Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/AYRPh2Cj_TiMRm9mCpixlBGifNw.roa
File:                     AYRPh2Cj_TiMRm9mCpixlBGifNw.roa (raw, json)
Hash identifier:          Z7jPvirE47bIluHz1yhyiVe41nYHNMbN2rv3JXcPuY8=
Subject key identifier:   01:84:4F:87:60:A3:FD:38:8C:46:6F:66:0A:98:B1:94:11:A2:7C:DC
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       03EC
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/AYRPh2Cj_TiMRm9mCpixlBGifNw.roa
Signing time:             Tue 01 Apr 2025 01:32:04 +0000
ROA not before:           Tue 01 Apr 2025 01:32:04 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:6b:b100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 14 Apr 2025 06:50:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1004 (0x3ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr  1 01:32:04 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=01844F8760A3FD388C466F660A98B19411A27CDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:63:79:c4:27:6d:1c:fa:33:64:82:07:3e:0c:
                    e5:41:f3:c5:3b:03:3b:d5:11:03:29:46:c9:23:86:
                    75:8b:b0:4d:18:c1:0e:85:fe:6b:45:51:66:f3:e8:
                    13:1f:15:5a:8c:1b:f7:69:0c:a6:b5:d2:80:54:77:
                    c7:29:e9:97:45:3d:70:24:bb:1c:91:35:4c:96:33:
                    32:db:0f:a9:32:cc:c3:cb:6a:46:b5:01:4a:9f:3f:
                    b7:9b:f3:6f:5d:3d:8c:e4:75:ea:c6:3c:e4:9f:fc:
                    e6:d5:9b:ce:c3:6c:67:52:72:b0:11:af:90:72:bb:
                    62:fa:3f:5d:fc:2b:d2:de:ad:67:45:64:c0:8e:92:
                    fb:3e:5a:8d:42:c3:66:de:a5:55:29:b4:26:97:d9:
                    0a:66:c8:27:2c:01:fc:57:10:97:0a:cc:fe:23:cf:
                    a8:6c:5b:07:ea:f2:bb:d5:0f:88:be:50:14:d0:a4:
                    b0:aa:24:db:56:6d:96:a8:e9:18:db:89:e6:23:4b:
                    01:bd:4c:49:b0:f4:be:c8:1e:fa:0e:fe:ee:71:93:
                    a1:ee:3c:f5:b1:c9:09:1d:2f:ea:d6:36:04:b1:a8:
                    1e:b1:b0:eb:94:11:c3:a1:69:6f:b3:1c:7f:6c:cf:
                    5e:f6:d2:d2:31:03:33:f2:71:2e:e4:86:f5:f4:24:
                    85:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:84:4F:87:60:A3:FD:38:8C:46:6F:66:0A:98:B1:94:11:A2:7C:DC
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/AYRPh2Cj_TiMRm9mCpixlBGifNw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:b100::/40

    Signature Algorithm: sha256WithRSAEncryption
         af:c7:e9:a8:d4:3e:20:41:2b:54:e0:36:d1:12:71:0c:7a:a7:
         af:c1:6b:2d:9e:f4:91:1f:97:77:7e:d7:a5:03:a4:a8:61:ca:
         57:8c:56:9b:f2:4b:ce:67:5a:83:ab:00:cb:ca:b9:b4:ae:46:
         59:78:de:f0:c5:4f:03:8e:cb:7e:33:e1:02:bd:87:28:e3:c0:
         8b:e4:27:7f:3b:7f:50:7f:fb:25:00:9f:a4:04:7e:6b:71:56:
         54:1d:bd:ff:75:64:80:68:14:01:82:89:ca:b2:8e:d3:ce:d3:
         68:55:d2:aa:81:55:b0:bc:fd:00:6b:e3:a1:38:8a:64:e9:f7:
         b0:fa:42:72:05:ee:ef:49:de:06:92:bb:7b:d8:bf:e5:3d:d2:
         f8:55:cc:22:12:c5:0a:0d:52:7b:e1:6e:3c:fe:49:d4:77:e7:
         ff:9d:5d:fb:1e:78:05:99:87:10:46:02:fc:ce:ab:2f:e2:24:
         1d:24:23:f1:e2:c0:b4:96:9f:63:72:a4:58:96:55:a4:f5:5d:
         73:07:4f:31:4f:20:c0:1f:16:1a:98:5b:59:e1:57:5a:ff:5a:
         f2:06:0b:bb:ab:48:ad:87:b3:2d:6a:f6:d8:8b:2d:dc:30:6a:
         2a:f1:9e:b8:ce:fe:57:44:f5:2a:ae:78:48:3f:98:d6:7b:25:
         de:6c:2d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:12:08 2025 by rpki-client