Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/RNuMJyAgSlqoIqK_te4xweJF3bM.roa
File:                     RNuMJyAgSlqoIqK_te4xweJF3bM.roa (raw, json)
Hash identifier:          EyAHiOsYIhlhJQc84Tb6MeSttXMtWyS2SaKwjPdpgxA=
Subject key identifier:   44:DB:8C:27:20:20:4A:5A:A8:22:A2:BF:B5:EE:31:C1:E2:45:DD:B3
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       049B
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/RNuMJyAgSlqoIqK_te4xweJF3bM.roa
Signing time:             Tue 01 Apr 2025 01:49:19 +0000
ROA not before:           Tue 01 Apr 2025 01:49:19 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:6b:b800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 14 Apr 2025 05:12:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1179 (0x49b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr  1 01:49:19 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=44DB8C2720204A5AA822A2BFB5EE31C1E245DDB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f1:b1:a6:07:ba:3e:70:d3:7c:ec:a0:0b:77:
                    15:53:12:45:93:0e:61:fe:2f:b6:a5:a5:51:ea:bc:
                    c6:23:87:ef:f7:3b:d0:d9:0c:88:2e:0d:de:1b:59:
                    24:e9:97:de:4c:20:02:45:5d:ca:f5:de:10:97:2e:
                    1f:64:e2:07:fc:75:da:cc:3e:3a:88:5e:aa:51:f9:
                    71:6d:a6:8f:1f:40:73:d3:47:34:96:58:c9:ef:78:
                    71:15:c3:f2:ba:3d:ac:9a:ef:23:c0:07:c3:d4:54:
                    ab:4a:7d:6c:d1:41:56:cd:6a:b8:c2:2a:dc:d5:b5:
                    d3:e1:82:fd:07:d4:1d:47:55:9b:8b:15:34:de:9d:
                    89:06:69:9d:8c:0c:2b:7d:86:98:32:74:11:70:54:
                    af:e5:83:3a:bf:56:f5:1c:5b:0d:71:9c:11:d3:98:
                    37:38:97:7f:b0:36:72:7d:ad:45:12:46:6e:38:39:
                    d1:fd:c2:ff:26:ab:2c:10:f6:7d:40:c5:d9:54:1c:
                    7c:2e:2b:98:86:cb:4c:32:2e:d2:4a:af:72:c7:46:
                    aa:23:2f:81:93:7a:52:a5:d2:74:dd:ed:e0:1c:b0:
                    34:7a:f9:e2:2f:57:dd:18:f9:00:1b:fc:7e:fd:b2:
                    4d:9e:b6:23:cd:8b:2c:96:4f:54:43:01:85:0e:a2:
                    8c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:DB:8C:27:20:20:4A:5A:A8:22:A2:BF:B5:EE:31:C1:E2:45:DD:B3
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/RNuMJyAgSlqoIqK_te4xweJF3bM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:b800::/40

    Signature Algorithm: sha256WithRSAEncryption
         86:b4:64:4c:2e:66:48:bf:53:62:c8:dd:67:4c:ab:48:38:df:
         6a:6a:df:85:2c:f0:5a:74:db:46:41:f0:76:8b:dc:0f:4c:f1:
         60:40:d3:02:5b:9f:16:4e:e9:29:98:9e:c6:d8:5e:65:8b:b4:
         74:4c:e8:33:f8:b4:a5:a2:83:47:7c:f4:70:38:5b:2a:63:2e:
         e6:2d:07:ff:36:46:53:2a:fc:e9:a7:e7:5f:ac:f1:04:7e:ba:
         82:d9:b8:87:ee:67:23:bb:44:f3:74:b6:c0:aa:bc:00:15:12:
         1b:27:55:ae:b0:bd:3f:fb:d4:06:60:b2:11:06:2e:2b:c4:d0:
         25:28:39:35:cf:b1:d9:78:d0:ac:f9:54:c8:76:45:b7:cb:4b:
         75:ee:d5:b8:b7:05:c5:af:fc:46:7f:29:5a:b8:9f:0d:da:7a:
         9b:95:e2:dc:e5:d7:de:83:b3:87:5d:52:dc:1f:80:fd:25:43:
         f9:c7:ac:7d:34:75:9e:a8:d5:42:f3:90:24:c4:f8:b0:ec:ed:
         60:64:c1:53:f8:12:3e:d2:e1:ce:f8:49:66:df:3a:29:08:8b:
         c6:f9:59:8a:4d:db:83:d2:8c:56:34:86:b3:31:d5:d3:23:4b:
         cb:fd:6b:99:55:52:24:a0:eb:8d:03:6c:84:fc:a8:5b:9a:8e:
         4e:fe:4f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:02:24 2025 by rpki-client