Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/c07XQuv4GjK8pHLLJ1oi1_YU10Y.roa
File:                     c07XQuv4GjK8pHLLJ1oi1_YU10Y.roa (raw, json)
Hash identifier:          8oQNECh0voZFMn0POlvukgedlKB7L2bAMHlT91IM0eI=
Subject key identifier:   73:4E:D7:42:EB:F8:1A:32:BC:A4:72:CB:27:5A:22:D7:F6:14:D7:46
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       04C2
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/c07XQuv4GjK8pHLLJ1oi1_YU10Y.roa
Signing time:             Tue 01 Apr 2025 01:52:52 +0000
ROA not before:           Tue 01 Apr 2025 01:52:52 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:60:f018::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 14 Apr 2025 05:12:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1218 (0x4c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr  1 01:52:52 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=734ED742EBF81A32BCA472CB275A22D7F614D746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:87:f6:29:88:8c:01:6c:2b:8f:20:05:17:60:
                    c9:a6:da:3b:c2:37:49:20:84:37:98:61:fb:03:24:
                    fc:ce:de:8c:a1:25:a0:73:ec:be:ef:fb:ed:83:c5:
                    b2:a9:75:fb:a1:52:eb:37:16:fe:85:24:77:c9:00:
                    62:ae:3f:d6:33:45:77:05:85:f1:29:fb:73:f7:f7:
                    3e:10:57:27:70:a5:52:bb:ba:9b:14:44:4a:3e:e0:
                    e1:39:41:c6:5b:47:41:ca:57:bd:27:58:29:b8:76:
                    89:d6:03:4d:ee:33:6e:ec:ec:dc:9c:9f:b3:e5:07:
                    f2:bd:d9:a7:7a:d6:6f:a9:77:56:6a:11:20:66:70:
                    58:ca:e0:22:7a:5a:49:e2:08:3f:39:e8:d2:5b:29:
                    5d:38:a5:4e:22:ca:29:91:61:2c:8f:86:96:73:ba:
                    12:5e:5d:55:63:c2:ce:e9:6e:8a:a3:50:25:74:89:
                    26:1b:69:12:d4:bd:a7:2f:da:08:7c:44:52:9b:6a:
                    5a:3d:58:6c:8c:6a:99:b9:ff:09:78:37:55:4c:ce:
                    4e:cc:79:60:b0:33:1c:52:de:b6:17:97:12:dd:a0:
                    bb:03:f2:b6:66:d3:8f:f3:63:eb:50:1f:44:c2:d6:
                    d1:12:28:4c:85:3c:0f:cc:37:de:d0:71:f3:f6:0d:
                    f2:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:4E:D7:42:EB:F8:1A:32:BC:A4:72:CB:27:5A:22:D7:F6:14:D7:46
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/c07XQuv4GjK8pHLLJ1oi1_YU10Y.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:60:f018::/46

    Signature Algorithm: sha256WithRSAEncryption
         a3:b0:92:ec:98:34:a5:f1:02:00:7c:f9:94:1b:c8:9e:0a:c1:
         58:13:bb:5e:a4:c0:63:63:1c:9c:ab:4e:4a:1c:83:28:94:84:
         d0:14:16:47:3d:9a:10:69:50:14:01:38:c8:ab:bc:39:6e:0c:
         79:52:e1:a0:e2:e1:5e:c0:43:98:44:97:8a:5e:8c:c4:4b:07:
         9a:4e:6c:0a:72:eb:04:bc:09:15:83:7e:17:2b:18:4a:90:77:
         6e:45:f5:f5:6e:17:5f:ec:4e:2a:c1:56:9f:a9:8b:10:ea:95:
         16:c3:4b:01:dd:ec:7b:21:f9:1a:fc:eb:a9:31:a3:3b:d8:ab:
         20:c0:92:f8:4c:6c:49:86:8a:bc:4f:1e:dd:21:97:df:8a:85:
         47:f6:25:31:98:3f:65:d2:f0:95:15:0d:a0:44:45:c5:00:f9:
         0b:c6:8c:90:44:8d:8c:fc:85:6a:0b:2c:18:09:7e:23:e4:ea:
         b2:58:15:30:92:f5:65:25:bd:c5:b0:c2:0d:f8:91:36:d7:79:
         5f:99:c2:31:4e:da:6a:2b:12:4e:b1:c5:d1:df:c5:28:1d:51:
         57:00:fc:10:7a:5a:17:ad:e3:55:4a:b8:10:9e:30:7d:79:15:
         12:75:f0:14:e4:52:2c:d6:ed:c4:ed:f3:ad:c5:a6:20:0f:65:
         81:c3:14:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:01:39 2025 by rpki-client