Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/E72HhRPy8c8xTnuaHhK1dDzZUS4.roa
File:                     E72HhRPy8c8xTnuaHhK1dDzZUS4.roa (raw, json)
Hash identifier:          R/e78uQ1ARxrwBJjYKU7Tm0P2P78R0wTQ9bn/IoAiZo=
Subject key identifier:   13:BD:87:85:13:F2:F1:CF:31:4E:7B:9A:1E:12:B5:74:3C:D9:51:2E
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       03FA
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/E72HhRPy8c8xTnuaHhK1dDzZUS4.roa
Signing time:             Tue 01 Apr 2025 01:32:10 +0000
ROA not before:           Tue 01 Apr 2025 01:32:10 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:6b:dc00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 14 Apr 2025 06:50:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1018 (0x3fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr  1 01:32:10 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=13BD878513F2F1CF314E7B9A1E12B5743CD9512E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:84:f1:05:d5:f6:53:28:53:cb:77:d7:98:c5:
                    fb:8c:b7:fd:c5:4d:d4:63:2a:27:72:89:a6:2e:2f:
                    65:dc:5b:99:fa:c2:2a:73:fd:19:2d:90:f3:2e:61:
                    0c:dc:05:70:77:2c:24:c5:eb:ac:b2:7e:cf:b8:6e:
                    c1:fe:c2:c6:08:65:63:ba:ea:dc:b5:24:25:48:46:
                    ec:38:bd:11:a2:cf:0f:7c:b6:b4:f8:59:04:a5:ce:
                    20:c0:a8:bf:0b:ab:80:07:75:26:c6:c5:d6:76:fd:
                    ea:66:fe:6f:40:91:04:7a:52:bd:c7:00:82:98:d3:
                    30:0e:85:2b:3e:65:33:af:fb:1c:1e:e5:8e:52:f9:
                    50:c4:d3:de:05:30:aa:bc:81:24:13:7e:d2:84:11:
                    fd:c2:ae:d3:23:df:55:bd:65:30:a9:41:00:1f:4a:
                    07:05:46:30:c4:57:b7:0b:c8:89:53:a3:51:44:e2:
                    6d:43:f3:45:df:fa:fa:5c:7c:dd:aa:42:b7:a0:91:
                    72:dc:df:a4:b9:26:de:fb:57:3d:2a:66:ab:19:cb:
                    07:aa:05:8d:82:b0:ef:4e:fd:3a:2b:a1:3e:bc:49:
                    1a:8f:8b:7f:9b:ac:c2:6f:83:bd:95:cf:2a:04:22:
                    57:55:5d:ea:72:ab:38:16:7a:0c:0e:ce:69:a4:35:
                    58:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:BD:87:85:13:F2:F1:CF:31:4E:7B:9A:1E:12:B5:74:3C:D9:51:2E
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/E72HhRPy8c8xTnuaHhK1dDzZUS4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:dc00::/40

    Signature Algorithm: sha256WithRSAEncryption
         7d:c9:6e:aa:45:b6:c5:5e:83:d4:6a:62:3b:a4:af:c5:f7:4f:
         c1:a9:b3:a1:f0:cf:03:e9:bd:29:e6:78:85:43:15:64:70:5c:
         18:08:d6:98:8b:aa:1a:8b:e7:7b:11:5d:2e:22:c3:ff:c5:90:
         39:c0:ae:ac:5e:ac:19:52:bd:75:10:5e:51:63:d7:1f:6a:a6:
         db:3b:77:2c:8d:a2:b2:02:fd:e5:1f:5f:5e:1b:83:9e:fb:b2:
         68:52:91:79:1a:84:57:e0:66:03:14:4d:d6:7f:d7:b3:80:5f:
         f4:15:55:c4:23:f0:32:a1:93:39:79:70:20:f7:8a:74:fe:94:
         91:f4:db:c0:da:0f:47:c5:27:d2:a4:74:f7:8f:c7:55:96:85:
         2f:94:40:89:62:12:4e:b6:df:96:ed:23:8d:54:82:4e:7d:b9:
         ce:96:21:86:28:b2:49:5c:e4:64:ee:b5:5a:95:f0:81:82:04:
         f3:94:b3:e7:2d:78:c0:46:92:af:3a:6a:b2:7b:f5:f0:03:a0:
         bc:ad:12:24:4e:cb:af:df:83:cf:18:98:78:60:aa:a7:dc:ae:
         59:76:4b:15:07:dc:34:b2:eb:6e:99:d6:0b:96:4d:46:38:f8:
         6c:35:ff:7a:11:01:75:79:d4:a3:40:c2:57:b6:e7:76:eb:10:
         d0:0d:41:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:08:18 2025 by rpki-client