Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/DrUTV3e0JeAub3G0V9svORulrQg.roa
File:                     DrUTV3e0JeAub3G0V9svORulrQg.roa (raw, json)
Hash identifier:          Rd0oHYmqE3sz7bxryqozIx/2NUwuaL9adPS9o1aQCkY=
Subject key identifier:   0E:B5:13:57:77:B4:25:E0:2E:6F:71:B4:57:DB:2F:39:1B:A5:AD:08
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       03E4
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/DrUTV3e0JeAub3G0V9svORulrQg.roa
Signing time:             Tue 01 Apr 2025 01:28:59 +0000
ROA not before:           Tue 01 Apr 2025 01:28:59 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:6b:8a00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 14 Apr 2025 05:12:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 996 (0x3e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr  1 01:28:59 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=0EB5135777B425E02E6F71B457DB2F391BA5AD08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:11:5d:c9:35:71:3c:99:4d:99:7b:71:5c:87:
                    62:2a:32:4a:81:6f:41:d2:45:8f:57:fd:fc:f6:c4:
                    66:02:f9:21:c5:dc:91:a1:e2:d4:5b:ac:d5:34:08:
                    f1:6a:e9:d2:f0:6c:f0:6f:4f:0b:62:81:69:c2:6a:
                    98:50:54:0f:4d:07:8e:b7:0e:47:c0:52:20:93:dc:
                    20:e9:10:9a:13:83:c9:1a:b4:05:8f:e2:86:29:0d:
                    40:41:79:4c:06:fb:bf:23:c6:53:89:a3:04:cf:47:
                    35:fb:eb:de:b0:ab:26:8b:c3:5c:72:e0:1e:ad:f1:
                    1a:f5:13:65:48:76:9b:77:8a:dc:7f:fe:90:a9:82:
                    8f:39:0a:96:2a:84:31:66:ff:c6:8d:fb:43:58:7e:
                    0f:7d:dd:62:6a:81:8f:f4:a2:ce:97:cb:2b:e9:80:
                    aa:73:c6:4c:98:8d:73:e1:d0:ab:6a:70:ba:eb:b1:
                    db:97:95:1a:a6:bd:e7:ef:4d:64:58:51:67:f6:4a:
                    66:22:ca:8e:fa:26:2d:b2:2b:98:cd:f6:b7:fa:df:
                    a9:32:86:b8:50:df:77:b1:4c:8d:44:9a:99:13:2c:
                    53:db:6e:bb:80:b2:38:13:dc:a7:7f:e6:ff:51:cb:
                    bd:a4:3c:03:97:57:b2:b5:3a:da:e8:07:19:5d:71:
                    9f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:B5:13:57:77:B4:25:E0:2E:6F:71:B4:57:DB:2F:39:1B:A5:AD:08
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/DrUTV3e0JeAub3G0V9svORulrQg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:8a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         14:de:13:5e:c5:9d:a1:4f:47:a4:8f:51:30:c7:bf:29:36:b1:
         d2:d2:92:bd:ca:d4:8f:a2:83:46:50:d4:72:ed:6d:03:ae:77:
         b5:15:8b:b9:0e:2b:3a:c7:eb:d0:ee:c9:a8:f2:8c:dc:66:7a:
         36:3c:b9:86:f7:45:88:a1:92:1b:3d:9f:ea:52:d3:67:5e:df:
         df:7e:d5:2c:a9:ee:4b:89:38:37:63:1a:b8:fb:91:46:8d:c0:
         32:61:41:dc:5d:25:25:d2:27:b1:a5:67:ab:52:0c:45:fd:c5:
         20:66:10:ac:d8:d0:07:78:cc:23:b2:e9:c4:02:ed:72:12:5f:
         bd:4e:fc:7a:e7:47:ba:e2:b9:33:1f:3e:27:01:53:2e:d4:dd:
         ed:ee:10:1e:ff:57:94:a5:28:46:ef:26:55:f2:ce:e8:71:9a:
         46:17:46:b5:a3:b7:de:31:c9:48:86:a3:45:e6:4d:0c:ca:9d:
         97:00:0a:5f:bf:37:ca:89:b7:01:f8:12:07:eb:3d:74:2f:fe:
         fb:78:9d:44:28:5a:e8:e8:fe:c6:cb:5e:6a:c4:3d:15:c9:1e:
         65:34:b7:2a:ca:25:71:dd:57:17:f0:83:c6:5e:ba:ee:4c:5e:
         6c:fb:25:ca:80:9c:c0:03:4a:7e:b5:10:c6:af:c1:8b:dd:1e:
         a9:2d:e7:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:05:59 2025 by rpki-client