Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/FdHrNV_KFjiQ0ShXXXXhAlm4J4c.roa
File:                     FdHrNV_KFjiQ0ShXXXXhAlm4J4c.roa (raw, json)
Hash identifier:          RtND3hjyiKlhFIyuabci6cNh6caIDgTDTxYGloGnxTg=
Subject key identifier:   15:D1:EB:35:5F:CA:16:38:90:D1:28:57:5D:75:E1:02:59:B8:27:87
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0438
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/FdHrNV_KFjiQ0ShXXXXhAlm4J4c.roa
Signing time:             Tue 01 Apr 2025 01:39:28 +0000
ROA not before:           Tue 01 Apr 2025 01:39:28 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:6b:3800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 14 Apr 2025 05:12:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1080 (0x438)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr  1 01:39:28 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=15D1EB355FCA163890D128575D75E10259B82787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a0:fd:a7:90:45:a2:b1:a2:ed:fd:c9:ad:81:
                    5b:72:25:de:aa:ca:33:de:a8:d7:17:2c:68:21:0a:
                    a3:13:2b:57:50:95:a4:01:8e:01:c8:e8:d3:15:c8:
                    8c:bb:f5:a8:aa:96:85:f0:3a:04:b6:f8:70:b1:df:
                    d4:46:56:9e:12:77:fa:0f:34:a0:78:15:19:6e:2c:
                    16:19:9e:64:c8:60:85:89:03:b7:c7:e5:26:97:a4:
                    90:cd:ae:f6:58:95:c5:58:ef:7b:24:27:7d:a4:9f:
                    d8:0d:c0:a4:80:66:b6:e5:49:e6:56:4f:c1:5b:02:
                    b8:64:ae:b3:5f:97:ef:72:fd:45:6c:3a:66:20:dd:
                    c8:6c:3c:2f:e5:b9:c1:13:7f:94:e0:60:02:80:c0:
                    ee:d2:72:e9:97:20:97:da:a4:19:5f:d1:59:8b:ad:
                    e3:3c:96:5a:ed:91:53:bf:ab:a9:08:1a:01:03:4b:
                    fa:de:c4:a0:e0:c3:3b:e8:19:eb:49:5c:db:d1:0d:
                    85:ca:ce:f9:32:91:e7:d6:aa:d3:de:38:48:0f:19:
                    b4:22:74:74:8d:f8:f2:29:a4:fa:9f:27:9d:74:b8:
                    15:0e:8b:b0:37:aa:db:42:44:d7:b2:87:11:a5:55:
                    ae:7d:c5:5e:c9:e0:a0:53:68:c8:8e:44:e7:2d:1c:
                    5e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:D1:EB:35:5F:CA:16:38:90:D1:28:57:5D:75:E1:02:59:B8:27:87
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/FdHrNV_KFjiQ0ShXXXXhAlm4J4c.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:3800::/40

    Signature Algorithm: sha256WithRSAEncryption
         82:c6:04:63:ce:20:cd:97:47:fe:cf:e0:e2:05:01:36:64:ba:
         35:c1:cf:04:1e:1c:f8:82:82:67:af:ef:f9:18:af:d9:44:eb:
         fd:1b:9b:c6:41:e8:9f:8d:a6:59:36:40:02:13:7b:be:a3:c5:
         2d:ac:a8:31:f6:44:33:fe:27:0f:aa:3c:33:22:09:58:55:76:
         15:82:da:4c:14:14:e5:fa:dc:bf:62:09:f9:b6:53:c2:44:fe:
         e5:80:03:75:0a:f2:96:a9:af:70:1e:d9:ab:b2:6f:e0:85:16:
         79:69:9f:6e:c1:25:17:fd:30:eb:41:5e:bd:80:60:d1:a6:fd:
         34:fb:a5:72:1a:8f:31:cc:28:d7:c8:f1:b5:8f:9b:be:6e:97:
         04:ff:32:1b:23:29:68:71:38:0c:cf:11:19:41:1a:c4:53:10:
         c2:00:32:91:18:24:a3:26:bd:1a:bf:cd:75:1c:bc:32:dc:90:
         1e:58:69:66:30:ab:0c:b6:c5:59:14:40:01:f8:00:66:e8:86:
         e7:a5:2d:1e:f4:bd:02:ca:57:62:0c:9a:15:4a:23:7d:7e:f5:
         48:83:91:7e:8e:13:10:ac:78:6a:60:8d:ac:eb:22:4b:12:68:
         6d:79:1d:42:ef:59:24:cf:eb:7a:51:44:73:85:6c:cc:11:74:
         63:b5:3f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:04:23 2025 by rpki-client