Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/_qEJFIwNilpXSF6kb_MlBZvtgZk.roa
File:                     _qEJFIwNilpXSF6kb_MlBZvtgZk.roa (raw, json)
Hash identifier:          XXWoi/+PMgRf2T2VYjU/rIawBxFGY6esoJUZxZ2zksU=
Subject key identifier:   FE:A1:09:14:8C:0D:8A:5A:57:48:5E:A4:6F:F3:25:05:9B:ED:81:99
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       03E1
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/_qEJFIwNilpXSF6kb_MlBZvtgZk.roa
Signing time:             Tue 01 Apr 2025 01:28:58 +0000
ROA not before:           Tue 01 Apr 2025 01:28:58 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:6b:4200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 14 Apr 2025 06:50:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 993 (0x3e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr  1 01:28:58 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=FEA109148C0D8A5A57485EA46FF325059BED8199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:2e:63:bf:e9:24:fd:c0:81:f9:df:a8:a6:c3:
                    af:65:f9:f6:e1:ae:1f:cb:3a:be:ca:6b:cf:98:75:
                    61:f5:f0:24:4a:7f:b3:83:96:a3:3c:24:ab:64:15:
                    18:4f:01:4e:ca:b4:2e:cd:06:7e:f7:f7:11:af:85:
                    d7:ce:30:8e:3f:c1:4c:05:ca:88:e8:de:1f:b6:a8:
                    1c:a3:d1:e7:17:d0:63:62:d4:c2:8d:6e:fd:02:72:
                    5a:ba:8d:b5:ce:a7:83:32:b6:71:13:8a:44:97:dc:
                    12:83:a1:2f:ff:da:26:56:66:26:5a:08:63:68:24:
                    d0:87:33:56:48:ea:9d:18:f6:1c:9a:d2:eb:fc:34:
                    d4:94:41:21:f7:9a:7d:08:81:ba:9f:4e:a0:fc:5c:
                    4b:76:23:95:50:2c:33:f2:51:5e:3c:96:34:ff:3c:
                    4b:7e:d3:43:12:56:78:cb:68:d5:ce:d8:b6:e2:d2:
                    ed:b5:98:67:cb:19:d9:d5:d9:32:ed:92:3c:a2:e6:
                    7d:d6:78:f6:ff:1e:5e:26:5c:2d:24:4d:1b:c1:04:
                    e0:66:94:2c:d9:fd:af:e9:89:b0:2a:18:2b:cd:a6:
                    e8:fe:a2:fa:45:1d:da:45:c7:dd:8c:2a:90:05:b0:
                    c5:47:70:e9:60:ec:4c:29:b5:b8:a1:33:49:50:12:
                    ab:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:A1:09:14:8C:0D:8A:5A:57:48:5E:A4:6F:F3:25:05:9B:ED:81:99
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/_qEJFIwNilpXSF6kb_MlBZvtgZk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:4200::/40

    Signature Algorithm: sha256WithRSAEncryption
         92:0c:9d:a0:b4:82:e7:0c:82:55:23:df:ce:fb:79:97:f5:84:
         cd:57:d5:19:ae:b1:70:7c:26:5e:07:24:83:f4:45:c7:16:7b:
         07:7d:50:e3:66:17:23:ed:ee:8d:aa:45:f1:64:b3:e6:d6:49:
         d9:7a:00:4b:eb:57:49:e4:60:66:52:d8:ae:16:67:b6:a1:63:
         99:59:6b:6f:99:67:85:fc:c2:2a:15:ea:51:a9:75:c7:74:ab:
         b5:9e:b2:68:fe:41:97:ef:ba:6e:00:0a:74:29:13:64:09:70:
         17:1f:bf:2b:2a:b3:81:ee:9f:3c:8b:17:ba:0d:08:2c:13:4c:
         fd:5d:e1:b4:ae:42:d6:67:dc:e4:64:a1:a1:f2:5f:db:19:8b:
         74:68:47:ec:46:e7:4c:63:55:de:d3:43:e4:f9:42:75:31:14:
         0a:a1:e0:4a:fc:5d:fe:80:33:86:38:b4:fe:25:21:af:a2:e4:
         a1:68:16:db:9d:f3:88:f5:03:fd:98:51:cb:ba:c4:8e:41:4c:
         82:15:9f:7a:85:5c:04:5a:b6:a9:62:28:c5:2a:cf:bf:81:10:
         8b:62:56:a0:5c:39:5c:6d:7c:c5:14:28:5f:24:34:88:90:cc:
         e1:71:8d:dd:b9:a2:4d:16:9e:3b:f2:c6:f7:ed:d3:d2:cd:d4:
         9c:6d:ce:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:10:41 2025 by rpki-client