Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/TdjM1X2UH-AVGwhE_fUd_bQ20UQ.roa
File:                     TdjM1X2UH-AVGwhE_fUd_bQ20UQ.roa (raw, json)
Hash identifier:          p4DBJY9YToVdL56KNfbz/6BZ9h1obe3l2MP5w5so4G4=
Subject key identifier:   4D:D8:CC:D5:7D:94:1F:E0:15:1B:08:44:FD:F5:1D:FD:B4:36:D1:44
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0403
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/TdjM1X2UH-AVGwhE_fUd_bQ20UQ.roa
Signing time:             Tue 01 Apr 2025 01:32:14 +0000
ROA not before:           Tue 01 Apr 2025 01:32:14 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:6b:f300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 14 Apr 2025 05:12:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1027 (0x403)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr  1 01:32:14 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=4DD8CCD57D941FE0151B0844FDF51DFDB436D144
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e9:22:bc:cf:d9:9b:38:a0:8c:96:e8:b3:41:
                    04:71:92:ae:82:90:1c:e2:22:f0:bd:7f:6a:fd:3f:
                    10:2a:cd:4b:2f:94:08:ba:f5:65:a0:90:9e:e4:42:
                    23:a3:16:4f:c7:0e:da:ba:b4:b8:3b:df:82:0c:ac:
                    86:ec:39:bc:4e:d8:79:02:65:9a:52:f5:0a:6b:11:
                    7b:88:93:a6:d0:99:d9:eb:16:2d:38:1a:b6:33:6c:
                    8b:9c:85:a7:c0:4c:12:26:6b:15:08:e4:cf:7b:3e:
                    5e:d6:c4:5e:43:b1:d7:66:a7:a4:f4:63:35:a8:0c:
                    30:d2:4d:47:06:63:e2:72:12:44:a6:92:27:6b:48:
                    45:0d:f4:ed:02:0c:c4:23:b1:3a:12:22:98:3c:95:
                    b7:93:29:81:4c:04:c1:5b:11:4a:69:25:29:85:d8:
                    8a:2a:ba:67:cd:c0:76:40:24:95:98:d2:0e:22:cd:
                    05:fa:c0:58:85:09:62:62:5b:97:4a:1a:10:e6:25:
                    a0:4a:89:b0:94:21:f8:70:0f:28:08:5b:38:3d:db:
                    91:70:b8:eb:58:b6:01:e4:69:16:eb:7d:fb:c5:8c:
                    19:20:42:ce:41:b6:f8:88:cf:e1:81:65:e8:92:88:
                    a8:f1:fb:22:17:14:b2:fe:8c:92:2f:f9:d0:99:fb:
                    1a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:D8:CC:D5:7D:94:1F:E0:15:1B:08:44:FD:F5:1D:FD:B4:36:D1:44
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/TdjM1X2UH-AVGwhE_fUd_bQ20UQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:f300::/40

    Signature Algorithm: sha256WithRSAEncryption
         b0:7c:61:72:f6:7a:8b:41:73:51:d5:56:60:0d:fa:2e:37:5d:
         47:a9:af:4f:20:82:0f:37:53:53:cd:66:9d:9c:eb:2b:89:56:
         f5:98:fe:96:d2:b9:ca:82:61:77:7d:2c:bf:db:eb:3a:a2:5d:
         22:51:99:90:d3:66:16:e1:21:e1:5a:ce:8d:b5:4f:eb:34:46:
         7a:7d:7a:61:3f:68:95:3d:64:18:f3:11:08:74:26:1b:d0:05:
         e9:dd:18:cc:e0:94:1a:88:37:2d:15:27:01:ef:35:33:1c:13:
         3b:d7:ff:88:e1:0f:b9:5b:af:b6:de:fc:ef:dd:f0:65:da:cb:
         a8:72:bb:b3:33:8a:a1:b2:6e:83:6c:45:1d:7b:d3:f1:f6:19:
         2f:b4:77:ed:6a:7a:c3:7d:73:ad:c1:0f:d5:c5:94:27:35:50:
         d7:d0:44:af:56:a4:66:64:f3:a7:72:46:a7:99:5d:9f:5c:2b:
         b0:78:bb:f8:1e:1d:6e:89:d4:10:82:3a:c3:2f:8f:96:68:2d:
         c6:6f:ef:7e:ee:ad:5e:03:da:02:b0:93:4d:4f:84:01:85:6d:
         77:51:41:6f:2d:e5:cf:2d:0e:bd:af:b2:40:16:cc:8c:e6:60:
         96:c4:90:d6:c5:c3:b8:e5:39:3f:89:2b:cc:81:e8:18:ba:11:
         a7:d0:81:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:02:09 2025 by rpki-client