Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/IOrCBeYO1dP4xvLaw0O1I3E-HXM.roa
File:                     IOrCBeYO1dP4xvLaw0O1I3E-HXM.roa (raw, json)
Hash identifier:          wbwIEO/Jz5M/nAtR9EekKIapio7VEIYEOOL+6vKx+yE=
Subject key identifier:   20:EA:C2:05:E6:0E:D5:D3:F8:C6:F2:DA:C3:43:B5:23:71:3E:1D:73
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0466
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/IOrCBeYO1dP4xvLaw0O1I3E-HXM.roa
Signing time:             Tue 01 Apr 2025 01:42:31 +0000
ROA not before:           Tue 01 Apr 2025 01:42:31 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:6b:9f00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 14 Apr 2025 07:48:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1126 (0x466)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr  1 01:42:31 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=20EAC205E60ED5D3F8C6F2DAC343B523713E1D73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:cd:30:4d:28:bb:fb:72:9f:69:7b:5b:1b:d7:
                    27:4c:f4:9a:bb:fd:eb:b8:dc:a5:92:35:fb:0a:72:
                    c9:de:72:15:9a:9a:85:c4:e5:ff:f4:66:1d:c3:76:
                    db:49:95:ff:ca:74:40:24:08:24:6e:2c:19:7f:27:
                    d9:d8:b7:e4:a1:88:b0:e2:a7:a4:51:1b:fb:b8:d7:
                    43:4d:65:86:d7:00:d6:ae:ae:13:5f:10:c0:07:2e:
                    fb:23:d1:a1:93:94:b1:0b:c8:c5:7c:86:90:6c:7b:
                    ec:75:2e:c4:78:3f:fb:a8:11:19:50:5e:e8:d3:3f:
                    8e:89:ee:45:e0:91:8c:59:3c:98:9e:78:63:27:ba:
                    24:0e:10:42:cf:b1:78:b2:22:07:53:38:90:77:ca:
                    08:fe:44:c3:97:2d:77:f7:2d:6c:81:7e:4c:94:fd:
                    c7:4a:f8:34:a1:9d:df:ee:b2:73:55:69:d3:b2:82:
                    30:3b:e6:e4:61:64:c8:9d:aa:14:1f:12:7b:09:ed:
                    d5:87:be:e5:95:e3:56:1a:83:3d:53:6e:39:09:0c:
                    93:df:3e:b6:d2:6b:ee:d9:b9:b4:c1:3d:6d:7a:08:
                    6d:eb:4c:e2:8f:74:c4:56:9f:34:fa:65:72:8e:99:
                    38:f8:dc:fe:ab:e7:d4:9d:29:e2:1c:74:53:16:e8:
                    e8:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:EA:C2:05:E6:0E:D5:D3:F8:C6:F2:DA:C3:43:B5:23:71:3E:1D:73
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/IOrCBeYO1dP4xvLaw0O1I3E-HXM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:9f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         ba:e4:1f:d2:df:fe:35:f1:3f:16:fe:42:95:9a:7c:b2:78:7b:
         77:ad:97:25:c5:7d:e5:e9:ed:6c:58:e0:0f:f6:8b:fd:e6:23:
         81:80:80:07:7c:6b:0f:c2:59:23:51:5d:e6:8b:80:8c:ff:4f:
         01:ed:53:39:9b:10:a9:ec:72:10:c7:4e:6c:da:1c:5c:a2:50:
         ed:a8:15:28:3c:e2:51:31:7d:ea:c5:a5:6b:8d:48:68:6d:b5:
         b8:6d:a4:56:0d:a7:7a:64:4b:4d:24:e4:f4:cd:96:47:4b:a6:
         fd:87:3a:51:ca:f5:06:23:08:a9:04:50:d0:4a:54:5f:be:30:
         47:5c:7c:ad:2d:9a:57:8d:c4:9c:3a:36:57:7b:82:66:d5:cd:
         a2:96:cf:54:b9:c7:2d:88:bb:43:d6:0e:7d:a0:db:75:8f:c6:
         d7:b2:9b:66:70:ec:f4:72:90:10:ef:5c:9b:26:47:b5:d9:39:
         42:4c:c4:b3:5f:0c:15:a3:f7:0f:e2:ab:fa:ab:34:fb:d5:08:
         0d:f3:90:56:24:c5:f1:92:5f:e8:4f:b9:bf:a7:1a:07:39:e4:
         1d:37:06:c7:12:4b:7c:28:1f:ed:92:72:39:bc:e8:da:e8:54:
         50:71:7f:60:b2:25:93:8e:18:e5:27:80:0e:3c:98:d6:1f:4c:
         f4:fd:fa:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:15:41 2025 by rpki-client