Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/8JDpgXN2qBQHEpRdKA5igApgNTc.roa
File:                     8JDpgXN2qBQHEpRdKA5igApgNTc.roa (raw, json)
Hash identifier:          Jg6iuZYxC1Z/vneb4j8VGJGUB/D/XL1desarlw7JRSo=
Subject key identifier:   F0:90:E9:81:73:76:A8:14:07:12:94:5D:28:0E:62:80:0A:60:35:37
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0448
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/8JDpgXN2qBQHEpRdKA5igApgNTc.roa
Signing time:             Tue 01 Apr 2025 01:39:35 +0000
ROA not before:           Tue 01 Apr 2025 01:39:35 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:6b:b400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 14 Apr 2025 07:48:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1096 (0x448)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr  1 01:39:35 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=F090E9817376A8140712945D280E62800A603537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:77:c6:b2:be:5d:86:af:e8:b7:36:57:0e:09:
                    77:8b:4b:d9:e7:63:2c:47:f4:aa:41:b6:e6:45:41:
                    1f:7e:af:b8:97:eb:0e:67:0d:14:2d:64:30:af:b8:
                    ab:d4:a3:52:16:e3:94:ec:f3:70:ef:5c:f9:ba:71:
                    a7:84:46:4a:fd:45:ab:d0:55:00:a6:49:90:6c:1d:
                    34:c2:dd:f0:75:58:07:3e:ed:40:68:83:b6:23:6f:
                    6a:26:ef:f9:a4:03:21:ca:10:34:7e:29:d6:2b:4b:
                    4c:15:39:20:0d:3d:29:99:c3:25:5f:8a:eb:c7:3f:
                    3d:7f:87:62:cf:90:65:78:bc:8c:65:78:e4:e0:40:
                    61:5b:28:c0:c4:62:4f:e8:d6:44:b6:f3:e5:32:90:
                    0e:34:8b:e2:fe:a8:f2:54:01:af:0d:14:a2:41:60:
                    32:8b:2c:50:99:fd:7b:5d:f2:5c:46:c5:0e:42:bf:
                    62:c9:55:5d:d0:1e:d1:b2:4d:65:c7:d8:8c:90:f7:
                    40:ce:c0:21:1a:24:0d:82:92:d8:ee:94:13:22:cd:
                    bf:54:f3:fc:c3:e7:5b:31:d6:da:2e:ed:26:d4:45:
                    f0:97:c6:d4:e3:22:eb:32:f6:93:c5:79:0e:db:ca:
                    98:73:8c:3a:14:4d:37:b6:ee:82:d4:0b:47:67:1e:
                    c4:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:90:E9:81:73:76:A8:14:07:12:94:5D:28:0E:62:80:0A:60:35:37
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/8JDpgXN2qBQHEpRdKA5igApgNTc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:b400::/40

    Signature Algorithm: sha256WithRSAEncryption
         99:e8:0a:e2:ea:02:ea:10:f8:ce:8a:b6:38:d8:b2:22:0e:20:
         db:a5:81:66:52:80:3b:04:08:c0:c9:14:1d:14:93:bf:2c:21:
         7c:ec:83:04:59:7c:3c:6d:56:40:68:00:b9:ab:3c:07:b0:bc:
         4a:2d:28:3d:6b:02:09:d5:9d:ac:66:b1:3f:3a:df:b0:77:3a:
         7d:61:b6:57:5b:af:fe:01:d2:5f:ca:2f:4f:76:62:bf:c3:fb:
         73:4c:c1:e7:8f:f0:c3:be:69:18:19:81:9e:95:b8:8f:9d:76:
         41:53:b7:6f:63:27:a3:73:82:6a:89:c2:da:e4:d0:a3:59:47:
         9c:e2:35:48:50:38:c0:87:08:8f:1a:f4:37:d2:c2:70:78:6b:
         b0:6d:af:7c:66:1b:cd:b1:fe:94:1c:24:1d:01:8a:9d:d5:29:
         17:1b:19:d5:29:3d:74:05:e5:82:6a:bf:e6:43:68:04:8a:d1:
         9b:ad:56:13:64:98:d6:d9:1a:2f:ff:c9:10:2c:61:eb:b9:e4:
         a0:b1:23:78:30:69:49:cc:c0:3d:2e:83:b5:75:7c:ce:25:88:
         20:ce:5f:f0:65:1b:d4:11:d2:28:9b:cf:54:57:16:fd:ae:42:
         78:5a:65:ad:62:82:dc:b4:f7:76:a5:67:cc:7a:c6:a0:8e:d5:
         49:27:76:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:20:58 2025 by rpki-client