Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Q7qvLUge3kw80SSDZDhugkFJgvc.roa
File:                     Q7qvLUge3kw80SSDZDhugkFJgvc.roa (raw, json)
Hash identifier:          +cxD77Dw45xy07J9cR2YIRb+z3xoKY5jaKt5GWHSIM0=
Subject key identifier:   43:BA:AF:2D:48:1E:DE:4C:3C:D1:24:83:64:38:6E:82:41:49:82:F7
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       048D
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Q7qvLUge3kw80SSDZDhugkFJgvc.roa
Signing time:             Tue 01 Apr 2025 01:45:43 +0000
ROA not before:           Tue 01 Apr 2025 01:45:43 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:6b::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 14 Apr 2025 05:12:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1165 (0x48d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr  1 01:45:43 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=43BAAF2D481EDE4C3CD1248364386E82414982F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:69:d1:06:f3:8c:cb:13:a4:09:a4:5c:b5:f8:
                    9b:65:a5:48:ec:21:a5:4c:fb:e8:9e:f2:b9:d8:b6:
                    d8:84:e9:a3:c6:a6:ee:65:c6:e3:b2:58:c6:f5:fd:
                    f9:c5:b9:3c:0c:cc:8b:be:c3:8e:7a:10:5a:81:d3:
                    55:34:32:f8:1b:9a:91:40:99:c0:f4:2e:39:85:55:
                    95:aa:75:e3:e2:8b:ed:f8:95:e3:a8:53:9b:83:55:
                    3e:16:8a:3f:68:2e:de:59:a7:7a:fc:41:f3:3a:1b:
                    5b:c8:f1:96:5d:c8:4b:3f:2f:9f:8d:66:88:4d:50:
                    de:4e:1d:58:2b:d1:29:5c:7d:84:62:bf:21:17:55:
                    37:f0:aa:16:96:6a:62:d1:e0:a4:fb:a8:de:f9:04:
                    97:f8:77:28:a9:3f:c6:86:37:b8:d4:1e:03:c8:7f:
                    0d:76:87:ef:ed:48:cf:cb:a0:af:bd:89:85:70:4a:
                    35:b4:92:85:76:e9:a7:11:1c:44:35:62:ac:0c:d5:
                    18:c7:dd:7f:11:f5:a0:2d:c8:c2:ad:44:64:a7:4b:
                    7b:9a:c4:85:e4:e2:d7:07:a8:0e:98:4c:56:67:03:
                    08:7d:e6:26:7c:56:01:61:4a:54:7c:e0:c7:64:65:
                    48:43:f1:0b:77:75:d4:1e:36:aa:55:ee:ba:02:79:
                    28:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:BA:AF:2D:48:1E:DE:4C:3C:D1:24:83:64:38:6E:82:41:49:82:F7
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Q7qvLUge3kw80SSDZDhugkFJgvc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b::/40

    Signature Algorithm: sha256WithRSAEncryption
         2c:af:07:fd:e4:be:8d:01:c8:a9:f3:c2:1a:d7:d0:cc:7a:9b:
         58:50:f1:7f:ed:3d:af:74:1f:09:61:93:2a:b6:a2:88:18:83:
         82:48:df:0f:6a:7f:6d:fb:2b:57:4d:93:29:f5:31:2d:86:01:
         5b:13:aa:92:07:4d:c2:75:ab:82:de:0b:d0:d1:38:6b:06:8d:
         66:82:2b:7e:6c:eb:89:c7:8a:05:80:28:f7:1a:03:b4:0f:58:
         b1:cd:5b:b4:40:0f:d0:f3:bb:05:b0:28:4d:dc:aa:23:57:00:
         d3:13:89:6e:b4:84:53:48:76:4c:80:7b:68:af:db:54:42:0e:
         fa:91:e9:04:24:26:ab:e0:14:8f:74:69:42:7f:c2:1a:c0:c3:
         74:b3:2a:26:bd:68:13:d4:76:91:66:f0:2a:f4:78:3f:e5:a5:
         a1:15:76:08:d2:38:97:ba:47:cf:1a:28:26:d8:d4:3f:44:1e:
         9c:20:44:a2:db:af:f7:56:db:c7:33:34:4c:3f:5a:e3:57:3e:
         53:6b:56:4b:c8:04:ad:ab:d1:6a:a0:8f:45:4f:c5:59:27:c0:
         10:6e:57:0f:d7:ea:34:89:cc:cc:71:8b:14:6c:f3:98:3e:c4:
         e1:ec:79:f3:7f:60:13:75:7a:05:c3:58:f4:9b:4a:e8:a3:5d:
         07:36:ac:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:02:02 2025 by rpki-client