Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Ns17hQk6C5ODXYyOmXcsnjBoxvE.roa
File:                     Ns17hQk6C5ODXYyOmXcsnjBoxvE.roa (raw, json)
Hash identifier:          JjcDYbcIqBl9AqkEVccrYewGVjlNk/T8vcjBOgYrKFk=
Subject key identifier:   36:CD:7B:85:09:3A:0B:93:83:5D:8C:8E:99:77:2C:9E:30:68:C6:F1
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       047F
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Ns17hQk6C5ODXYyOmXcsnjBoxvE.roa
Signing time:             Tue 01 Apr 2025 01:45:36 +0000
ROA not before:           Tue 01 Apr 2025 01:45:36 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:6b:b00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 14 Apr 2025 05:12:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1151 (0x47f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr  1 01:45:36 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=36CD7B85093A0B93835D8C8E99772C9E3068C6F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:03:df:a1:6d:9d:b4:d7:2b:5f:28:c0:98:c6:
                    07:c0:64:c7:f6:0c:bd:a3:a7:23:c8:93:75:13:42:
                    f8:de:1b:a6:e5:e1:ac:aa:de:ab:d9:a7:e4:4f:42:
                    ef:af:c1:15:50:9b:e0:bd:b0:ad:3b:c6:61:06:2a:
                    bd:78:fb:14:03:94:db:47:aa:ef:f3:41:6f:de:ce:
                    e5:0e:30:2b:01:cc:e4:0e:f3:1f:f4:e0:44:bb:48:
                    4b:cf:5d:74:41:6e:13:4a:b6:c6:25:bd:11:62:97:
                    49:e5:bc:90:fe:2c:f7:1e:1c:da:dc:0d:b9:e0:21:
                    d4:9a:80:4e:2e:a6:08:8b:74:df:fb:bb:6d:39:f1:
                    3d:45:91:b8:40:10:e2:7a:c2:d5:1e:4c:77:4b:34:
                    0f:95:00:30:8f:d7:29:3f:2e:d4:a6:9b:9e:35:bd:
                    6c:76:c7:5b:0c:eb:3c:3c:57:10:cf:bd:1c:f2:a6:
                    a4:a0:83:13:7a:85:93:bf:be:da:90:9a:24:c0:47:
                    5c:96:dd:14:ee:8a:51:c8:41:45:42:01:a1:87:ec:
                    44:5a:d4:f9:3d:ed:99:da:c2:c5:d8:7b:6e:f4:bf:
                    0a:4c:40:78:8a:fd:92:a0:6b:b0:9e:7a:e0:db:d1:
                    ab:6a:76:34:fc:35:6f:dc:da:0a:fd:17:cb:40:3f:
                    ff:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:CD:7B:85:09:3A:0B:93:83:5D:8C:8E:99:77:2C:9E:30:68:C6:F1
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Ns17hQk6C5ODXYyOmXcsnjBoxvE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:b00::/40

    Signature Algorithm: sha256WithRSAEncryption
         b2:3c:d3:6f:50:43:f9:9a:dd:8a:e1:f3:7c:3b:9c:45:39:b4:
         3a:d2:d2:54:41:0f:a2:e1:d9:6c:21:4e:eb:08:f8:a5:6b:c0:
         0a:fc:d9:3f:0b:ff:4d:6f:13:8f:36:a4:69:28:3f:c5:2f:d1:
         7a:f1:11:db:5c:15:31:75:74:81:07:e9:61:b7:70:c2:d0:36:
         3c:34:38:74:82:34:3b:fe:36:44:e5:03:ff:e5:63:6a:bf:5e:
         7c:36:e6:df:a0:bd:ed:86:af:4d:eb:b9:2e:35:44:14:70:e5:
         29:19:d4:9d:67:c5:68:83:18:da:26:f6:2c:02:80:d0:21:46:
         12:a6:62:bf:bb:f7:09:f3:ed:72:87:29:16:29:b3:a9:a9:d6:
         7a:93:3f:34:b2:33:a8:e2:e1:af:37:8a:49:55:6b:02:11:cb:
         c5:79:fb:7a:f2:fa:ca:92:18:9f:d8:16:fe:56:d0:48:d1:0f:
         e1:eb:59:87:88:b2:4e:9e:84:9f:e2:9b:93:9d:87:17:c7:18:
         be:00:ed:67:1f:41:e5:76:c5:e3:fc:53:3c:47:b9:98:4e:23:
         f5:4e:4c:2b:8d:27:71:58:7e:4c:e5:32:db:58:cc:3b:ef:96:
         48:7f:23:6d:aa:67:34:db:18:c8:cf:26:93:1d:ec:d5:91:1c:
         3e:f7:a5:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:04:48 2025 by rpki-client