Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/cYF6AG8EVpzhNpTGuAsZQLcrySk.roa
File:                     cYF6AG8EVpzhNpTGuAsZQLcrySk.roa (raw, json)
Hash identifier:          HwpT7OhncUvYqQU9uJP5+/ljjSjs915OY0xMHs6dspk=
Subject key identifier:   71:81:7A:00:6F:04:56:9C:E1:36:94:C6:B8:0B:19:40:B7:2B:C9:29
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       03D2
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/cYF6AG8EVpzhNpTGuAsZQLcrySk.roa
Signing time:             Tue 01 Apr 2025 01:28:52 +0000
ROA not before:           Tue 01 Apr 2025 01:28:52 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:6b:b600::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 14 Apr 2025 05:12:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 978 (0x3d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr  1 01:28:52 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=71817A006F04569CE13694C6B80B1940B72BC929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:01:b6:5d:fb:6c:0c:d5:fc:d6:77:42:10:b4:
                    f7:ba:c5:37:8c:4b:bb:dc:56:91:4e:3d:cf:0b:be:
                    f9:19:00:fe:8a:a7:55:cc:cd:57:68:e8:40:eb:1b:
                    58:34:6f:52:45:48:29:c3:e7:f1:46:29:23:a9:ef:
                    79:30:78:ac:85:d3:30:c9:97:9d:78:73:9c:4a:1b:
                    ec:9b:5d:86:2b:a3:8a:2a:a4:79:8d:19:d5:88:ef:
                    ca:ec:5d:c4:e3:fb:9e:2f:59:2a:db:bb:64:e1:01:
                    5d:51:24:e6:f9:10:b1:52:5e:53:66:6e:93:b5:e6:
                    17:ea:94:66:91:15:48:26:ad:a5:05:eb:99:50:42:
                    c4:9d:1a:ba:9f:8c:61:ed:e4:7f:08:a1:c7:81:6a:
                    a9:33:73:e7:bd:b9:1b:60:f3:3d:7f:b2:ed:c7:68:
                    67:9e:30:ac:67:d2:4e:d0:08:5b:fd:80:dc:54:7c:
                    80:52:67:de:5f:62:70:26:3c:df:a7:a3:42:8a:75:
                    0c:e0:5c:09:88:17:50:7b:93:c1:0e:a4:47:af:ef:
                    c8:ba:57:db:6f:16:d8:11:6b:75:eb:36:48:9c:7e:
                    20:29:e3:10:1c:ae:06:0a:25:ae:28:39:dc:11:c0:
                    e9:ee:54:c1:90:95:3e:d6:a5:77:8e:d6:02:00:70:
                    c1:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:81:7A:00:6F:04:56:9C:E1:36:94:C6:B8:0B:19:40:B7:2B:C9:29
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/cYF6AG8EVpzhNpTGuAsZQLcrySk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:b600::/40

    Signature Algorithm: sha256WithRSAEncryption
         48:17:4f:43:b0:8b:ef:bc:9b:ce:a3:7e:25:b3:89:de:53:eb:
         88:ce:78:39:68:3a:7a:ae:f9:b9:c7:4a:b8:6d:31:e1:18:b3:
         e8:28:fb:49:5f:05:ac:28:60:11:d8:49:5f:a1:30:5e:98:1e:
         31:b3:b6:57:7c:32:7f:6d:23:9a:e8:45:4f:62:1b:73:67:e1:
         6b:f3:8c:84:92:45:a9:90:00:3c:72:63:99:c5:e1:50:89:2e:
         03:bf:e6:5d:77:9f:81:4d:f3:a6:7e:57:43:28:f1:fb:fb:e4:
         c7:e8:a3:05:24:8d:99:21:53:26:f7:53:a4:9d:01:c8:05:33:
         f5:fe:4b:5d:bb:b1:07:02:d0:d3:3a:e1:d0:f0:6f:c7:df:1a:
         c9:22:bf:25:66:29:9f:98:5e:13:12:26:60:1f:e7:e2:b7:ee:
         53:3f:cf:23:78:65:d5:4f:d6:03:14:cf:f3:5d:74:fd:4a:cc:
         95:3a:b9:ad:ea:51:c9:af:e0:48:10:c4:89:c3:2f:d0:28:75:
         3b:61:f8:ef:8b:e9:95:61:77:f0:e4:00:35:72:bd:9f:78:bc:
         9e:bc:2e:20:4b:39:dc:c6:d8:1a:74:b4:ca:df:99:54:5c:7b:
         ed:f4:78:01:9a:d7:73:00:af:66:ac:9c:b4:57:1d:c6:51:bd:
         5c:3f:cc:50
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICA9IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNTA0MDEw
MTI4NTJaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDcxODE3QTAwNkYwNDU2
OUNFMTM2OTRDNkI4MEIxOTQwQjcyQkM5MjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDVAbZd+2wM1fzWd0IQtPe6xTeMS7vcVpFOPc8LvvkZAP6Kp1XM
zVdo6EDrG1g0b1JFSCnD5/FGKSOp73kweKyF0zDJl514c5xKG+ybXYYro4oqpHmN
GdWI78rsXcTj+54vWSrbu2ThAV1RJOb5ELFSXlNmbpO15hfqlGaRFUgmraUF65lQ
QsSdGrqfjGHt5H8IoceBaqkzc+e9uRtg8z1/su3HaGeeMKxn0k7QCFv9gNxUfIBS
Z95fYnAmPN+no0KKdQzgXAmIF1B7k8EOpEev78i6V9tvFtgRa3XrNkicfiAp4xAc
rgYKJa4oOdwRwOnuVMGQlT7WpXeO1gIAcMEdAgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQUcYF6AG8EVpzhNpTGuAsZQLcrySkwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS9jWUY2QUc4RVZwemhOcFRHdUFzWlFMY3J5U2su
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAa7YwDQYJKoZIhvcNAQELBQADggEBAEgXT0Owi++8m86jfiWz
id5T64jOeDloOnqu+bnHSrhtMeEYs+go+0lfBawoYBHYSV+hMF6YHjGztld8Mn9t
I5roRU9iG3Nn4WvzjISSRamQADxyY5nF4VCJLgO/5l13n4FN86Z+V0Mo8fv75Mfo
owUkjZkhUyb3U6SdAcgFM/X+S127sQcC0NM64dDwb8ffGskivyVmKZ+YXhMSJmAf
5+K37lM/zyN4ZdVP1gMUz/NddP1KzJU6ua3qUcmv4EgQxInDL9AodTth+O+L6ZVh
d/DkADVyvZ94vJ68LiBLOdzG2Bp0tMrfmVRce+30eAGa13MAr2asnLRXHcZRvVw/
zFA=
-----END CERTIFICATE-----
Generated at Mon Apr 7 08:02:16 2025 by rpki-client