Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/AfXLf57hQawuTK4fJd5oZe_16Yg.roa
File:                     AfXLf57hQawuTK4fJd5oZe_16Yg.roa (raw, json)
Hash identifier:          NnrrmXk8/KjmT3KiglrlrhVcGzkMmSFY1qeaUwToEg8=
Subject key identifier:   01:F5:CB:7F:9E:E1:41:AC:2E:4C:AE:1F:25:DE:68:65:EF:F5:E9:88
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       03C6
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/AfXLf57hQawuTK4fJd5oZe_16Yg.roa
Signing time:             Tue 01 Apr 2025 01:28:47 +0000
ROA not before:           Tue 01 Apr 2025 01:28:47 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:6b:3600::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 14 Apr 2025 05:12:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 966 (0x3c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr  1 01:28:47 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=01F5CB7F9EE141AC2E4CAE1F25DE6865EFF5E988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d2:82:a4:72:6b:ac:3b:d3:4b:c2:ca:16:67:
                    0d:2e:01:44:98:cf:08:4e:26:b5:69:b3:58:7e:3d:
                    4c:53:4a:aa:42:7d:f7:d5:17:4a:cc:f7:14:e7:9e:
                    48:1a:75:b5:cc:54:ca:be:07:b4:7c:68:03:9f:65:
                    52:eb:30:a0:0b:14:22:e2:92:67:61:3b:23:5d:5a:
                    97:49:d2:88:8a:3a:91:cf:4b:a2:24:fa:ca:ff:28:
                    c1:d4:58:7e:73:cd:ae:71:03:13:bd:f1:b2:29:f3:
                    bd:40:af:c4:57:03:58:5a:c9:2e:ea:27:1d:ff:13:
                    46:a0:c8:bb:c6:dc:87:7b:f6:f6:f5:99:24:f6:da:
                    f4:b5:f2:ec:e2:20:08:0e:a3:af:38:dc:ea:58:f2:
                    cf:e6:55:79:45:a4:f2:56:26:1d:45:f9:96:aa:70:
                    fe:69:e5:26:42:11:43:25:41:fe:8b:4a:73:2e:17:
                    6e:24:7a:13:ca:7b:89:f9:21:48:16:ec:21:ab:28:
                    0c:38:88:77:fe:f6:75:1a:e0:78:1c:dc:9e:aa:de:
                    57:c4:1b:fa:c9:e0:ca:80:e8:68:4c:0c:73:02:25:
                    50:25:c0:14:84:9c:20:84:c8:e1:29:d4:4f:c2:52:
                    3e:19:0f:4a:f8:fd:5c:45:b7:ce:ef:6f:9b:76:e7:
                    2c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:F5:CB:7F:9E:E1:41:AC:2E:4C:AE:1F:25:DE:68:65:EF:F5:E9:88
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/AfXLf57hQawuTK4fJd5oZe_16Yg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:3600::/40

    Signature Algorithm: sha256WithRSAEncryption
         12:a8:e8:a6:bb:f0:39:3e:eb:95:f4:46:d9:51:8d:91:07:5c:
         90:4f:de:aa:ab:4d:d4:f6:03:6f:51:63:60:e1:77:de:19:a6:
         e8:f1:ac:05:73:f7:04:26:c8:98:82:85:0d:6e:68:91:ec:f7:
         ab:68:9c:f1:82:5e:be:dd:fa:28:4a:bf:08:1e:8f:e6:0f:d1:
         db:4e:b7:86:3a:89:94:47:80:90:9c:8d:24:48:bc:db:2c:1b:
         18:1f:a0:53:1f:98:f9:69:27:80:d4:ac:4c:f7:0b:58:46:83:
         77:02:2a:84:11:8e:48:38:72:26:5f:fe:ab:e7:c8:ee:46:c3:
         59:06:75:81:5d:4c:c9:bc:f1:dd:48:d6:f3:96:ee:5b:5f:97:
         e3:84:ae:4b:3c:5b:5c:33:13:30:22:3d:28:84:99:af:a3:82:
         f1:81:40:8f:c0:61:d4:40:ab:ec:82:c5:2f:f0:13:1b:7f:b3:
         e1:0e:ae:5f:8f:05:e9:f8:0b:76:d7:e2:cf:98:2a:c8:75:40:
         58:d8:d8:1c:7e:19:21:60:68:e8:57:17:64:77:4e:e3:2f:64:
         cb:fb:f4:69:ae:b3:48:9e:5e:05:7e:35:ec:8b:b3:a4:8e:c7:
         45:03:27:3c:70:f8:ac:c9:22:5d:af:d3:21:ad:84:5d:ee:ea:
         6f:ac:4e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:07:45 2025 by rpki-client