Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/_IOm__jRpVBkZ5itZGM0JzWSZCQ.roa
File:                     _IOm__jRpVBkZ5itZGM0JzWSZCQ.roa (raw, json)
Hash identifier:          X11f75wOyE1l+Hb7+ve4hcc3jD+lAZ1M4D+f0qERbw8=
Subject key identifier:   FC:83:A6:FF:F8:D1:A5:50:64:67:98:AD:64:63:34:27:35:92:64:24
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0475
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/_IOm__jRpVBkZ5itZGM0JzWSZCQ.roa
Signing time:             Tue 01 Apr 2025 01:45:31 +0000
ROA not before:           Tue 01 Apr 2025 01:45:31 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:6b:2800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 14 Apr 2025 05:12:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1141 (0x475)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr  1 01:45:31 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=FC83A6FFF8D1A550646798AD6463342735926424
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fe:74:71:d7:4e:2c:18:90:8d:5d:3f:2f:b6:
                    27:c0:9e:c8:fc:40:c8:c8:0c:0d:66:1e:e4:2f:55:
                    4e:d5:f3:b8:cc:f5:8c:56:bb:75:72:ed:a0:38:a5:
                    4d:cd:df:cf:02:0a:e8:54:97:b8:76:73:a4:3d:4c:
                    cb:a0:e5:10:74:c2:fe:eb:77:10:66:85:47:31:1a:
                    8b:db:5f:8a:70:f6:95:7a:ff:6f:f7:6a:9f:23:0b:
                    1b:88:c0:40:43:47:cb:6a:b0:c5:db:50:7a:aa:b4:
                    6d:fe:01:8e:2a:23:9c:75:5b:a9:1a:fc:8b:4a:ff:
                    f7:06:71:f3:36:f0:88:7c:62:f4:05:7f:b3:45:a2:
                    6c:de:78:bc:df:46:31:b1:11:55:93:25:f1:96:c6:
                    89:3f:4a:23:80:17:13:bf:1d:b0:ae:8c:01:e2:a9:
                    9d:59:1e:fd:17:f2:c7:ea:ac:98:83:34:b8:c7:4c:
                    b8:d5:c7:b0:d2:f5:50:11:bd:07:97:ad:42:bb:54:
                    14:ee:2b:c9:72:e3:f0:27:46:b8:09:ea:db:ca:78:
                    40:9d:c7:29:7a:63:90:f5:0c:93:b5:31:47:0e:2a:
                    01:3d:5a:a0:27:9f:10:6e:35:9d:b4:c6:b7:45:79:
                    20:e2:7f:d7:ff:01:c9:bb:2d:c7:38:94:bc:d9:23:
                    60:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:83:A6:FF:F8:D1:A5:50:64:67:98:AD:64:63:34:27:35:92:64:24
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/_IOm__jRpVBkZ5itZGM0JzWSZCQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:2800::/40

    Signature Algorithm: sha256WithRSAEncryption
         4e:e4:fb:74:36:a5:ff:6a:2b:1c:b3:fa:c4:5a:b1:1e:0d:8d:
         4e:8b:2f:b9:fc:87:33:0e:f8:b7:62:a4:8a:1b:af:d8:f2:4e:
         75:25:9d:84:49:e1:a3:70:95:b8:22:1a:24:af:bb:0c:f9:55:
         65:84:9e:2d:9a:6d:29:21:ce:98:e5:b2:c7:ce:26:b1:41:5a:
         e3:1a:9a:f2:37:ff:6c:9d:f8:54:33:30:89:d8:68:2e:8b:4b:
         8f:25:da:4f:e6:ab:fc:7d:2f:ca:f8:d2:5a:2d:9a:a4:85:33:
         42:07:f2:03:1d:45:b9:b7:ab:55:1b:5e:1e:66:3c:d6:d5:02:
         b9:4b:c6:46:59:09:0a:83:45:b7:7f:80:8a:5b:db:6e:46:07:
         03:69:80:35:e9:7a:17:a6:db:27:f9:e2:68:0f:01:38:33:59:
         9d:93:a5:2a:7a:17:08:01:67:bd:cc:54:65:8e:3f:92:88:a9:
         88:20:18:8d:4b:dc:77:62:77:53:fe:27:d7:ec:49:40:04:1a:
         ef:67:a7:8d:f6:3d:58:0d:96:83:3d:cf:1c:0b:21:07:42:f3:
         41:de:c1:53:45:4c:83:dc:af:dd:6d:9f:fb:44:4a:bf:3f:55:
         1d:69:97:dc:ba:66:ec:f9:fb:21:21:de:0f:8b:5f:66:8c:23:
         90:c2:c1:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:59:29 2025 by rpki-client