Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/H_G4cpZmdYY_SCsZ7t1ACsu3UkA.roa
File:                     H_G4cpZmdYY_SCsZ7t1ACsu3UkA.roa (raw, json)
Hash identifier:          7e+cxQzt8LILvFAAUYqy2ahvDTpXVQq1bYviJIQLj7A=
Subject key identifier:   1F:F1:B8:72:96:66:75:86:3F:48:2B:19:EE:DD:40:0A:CB:B7:52:40
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       03CB
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/H_G4cpZmdYY_SCsZ7t1ACsu3UkA.roa
Signing time:             Tue 01 Apr 2025 01:28:50 +0000
ROA not before:           Tue 01 Apr 2025 01:28:50 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:6b:f000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 14 Apr 2025 05:12:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 971 (0x3cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr  1 01:28:50 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=1FF1B872966675863F482B19EEDD400ACBB75240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:dc:fb:1f:5c:7f:56:c6:40:93:95:14:ce:93:
                    86:a0:c5:b3:70:78:cb:12:45:7a:50:d1:c6:a7:40:
                    66:63:03:63:0a:0c:b3:19:92:8d:c9:6e:a2:ac:6f:
                    1f:8d:f6:6c:0d:45:8b:68:c0:31:b0:01:6c:ee:3c:
                    58:5a:40:cd:b1:af:7d:35:1c:43:61:6a:eb:d8:61:
                    01:6f:2f:8a:da:cb:f3:95:f4:46:aa:d5:bd:e0:93:
                    a8:9d:6b:0e:18:ea:e8:62:a8:0c:db:88:49:63:df:
                    01:c0:9c:75:c1:94:89:17:1a:24:ca:32:b0:0c:e7:
                    91:25:8e:5d:07:de:b6:9c:06:ad:08:81:6f:36:83:
                    6c:6c:e8:65:0f:0c:51:a6:bb:5d:c4:b1:d1:3c:62:
                    af:89:01:74:14:68:a1:82:c8:e1:93:07:82:0d:63:
                    2e:02:ba:a8:4f:ad:2b:d5:64:74:35:f0:a9:ec:df:
                    58:b9:5f:de:4a:70:b4:68:b6:ff:02:97:df:81:c9:
                    56:1a:02:3d:45:c4:08:c5:68:c1:73:cf:1b:92:12:
                    12:43:4c:6a:86:cd:7f:08:27:46:f2:9d:ca:61:40:
                    a4:2d:84:89:23:8d:60:10:58:b5:87:31:a7:fd:e4:
                    61:be:c3:d6:36:89:56:0d:cf:fe:2d:0f:49:01:bc:
                    e1:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:F1:B8:72:96:66:75:86:3F:48:2B:19:EE:DD:40:0A:CB:B7:52:40
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/H_G4cpZmdYY_SCsZ7t1ACsu3UkA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:f000::/40

    Signature Algorithm: sha256WithRSAEncryption
         5c:ba:7b:ec:2a:11:84:f6:03:0e:5d:84:10:3d:fe:c3:96:04:
         7e:10:50:57:65:a2:c7:d4:83:ce:ee:31:95:c9:1f:31:b0:f2:
         fc:09:24:9c:bb:71:3f:c1:1e:09:a6:41:20:a5:30:22:4d:16:
         71:d1:46:ba:87:b2:22:6b:9f:e9:6e:08:d6:b9:6b:51:90:7c:
         0e:15:08:f0:4a:e0:e7:f3:80:d1:50:37:60:fd:f7:5b:aa:62:
         7d:5c:4b:b0:6f:be:14:db:e4:90:75:7b:09:d2:e3:f6:23:0e:
         e8:1d:77:91:f5:a6:74:5a:05:78:0d:62:15:3d:93:e0:b2:b0:
         75:e6:fc:36:4d:1e:be:7f:c7:9f:e9:d7:78:a5:ab:f7:a7:95:
         56:a2:44:8a:41:2b:82:59:ad:0b:5b:09:fe:da:51:23:96:a3:
         66:bd:66:9f:60:03:bf:14:09:f8:3b:be:d2:01:aa:60:43:7e:
         f2:45:ee:9c:92:a2:68:ae:a7:b0:6a:fd:40:b1:05:51:e9:87:
         26:8a:fc:d0:c1:23:bf:01:d9:2e:9e:4f:15:59:f9:df:9b:28:
         39:28:7b:b4:3f:f4:ec:2b:b4:30:05:58:ff:b2:81:b9:03:2e:
         4f:a1:5e:1b:a1:d5:b3:e8:a0:33:cd:33:d5:07:61:bb:03:4e:
         15:8c:68:7f
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICA8swDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNTA0MDEw
MTI4NTBaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDFGRjFCODcyOTY2Njc1
ODYzRjQ4MkIxOUVFREQ0MDBBQ0JCNzUyNDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCn3PsfXH9WxkCTlRTOk4agxbNweMsSRXpQ0canQGZjA2MKDLMZ
ko3JbqKsbx+N9mwNRYtowDGwAWzuPFhaQM2xr301HENhauvYYQFvL4ray/OV9Eaq
1b3gk6idaw4Y6uhiqAzbiElj3wHAnHXBlIkXGiTKMrAM55Eljl0H3racBq0IgW82
g2xs6GUPDFGmu13EsdE8Yq+JAXQUaKGCyOGTB4INYy4CuqhPrSvVZHQ18Kns31i5
X95KcLRotv8Cl9+ByVYaAj1FxAjFaMFzzxuSEhJDTGqGzX8IJ0byncphQKQthIkj
jWAQWLWHMaf95GG+w9Y2iVYNz/4tD0kBvOHTAgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQUH/G4cpZmdYY/SCsZ7t1ACsu3UkAwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS9IX0c0Y3BabWRZWV9TQ3NaN3QxQUNzdTNVa0Eu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAa/AwDQYJKoZIhvcNAQELBQADggEBAFy6e+wqEYT2Aw5dhBA9
/sOWBH4QUFdlosfUg87uMZXJHzGw8vwJJJy7cT/BHgmmQSClMCJNFnHRRrqHsiJr
n+luCNa5a1GQfA4VCPBK4OfzgNFQN2D991uqYn1cS7BvvhTb5JB1ewnS4/YjDugd
d5H1pnRaBXgNYhU9k+CysHXm/DZNHr5/x5/p13ilq/enlVaiRIpBK4JZrQtbCf7a
USOWo2a9Zp9gA78UCfg7vtIBqmBDfvJF7pySomiup7Bq/UCxBVHphyaK/NDBI78B
2S6eTxVZ+d+bKDkoe7Q/9OwrtDAFWP+ygbkDLk+hXhuh1bPooDPNM9UHYbsDThWM
aH8=
-----END CERTIFICATE-----
Generated at Mon Apr 7 08:05:05 2025 by rpki-client