Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/SZlJMWv8HIsWz0AI8NktZnLzH38.roa
File:                     SZlJMWv8HIsWz0AI8NktZnLzH38.roa (raw, json)
Hash identifier:          NkZPDhbC9lYMxkniNi90ERlcYDZw27YuJINL6R6FnM4=
Subject key identifier:   49:99:49:31:6B:FC:1C:8B:16:CF:40:08:F0:D9:2D:66:72:F3:1F:7F
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       03BC
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/SZlJMWv8HIsWz0AI8NktZnLzH38.roa
Signing time:             Tue 31 Dec 2024 01:31:44 +0000
ROA not before:           Tue 31 Dec 2024 01:31:44 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:61:5e00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 956 (0x3bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Dec 31 01:31:44 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=499949316BFC1C8B16CF4008F0D92D6672F31F7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f1:9d:21:ac:30:04:92:4f:a1:da:50:48:13:
                    8b:ae:9a:a9:30:54:6c:61:23:ae:77:3d:23:7b:f3:
                    9e:a2:be:df:59:16:11:2a:56:11:78:ca:8c:a5:78:
                    02:47:01:a4:b3:83:15:32:bd:23:fb:58:24:54:11:
                    78:77:5e:28:f1:24:f7:2b:26:b1:18:d4:8a:71:cb:
                    01:61:31:7c:c4:b1:cc:b7:bf:c2:9b:1d:60:ab:95:
                    87:d5:e8:15:a1:c6:50:d9:a6:19:4b:40:68:ec:11:
                    3f:24:cc:dc:b2:bc:03:e4:b2:68:70:5f:36:3d:03:
                    35:43:f5:82:67:ec:bd:3b:24:46:ee:45:41:29:5f:
                    c2:bc:d8:da:d6:a5:b0:61:3b:9f:32:a0:2d:b0:ee:
                    7a:32:7f:02:2d:af:04:07:05:6d:a9:9e:3c:69:40:
                    a3:b8:e4:e8:e9:0e:8a:a6:a8:be:b1:57:49:e7:dd:
                    42:53:cd:de:1f:f3:48:41:ae:12:29:9b:c3:93:a5:
                    a6:52:2c:88:c2:01:c3:cd:a0:59:22:4f:3d:db:49:
                    1c:5c:45:3e:52:47:a9:2f:49:58:5d:51:8b:83:df:
                    e8:3f:cb:a0:16:39:40:c1:3d:56:9e:53:83:ad:e1:
                    02:01:81:29:06:45:59:92:97:87:80:22:88:33:7b:
                    34:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:99:49:31:6B:FC:1C:8B:16:CF:40:08:F0:D9:2D:66:72:F3:1F:7F
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/SZlJMWv8HIsWz0AI8NktZnLzH38.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:61:5e00::/48

    Signature Algorithm: sha256WithRSAEncryption
         4b:54:c9:e2:4f:1d:22:99:23:24:76:e2:0b:b8:3d:01:f5:b7:
         fe:25:c6:e1:db:b2:dd:d8:cf:ef:78:46:2e:75:0e:71:63:ce:
         b1:c0:51:4b:85:76:98:17:af:dc:dc:a0:37:e9:80:8a:25:b2:
         f7:ce:dc:5d:da:a2:2f:b3:07:c7:6c:7c:69:48:d0:b3:be:7d:
         c9:ea:6d:ff:99:d8:d9:54:52:d3:af:22:7a:49:8c:38:61:01:
         2a:1a:30:a7:0a:ce:31:5b:8e:7e:d1:a9:30:5d:21:f6:5b:f2:
         61:d5:8f:31:d1:60:db:4a:14:28:27:21:ee:c2:53:fb:4f:b7:
         fd:f6:fd:5f:22:04:62:b3:10:a8:d3:ed:26:95:86:e2:e6:8a:
         9a:00:e5:a1:18:3b:8a:de:a1:ca:04:ef:e6:23:07:e8:fb:fb:
         2a:94:e3:82:76:36:35:14:b6:d6:69:01:c1:91:c5:54:c5:fd:
         de:2b:e2:9a:0d:49:61:44:c5:35:a8:e4:85:b7:1b:ab:36:98:
         a3:03:82:9a:8d:df:78:76:87:26:b9:af:b8:4c:22:e3:a1:21:
         5f:6e:ce:ec:73:f6:14:fc:ec:9b:2b:55:53:ce:fb:4d:ee:28:
         48:c1:fc:4b:8b:2e:1a:77:13:5d:35:26:f7:85:30:fa:09:89:
         50:3f:2a:a1
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgICA7wwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNDEyMzEw
MTMxNDRaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDQ5OTk0OTMxNkJGQzFD
OEIxNkNGNDAwOEYwRDkyRDY2NzJGMzFGN0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC+8Z0hrDAEkk+h2lBIE4uumqkwVGxhI653PSN7856ivt9ZFhEq
VhF4yoyleAJHAaSzgxUyvSP7WCRUEXh3XijxJPcrJrEY1IpxywFhMXzEscy3v8Kb
HWCrlYfV6BWhxlDZphlLQGjsET8kzNyyvAPksmhwXzY9AzVD9YJn7L07JEbuRUEp
X8K82NrWpbBhO58yoC2w7noyfwItrwQHBW2pnjxpQKO45OjpDoqmqL6xV0nn3UJT
zd4f80hBrhIpm8OTpaZSLIjCAcPNoFkiTz3bSRxcRT5SR6kvSVhdUYuD3+g/y6AW
OUDBPVaeU4Ot4QIBgSkGRVmSl4eAIogzezRHAgMBAAGjggIrMIICJzAdBgNVHQ4E
FgQUSZlJMWv8HIsWz0AI8NktZnLzH38wHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS9TWmxKTVd2OEhJc1d6MEFJOE5rdFpuTHpIMzgu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAJAoAYV4AMA0GCSqGSIb3DQEBCwUAA4IBAQBLVMniTx0imSMkduIL
uD0B9bf+Jcbh27Ld2M/veEYudQ5xY86xwFFLhXaYF6/c3KA36YCKJbL3ztxd2qIv
swfHbHxpSNCzvn3J6m3/mdjZVFLTryJ6SYw4YQEqGjCnCs4xW45+0akwXSH2W/Jh
1Y8x0WDbShQoJyHuwlP7T7f99v1fIgRisxCo0+0mlYbi5oqaAOWhGDuK3qHKBO/m
Iwfo+/sqlOOCdjY1FLbWaQHBkcVUxf3eK+KaDUlhRMU1qOSFtxurNpijA4Kajd94
docmua+4TCLjoSFfbs7sc/YU/OybK1VTzvtN7ihIwfxLiy4adxNdNSb3hTD6CYlQ
Pyqh
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:40:27 2025 by rpki-client