Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Oc6FvzXPcJfFKGD0a2orwFzRcGc.roa
File:                     Oc6FvzXPcJfFKGD0a2orwFzRcGc.roa (raw, json)
Hash identifier:          hlNGcXUG1BPaVl/WKB+5j9Y9H8LnEmTus01Oi3smzO4=
Subject key identifier:   39:CE:85:BF:35:CF:70:97:C5:28:60:F4:6B:6A:2B:C0:5C:D1:70:67
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       04D5
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Oc6FvzXPcJfFKGD0a2orwFzRcGc.roa
Signing time:             Tue 01 Apr 2025 01:53:03 +0000
ROA not before:           Tue 01 Apr 2025 01:53:03 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:6b:c900::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 14 Apr 2025 05:12:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1237 (0x4d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr  1 01:53:03 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=39CE85BF35CF7097C52860F46B6A2BC05CD17067
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a8:a5:23:4c:16:a9:ab:d3:6c:b9:cf:62:0d:
                    e2:91:06:20:94:54:99:6f:73:bc:2f:7c:06:f9:d9:
                    4a:27:60:17:61:98:0e:eb:d8:a5:a1:2d:2c:7b:d8:
                    6c:41:6a:27:be:dc:37:18:94:fe:59:9e:e7:ed:b9:
                    14:95:6f:6e:c3:8f:71:03:5a:bd:1d:ca:38:e5:6b:
                    2a:b7:1b:6c:11:39:ea:88:e1:a7:92:2f:81:7b:fa:
                    a6:ba:b4:20:89:1d:d4:ea:47:94:23:12:a5:a5:92:
                    b1:6e:95:bb:fb:8c:7a:d1:c4:f9:46:19:56:9a:e0:
                    a2:b9:ab:f1:f3:cd:dc:f3:c1:c1:f2:a6:6d:28:90:
                    d4:64:19:48:36:0e:21:b6:1e:34:d2:09:45:db:91:
                    88:e5:88:87:b7:86:b3:7f:a7:14:32:5a:79:88:3a:
                    d5:51:42:05:1d:d6:cd:10:c8:e9:68:4b:0f:8b:b5:
                    11:1c:db:e2:ba:a4:76:41:f5:bd:ee:f2:4a:70:fe:
                    08:04:7e:20:9b:70:79:9d:70:81:c0:41:16:80:e6:
                    57:b0:df:23:56:6c:87:f9:f5:49:a7:6c:18:0b:89:
                    c7:fb:1c:3d:a0:af:7a:1c:13:a2:70:65:d9:c2:c3:
                    0b:77:3b:39:31:a0:3b:cf:b4:49:a5:8a:15:29:98:
                    2f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:CE:85:BF:35:CF:70:97:C5:28:60:F4:6B:6A:2B:C0:5C:D1:70:67
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Oc6FvzXPcJfFKGD0a2orwFzRcGc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:c900::/40

    Signature Algorithm: sha256WithRSAEncryption
         7d:b5:55:e7:16:90:87:58:9e:fc:a2:c8:c0:ef:60:1e:9f:4a:
         c0:35:7c:08:b7:1b:a4:d8:0e:28:49:44:f3:80:f0:7d:14:ad:
         06:df:e5:b5:6f:65:50:14:c3:13:39:f2:0f:61:33:98:57:5d:
         9e:34:ec:66:5a:cf:b6:d5:63:d4:7a:91:bd:cc:51:7e:e5:0e:
         43:58:16:84:00:d7:46:69:c5:a9:58:7c:6c:5b:09:2a:9f:4b:
         17:88:c8:41:b7:31:6e:e4:3d:fc:c1:91:0a:58:5e:17:0b:dc:
         68:b0:e5:97:59:a1:04:24:94:e2:ed:ee:5b:5a:09:c7:dd:8c:
         27:57:a6:26:d4:d7:5c:10:d1:b4:c4:53:49:8d:22:95:b4:7b:
         59:82:86:44:10:ed:27:d4:00:cc:8e:fd:13:43:e3:ed:ac:d5:
         88:b0:71:d9:bc:ae:cb:59:e4:f8:47:f4:89:af:91:b8:3a:77:
         24:a1:da:99:72:2f:72:cf:5f:00:f3:d9:6e:7c:b8:f3:1b:87:
         af:45:30:1b:c3:2b:04:13:72:79:db:e9:c2:20:2d:f4:d0:57:
         e8:70:f7:47:ac:2b:91:d2:80:97:9d:8e:0c:5b:83:6c:88:63:
         02:bf:45:28:f4:db:d8:4e:ed:48:8a:f6:56:d1:8e:56:d3:a9:
         c2:a0:5e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:59:39 2025 by rpki-client