Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/RAr_iJdEWoSj_Cd91ZAZPPNzOz8.roa
File:                     RAr_iJdEWoSj_Cd91ZAZPPNzOz8.roa (raw, json)
Hash identifier:          fI5v7d4u0qIohoHR0FQzfX8B9JuXKLyIXglHwHQVe+0=
Subject key identifier:   44:0A:FF:88:97:44:5A:84:A3:FC:27:7D:D5:90:19:3C:F3:73:3B:3F
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       03F9
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/RAr_iJdEWoSj_Cd91ZAZPPNzOz8.roa
Signing time:             Tue 01 Apr 2025 01:32:09 +0000
ROA not before:           Tue 01 Apr 2025 01:32:09 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:6b:7b00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 14 Apr 2025 05:12:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1017 (0x3f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr  1 01:32:09 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=440AFF8897445A84A3FC277DD590193CF3733B3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:2d:56:f3:02:34:83:c8:1e:a6:79:8e:e7:27:
                    9d:08:28:db:c9:1f:5a:79:e5:fd:9b:d7:ef:f2:8a:
                    35:b1:c9:7f:63:e5:05:71:e6:1c:b7:29:c0:59:58:
                    62:95:2d:97:61:bd:6d:62:ce:10:01:0e:f9:87:71:
                    58:2f:58:f2:68:20:74:f8:91:c1:34:04:5b:8f:26:
                    40:d8:76:21:d8:84:5a:41:d9:ae:47:24:ed:12:59:
                    60:59:df:07:6e:6a:95:9b:e1:1a:ad:e3:95:ce:79:
                    96:1e:be:7f:88:20:6e:30:69:fe:b8:bf:7f:35:ba:
                    88:22:bb:38:32:f7:ed:68:9a:07:46:ec:f8:84:bf:
                    20:fc:04:18:c7:2b:36:c8:31:ca:05:cd:d8:c3:88:
                    9f:1e:80:37:4f:79:63:fd:cc:22:95:d3:f5:cb:a1:
                    ab:10:62:21:48:6f:76:50:2f:a7:85:94:d5:ae:ab:
                    da:6d:c3:f8:72:99:2f:4e:08:fd:1a:13:a1:64:38:
                    6b:e2:d3:ab:66:f0:4b:5f:db:2f:8b:c2:ea:0b:09:
                    bd:ac:9a:15:49:d8:33:8d:ce:5a:37:56:8d:a7:d5:
                    d1:d9:8f:d7:7a:59:68:4a:af:34:ff:c6:76:f8:86:
                    03:97:a3:14:8e:79:8a:f5:ee:9d:00:fb:f7:05:89:
                    05:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:0A:FF:88:97:44:5A:84:A3:FC:27:7D:D5:90:19:3C:F3:73:3B:3F
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/RAr_iJdEWoSj_Cd91ZAZPPNzOz8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:7b00::/40

    Signature Algorithm: sha256WithRSAEncryption
         35:ba:3a:d6:6f:9e:39:90:af:54:56:b1:e3:d6:7e:1e:0c:7a:
         cc:03:50:24:40:33:20:f3:8a:da:5f:e4:8a:ea:9d:47:79:c4:
         f7:cf:3b:42:c1:fc:ff:64:9e:5f:13:5e:01:38:c8:e0:f4:09:
         d8:59:96:aa:46:ec:b3:6a:1b:7e:58:78:eb:4f:7f:dd:f5:7c:
         df:a0:22:db:ba:8e:97:95:ed:69:da:89:3d:2c:ad:3d:aa:d8:
         56:0f:dd:dd:df:1c:74:2f:d5:a6:73:23:ad:0d:32:b5:77:c7:
         f6:d3:f1:3b:ff:08:a4:5b:a1:85:7f:56:71:00:92:fe:ed:d5:
         68:81:47:23:15:e2:4a:63:33:53:02:c7:4b:05:85:7e:03:24:
         55:01:d2:2f:b5:a9:89:07:07:09:5a:49:d3:93:5b:63:da:62:
         02:12:a8:8a:c6:bc:c9:3f:3a:4c:fe:e1:61:8b:8c:df:b1:e5:
         ac:de:5f:e4:86:88:71:e8:61:bf:b1:9f:5e:e0:08:bd:d2:e7:
         aa:01:ee:22:85:09:d4:0c:75:4b:51:05:c4:f2:d0:d7:d0:e3:
         51:b5:20:98:c2:af:a6:2c:f3:5a:14:40:c2:b5:7c:53:f5:0b:
         fd:08:49:7c:8f:57:a3:ee:8d:d6:f7:8f:ad:fb:02:06:9a:73:
         10:fd:bc:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:05:51 2025 by rpki-client