JCowbYwyjNQ8fJU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:1c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         87:be:16:c7:5d:8e:4d:a3:c1:22:ef:43:d6:fd:6a:ad:2d:ff:
         fb:cd:72:d9:3e:a5:73:32:7d:3d:ca:8f:61:eb:c0:23:b3:52:
         a8:44:48:f2:22:51:3c:81:f7:8f:b2:70:01:c8:bf:e0:60:5d:
         a8:9d:f9:67:01:51:81:9f:8f:61:8e:4d:3a:a3:5f:f7:40:2d:
         e9:65:e5:83:b7:2d:df:f0:16:65:bd:5b:5f:e7:ba:0e:89:8b:
         17:f0:ff:55:01:7b:51:67:46:68:61:c7:98:bb:26:b5:71:c9:
         1e:fb:72:cb:57:b5:a5:3e:41:d5:1d:3f:54:4c:a7:78:66:27:
         6d:e2:2a:1b:b9:b6:42:d6:8f:fc:fd:0b:b8:91:88:26:cb:4e:
         0b:72:8a:c6:30:68:ed:8a:d8:ab:08:69:5a:5a:9e:54:e3:87:
         bf:6f:de:97:62:fa:57:4f:50:a9:b6:72:6b:8f:f3:ba:b9:cc:
         5b:96:12:2a:ff:bb:ed:9d:de:c9:c9:86:3a:f3:df:5d:cd:6f:
         12:7b:63:96:3e:5f:b9:6f:3b:3d:cd:4f:db:60:41:fa:99:ab:
         7d:6f:de:ea:6d:d3:56:bb:29:3f:e5:37:49:cc:a9:d9:f9:94:
         56:e1:b2:f9:6b:06:ac:da:3f:85:aa:8d:e3:0f:e0:e0:bb:1c:
         f0:6b:26:60
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICBNMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNTA0MDEw
MTUzMDJaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEU1NThERUM5M0EzQURC
NzNGNzI0MkEzMDZEOEMzMjhDRDQzQzdDOTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDlcFOCARNrYTDShTlbh+6M4Y126RlMj0Pz1dtrfQ1LjV3LPCPI
XzvHCQAx+8onMhwex2aMKmP0m4Z8b8m0C3h5kWcDg1QQlPCZCGI5lw6HSd0eC5yl
pfgAkM3bO/DBi/1KE1b3QbPp67AesNzNbVQJ3IdiUnt7Y9Pp2Kwz0bPnbpasDoyM
n+aHhlMKHnxv/L7dBvDujF+oHj6OGXgG9gtt+A7saPpASvVNjUNRprsBUSuRJNiE
UsfmezhL+EmOedoci7rpZzMAD7orq8YE65TSEJfROpygT/sJtaIbFoQ/ylKCdl8p
/3Wrx2vU6Apaf+4nh8ToBGoYqmf4sx7WbueFAgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQU5VjeyTo623P3JCowbYwyjNQ8fJUwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS81VmpleVRvNjIzUDNKQ293Yll3eWpOUThmSlUu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAaxwwDQYJKoZIhvcNAQELBQADggEBAIe+Fsddjk2jwSLvQ9b9
aq0t//vNctk+pXMyfT3Kj2HrwCOzUqhESPIiUTyB94+ycAHIv+BgXaid+WcBUYGf
j2GOTTqjX/dALell5YO3Ld/wFmW9W1/nug6Jixfw/1UBe1FnRmhhx5i7JrVxyR77
cstXtaU+QdUdP1RMp3hmJ23iKhu5tkLWj/z9C7iRiCbLTgtyisYwaO2K2KsIaVpa
nlTjh79v3pdi+ldPUKm2cmuP87q5zFuWEir/u+2d3snJhjrz313NbxJ7Y5Y+X7lv
Oz3NT9tgQfqZq31v3upt01a7KT/lN0nMqdn5lFbhsvlrBqzaP4WqjeMP4OC7HPBr
JmA=
-----END CERTIFICATE-----
Generated at Mon Apr 7 08:04:15 2025 by rpki-client