Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/bDkbItUonohJwWviZVKnOMAEKDI.roa
File:                     bDkbItUonohJwWviZVKnOMAEKDI.roa (raw, json)
Hash identifier:          WeN1ktUMxhuFLMIShT2WoN0IQ9nDoZ0+6eNHz5pu4WU=
Subject key identifier:   6C:39:1B:22:D5:28:9E:88:49:C1:6B:E2:65:52:A7:38:C0:04:28:32
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       03D6
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/bDkbItUonohJwWviZVKnOMAEKDI.roa
Signing time:             Tue 01 Apr 2025 01:28:54 +0000
ROA not before:           Tue 01 Apr 2025 01:28:54 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:6b:aa00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 14 Apr 2025 06:50:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 982 (0x3d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr  1 01:28:54 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=6C391B22D5289E8849C16BE26552A738C0042832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:67:64:2c:b6:fa:3b:1e:38:3b:e2:a5:90:55:
                    7e:5f:47:7c:10:e5:39:5a:b5:36:23:f8:41:88:e9:
                    23:6b:ef:b1:06:44:43:01:96:60:06:f4:bc:74:59:
                    a2:f2:5b:46:89:12:44:4a:8b:bb:68:81:66:87:7f:
                    a0:f8:4b:48:bb:69:45:86:63:2d:ab:f6:b5:8a:ee:
                    b1:b3:9c:08:db:b0:70:3d:30:80:a4:df:ae:11:e9:
                    59:13:58:1f:41:9c:3b:50:85:54:ae:70:a5:cf:ff:
                    5b:ea:dc:99:e3:5d:1b:17:83:99:98:1c:4f:4b:43:
                    af:2b:ae:6f:0f:55:92:c7:7d:55:77:8e:a5:08:90:
                    8d:56:4a:1d:64:ac:79:47:55:d6:90:e2:f2:55:c5:
                    ca:ea:9d:f2:ab:cc:cf:1c:17:af:e1:dc:4b:fa:d5:
                    13:30:f5:e9:6b:38:94:3b:3b:22:81:ef:76:0e:85:
                    ce:44:6b:25:5b:e5:b4:df:5c:db:4a:7d:f0:74:b0:
                    0f:0f:3a:db:c6:71:17:09:19:d0:37:98:97:f9:02:
                    89:a0:f4:ce:fd:63:49:89:21:cd:cc:c6:73:d3:10:
                    3e:94:6a:34:99:2c:ee:25:cf:c5:3d:f3:59:5d:27:
                    61:ec:70:aa:9b:aa:dc:6c:ab:05:97:df:05:ea:2b:
                    cd:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:39:1B:22:D5:28:9E:88:49:C1:6B:E2:65:52:A7:38:C0:04:28:32
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/bDkbItUonohJwWviZVKnOMAEKDI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:aa00::/40

    Signature Algorithm: sha256WithRSAEncryption
         7d:62:e5:e7:71:f9:4d:8f:d9:85:a7:36:95:8a:ea:bd:4f:f3:
         99:d8:9d:c4:80:3d:5a:12:00:87:8c:c1:d1:63:26:92:c9:4e:
         1b:96:6a:3a:95:a8:6e:8a:46:e8:14:f5:e2:91:38:73:96:f3:
         0f:a1:c6:09:55:09:e2:18:da:97:a6:01:40:58:80:3a:c5:04:
         0b:66:c5:f6:b4:c2:af:20:dc:38:50:da:2d:dc:65:75:15:de:
         ec:74:f9:27:67:08:57:f2:c2:2c:73:4d:62:f6:11:26:81:8a:
         e8:2c:d7:6b:3d:0a:a2:a2:6c:96:b5:10:87:f5:8a:1d:96:4f:
         5d:10:39:d1:e2:f1:1c:53:fc:90:af:ff:9b:32:77:f1:d7:16:
         f8:ea:5d:38:c1:71:06:6a:bd:33:e8:4c:f3:2c:a7:51:64:6f:
         98:1d:83:5c:03:22:22:db:32:8f:2d:01:cd:10:49:de:4d:be:
         47:c5:ea:c4:18:b6:ad:10:75:11:59:49:76:a0:d5:33:48:a0:
         a1:2f:39:2e:ee:c2:8a:5d:f7:c2:18:12:5a:55:f1:4f:41:8b:
         8f:cc:37:61:6e:2f:aa:68:8c:1d:d5:88:a4:1a:05:9b:2b:61:
         2b:ee:9e:f5:77:97:34:0e:c8:16:cc:09:6d:8b:6e:28:3c:0d:
         5b:cf:c5:3f
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICA9YwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNTA0MDEw
MTI4NTRaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDZDMzkxQjIyRDUyODlF
ODg0OUMxNkJFMjY1NTJBNzM4QzAwNDI4MzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDIZ2Qstvo7Hjg74qWQVX5fR3wQ5TlatTYj+EGI6SNr77EGREMB
lmAG9Lx0WaLyW0aJEkRKi7togWaHf6D4S0i7aUWGYy2r9rWK7rGznAjbsHA9MICk
364R6VkTWB9BnDtQhVSucKXP/1vq3JnjXRsXg5mYHE9LQ68rrm8PVZLHfVV3jqUI
kI1WSh1krHlHVdaQ4vJVxcrqnfKrzM8cF6/h3Ev61RMw9elrOJQ7OyKB73YOhc5E
ayVb5bTfXNtKffB0sA8POtvGcRcJGdA3mJf5Aomg9M79Y0mJIc3MxnPTED6UajSZ
LO4lz8U981ldJ2HscKqbqtxsqwWX3wXqK83fAgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQUbDkbItUonohJwWviZVKnOMAEKDIwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS9iRGtiSXRVb25vaEp3V3ZpWlZLbk9NQUVLREku
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAa6owDQYJKoZIhvcNAQELBQADggEBAH1i5edx+U2P2YWnNpWK
6r1P85nYncSAPVoSAIeMwdFjJpLJThuWajqVqG6KRugU9eKROHOW8w+hxglVCeIY
2pemAUBYgDrFBAtmxfa0wq8g3DhQ2i3cZXUV3ux0+SdnCFfywixzTWL2ESaBiugs
12s9CqKibJa1EIf1ih2WT10QOdHi8RxT/JCv/5syd/HXFvjqXTjBcQZqvTPoTPMs
p1Fkb5gdg1wDIiLbMo8tAc0QSd5NvkfF6sQYtq0QdRFZSXag1TNIoKEvOS7uwopd
98IYElpV8U9Bi4/MN2FuL6pojB3ViKQaBZsrYSvunvV3lzQOyBbMCW2Lbig8DVvP
xT8=
-----END CERTIFICATE-----
Generated at Mon Apr 7 08:09:09 2025 by rpki-client