Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/TDhqz1lxoiSIJY4Ruw_7oIZ-CLM.roa
File:                     TDhqz1lxoiSIJY4Ruw_7oIZ-CLM.roa (raw, json)
Hash identifier:          aFgIoj4fHnBYolLvY6TniFHsQgy2PsVQsjkg0AhjyEw=
Subject key identifier:   4C:38:6A:CF:59:71:A2:24:88:25:8E:11:BB:0F:FB:A0:86:7E:08:B3
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       04DA
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/TDhqz1lxoiSIJY4Ruw_7oIZ-CLM.roa
Signing time:             Tue 01 Apr 2025 01:55:48 +0000
ROA not before:           Tue 01 Apr 2025 01:55:48 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:6b:ee00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 14 Apr 2025 05:12:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1242 (0x4da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr  1 01:55:48 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=4C386ACF5971A22488258E11BB0FFBA0867E08B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:3d:9d:6c:90:67:f4:4d:bf:d0:cb:15:54:ff:
                    89:6d:0c:b2:b4:37:9f:d9:57:9e:d0:ec:50:6c:01:
                    71:08:2e:d7:d1:6f:39:ec:e5:2f:37:ec:36:1b:ad:
                    33:e3:b4:88:3c:f3:f1:1f:ec:17:3d:c9:21:0c:90:
                    73:73:a2:63:d6:61:70:80:ef:b1:fc:9b:c3:e9:fc:
                    fd:af:bc:6d:38:36:be:50:07:39:91:64:8e:4f:e2:
                    e2:f2:9f:17:4f:45:01:15:92:f2:07:73:ad:61:67:
                    0b:61:20:e0:5e:00:12:48:4e:43:8e:81:a9:91:4d:
                    5a:51:3e:8f:92:e2:8e:cf:4f:f4:a2:2f:cb:7b:2b:
                    6f:36:ad:43:ee:dd:c4:f9:e5:0c:e4:8e:97:88:78:
                    57:55:ad:b9:41:de:80:4e:f9:51:91:80:36:90:b9:
                    69:92:dc:46:18:54:e7:18:04:f3:9a:d3:cb:71:1b:
                    0e:d9:43:d5:d4:0b:58:3b:07:e9:8a:6b:d5:93:6b:
                    4a:e4:ba:3a:68:89:f4:91:8a:ed:50:12:6c:01:4b:
                    55:f3:d6:f9:37:f6:ef:31:dc:79:c4:b2:fb:77:eb:
                    12:2e:a7:4e:49:49:55:48:23:45:99:82:72:23:e8:
                    d8:52:d1:8b:85:eb:a4:08:4f:ab:c8:20:8e:6c:06:
                    e0:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:38:6A:CF:59:71:A2:24:88:25:8E:11:BB:0F:FB:A0:86:7E:08:B3
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/TDhqz1lxoiSIJY4Ruw_7oIZ-CLM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:ee00::/40

    Signature Algorithm: sha256WithRSAEncryption
         0d:ce:fb:ef:c3:91:f7:56:85:f8:18:1f:b5:c6:12:d9:57:13:
         4b:c6:8d:c1:cc:4f:f9:2c:4d:b1:76:f3:99:d7:e1:33:a5:af:
         4c:b7:47:c1:17:71:2e:9e:99:a8:b7:d6:b2:34:a0:b7:60:7a:
         52:1e:ab:b9:d6:45:86:e2:b0:74:7b:47:32:e9:9e:4d:ae:e5:
         03:8a:f9:99:f7:66:fc:bb:d5:d9:fa:4a:28:cb:01:cf:af:7f:
         86:44:13:54:d3:10:81:8c:ca:40:88:42:a9:e9:d8:26:46:a6:
         14:01:ef:d7:06:17:ae:57:9a:e7:a7:08:9a:bd:01:01:f9:fa:
         ab:32:e5:a4:52:b8:bb:8c:be:a9:35:ee:e4:55:23:17:ef:91:
         c2:f4:eb:fc:86:74:85:55:28:c5:c5:ac:07:32:f4:13:08:b7:
         b9:f9:48:0f:bd:f1:62:68:94:f2:48:02:95:ce:6f:cc:2f:4d:
         66:ff:27:be:c6:10:e1:c3:f2:95:36:f5:76:e2:2c:94:de:93:
         28:ba:50:dc:8d:54:8b:4d:5e:ae:dd:e4:71:77:b8:3d:82:8c:
         e8:05:e2:23:47:88:85:8a:66:41:e6:3a:44:38:74:3c:18:ec:
         5e:d2:7c:ef:29:35:51:11:79:41:f8:fa:fc:1e:80:c8:72:59:
         c2:5a:ac:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:04:11 2025 by rpki-client