Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/M55Pr9xxpM6Kq33GT9W5OT0hjrI.roa
File:                     M55Pr9xxpM6Kq33GT9W5OT0hjrI.roa (raw, json)
Hash identifier:          eoRIlwWNiPiWypJOhtM3vftFWWr8z9z/K6tjUOaSG/Y=
Subject key identifier:   33:9E:4F:AF:DC:71:A4:CE:8A:AB:7D:C6:4F:D5:B9:39:3D:21:8E:B2
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       04CA
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/M55Pr9xxpM6Kq33GT9W5OT0hjrI.roa
Signing time:             Tue 01 Apr 2025 01:52:57 +0000
ROA not before:           Tue 01 Apr 2025 01:52:57 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:60:f000::/45 maxlen: 45
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 14 Apr 2025 05:12:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1226 (0x4ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr  1 01:52:57 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=339E4FAFDC71A4CE8AAB7DC64FD5B9393D218EB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:b0:9a:7f:6a:4f:fe:c5:3d:c8:91:e7:75:cf:
                    e4:c6:e9:84:6f:73:31:1b:f0:b5:b2:88:36:24:a7:
                    ba:c4:c1:50:30:d8:e0:51:79:89:be:ba:90:83:99:
                    09:2e:1d:e9:24:54:89:5e:2d:68:b9:e2:b4:3c:60:
                    f6:f0:01:96:17:94:50:c7:b4:b7:42:ed:79:27:74:
                    73:92:0e:00:f6:8c:1e:c9:4a:19:3b:86:7f:fe:47:
                    d7:3e:0e:78:8b:23:fa:e9:cd:07:ab:1e:20:15:80:
                    cf:45:07:9f:b3:5f:57:61:fc:26:4a:48:64:32:f8:
                    6a:de:09:53:03:2a:d0:30:18:49:f5:20:4b:da:d4:
                    92:3a:25:60:dd:85:79:55:64:e8:55:8d:c8:f5:5b:
                    31:51:7c:4c:2a:ca:55:ea:51:b8:ca:67:0e:94:a4:
                    c7:e0:68:75:bd:79:7b:47:24:c3:a1:67:09:bf:35:
                    65:ef:0d:69:17:a7:9a:a7:e4:a5:77:68:4f:f4:be:
                    bd:b3:48:9e:58:13:b3:68:8e:ea:74:5c:f4:7d:65:
                    77:fb:02:82:3f:1e:ce:16:10:c1:93:60:cb:15:a4:
                    6b:f7:08:9e:90:09:b4:18:ab:34:0f:e1:3b:77:20:
                    2b:06:53:1e:98:28:f7:0f:85:0b:dc:6f:6c:30:2c:
                    e5:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:9E:4F:AF:DC:71:A4:CE:8A:AB:7D:C6:4F:D5:B9:39:3D:21:8E:B2
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/M55Pr9xxpM6Kq33GT9W5OT0hjrI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:60:f000::/45

    Signature Algorithm: sha256WithRSAEncryption
         c4:61:dc:70:75:03:bb:20:66:03:25:79:2d:e9:5e:f4:0d:35:
         f4:d7:14:b7:e6:ed:a9:f3:9e:4a:34:71:de:65:47:40:9f:c6:
         48:14:38:78:16:a1:91:be:75:05:ad:30:09:69:57:43:43:3c:
         3a:bf:31:9b:70:aa:39:72:b6:31:12:be:c5:e8:4a:b6:07:53:
         46:f1:2a:24:eb:44:d3:62:57:1b:60:d3:10:a0:2f:55:85:5e:
         d3:47:3b:ac:77:4e:a0:98:d5:1b:26:30:cc:77:02:58:0f:c0:
         33:6d:b5:e4:8d:9c:49:f7:5e:db:e6:15:ee:3a:55:7f:2e:11:
         bb:c8:70:d1:2f:77:27:f7:a2:b5:0a:d9:d6:57:2a:ae:49:21:
         15:41:d7:4f:24:3e:6a:6b:9d:a2:84:55:8a:4e:fa:99:4f:3e:
         12:ff:b9:f2:7d:b2:64:5d:65:7b:96:f3:5c:94:37:ec:24:46:
         bd:ff:f2:15:ba:27:7e:8d:98:43:14:58:d4:19:03:1a:73:56:
         b2:64:48:a3:3f:bf:2a:97:a7:18:4d:d2:cb:e9:f9:7a:43:4f:
         fb:b9:06:4c:69:82:1f:e7:6b:db:02:4d:1b:dd:23:68:cf:22:
         98:62:f6:86:d6:04:e8:fa:0e:c4:0d:e4:29:0b:4e:d0:98:a4:
         ed:f1:2c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:07:15 2025 by rpki-client