Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/iwUYwgwbfV-sqRxq4y_-BrNa73U.roa
File:                     iwUYwgwbfV-sqRxq4y_-BrNa73U.roa (raw, json)
Hash identifier:          m+wE9AIj4pP2GsANaGpphhO1U4NqpSmYQnf2kRJiZPg=
Subject key identifier:   8B:05:18:C2:0C:1B:7D:5F:AC:A9:1C:6A:E3:2F:FE:06:B3:5A:EF:75
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       04E5
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/iwUYwgwbfV-sqRxq4y_-BrNa73U.roa
Signing time:             Tue 01 Apr 2025 01:55:52 +0000
ROA not before:           Tue 01 Apr 2025 01:55:52 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:6b:f200::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 14 Apr 2025 06:50:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1253 (0x4e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr  1 01:55:52 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=8B0518C20C1B7D5FACA91C6AE32FFE06B35AEF75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:9c:bd:9c:92:4a:99:85:73:ea:33:3c:92:64:
                    91:48:8d:98:ee:fb:32:04:7d:07:bb:e9:45:c9:03:
                    82:c4:ea:73:48:35:a5:6d:9b:68:f3:1b:70:1c:05:
                    40:a6:82:6c:24:02:22:cd:80:7f:7b:2c:fc:7a:85:
                    2d:c8:0c:8e:49:a7:03:17:d2:de:89:b5:0f:a9:d5:
                    c4:30:de:ba:e7:38:07:2a:cb:c1:9d:62:54:5c:4e:
                    4f:3f:e6:52:3c:16:5c:6e:7f:fe:ba:40:c2:89:01:
                    81:53:65:d6:f0:12:02:73:92:48:80:3c:a9:68:ad:
                    b8:97:06:41:40:03:52:dd:6c:9b:2f:22:d2:60:27:
                    4f:ea:1d:9e:ca:32:44:b6:84:40:4f:51:9b:46:13:
                    b2:16:9f:ff:64:f8:da:0e:a9:15:7f:1c:01:5a:5c:
                    77:a7:d8:4b:b9:67:55:42:86:4f:bd:70:a2:45:22:
                    f0:08:74:4b:b4:6f:53:c3:5d:44:89:cb:d1:36:ea:
                    f4:67:39:09:5c:25:e8:58:52:e5:6a:17:29:b8:6d:
                    c5:22:82:20:98:8e:52:b6:18:b0:d0:33:3b:05:89:
                    9e:41:88:6e:16:06:dd:db:a6:02:53:42:74:7b:cb:
                    15:81:97:4c:87:2d:ba:30:f4:ce:9f:ee:56:fd:5e:
                    72:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:05:18:C2:0C:1B:7D:5F:AC:A9:1C:6A:E3:2F:FE:06:B3:5A:EF:75
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/iwUYwgwbfV-sqRxq4y_-BrNa73U.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:f200::/40

    Signature Algorithm: sha256WithRSAEncryption
         30:41:22:a1:a8:45:64:83:07:79:51:89:42:0a:51:cf:76:f0:
         bf:a4:64:a7:67:f7:96:49:71:2a:a2:ab:fe:63:64:2c:ba:8a:
         8c:28:bc:d2:53:9f:d1:3e:a1:af:7b:9e:ac:41:37:0a:72:4a:
         9c:3d:16:da:0f:01:41:15:62:09:c4:db:fc:2c:82:13:93:d8:
         8a:52:ef:c0:0c:69:47:40:3a:55:d2:14:7c:3d:c3:65:47:81:
         f4:40:fd:54:4d:a8:87:dd:10:fb:8a:41:e5:63:07:15:05:4e:
         48:77:89:71:3d:91:96:8c:c0:c8:cc:98:b4:f9:82:33:6c:30:
         93:e5:19:cd:18:55:cf:1c:78:ff:3d:48:d1:2b:8b:c9:c6:ec:
         22:65:ba:16:db:4b:b7:7f:ed:af:a5:13:8b:e2:2c:de:a8:8a:
         e6:d9:f2:36:5c:aa:04:44:4c:90:24:4d:6e:ae:18:65:fc:d5:
         c3:c2:ea:96:e7:06:3f:45:fb:28:53:7a:86:08:e0:ff:5f:7b:
         5d:dc:94:62:ae:da:2a:a5:2d:2c:6f:a8:64:50:f7:d4:f6:84:
         35:2a:22:ea:5b:ec:5b:d3:0e:fb:13:c9:c6:9f:be:1e:89:e5:
         aa:66:ea:f3:7f:4d:7a:08:60:53:18:6f:cf:06:2a:fc:34:b6:
         bb:3f:5a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:11:56 2025 by rpki-client