Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/k0TSmm6tqELN8ixld4ZSoiPui9M.roa
File:                     k0TSmm6tqELN8ixld4ZSoiPui9M.roa (raw, json)
Hash identifier:          q1RvMml2OtAjRD5JRXacCcrskZQ21LRhwNhLoj7tEpQ=
Subject key identifier:   93:44:D2:9A:6E:AD:A8:42:CD:F2:2C:65:77:86:52:A2:23:EE:8B:D3
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       03BA
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/k0TSmm6tqELN8ixld4ZSoiPui9M.roa
Signing time:             Tue 31 Dec 2024 01:31:43 +0000
ROA not before:           Tue 31 Dec 2024 01:31:43 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:61:5800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 954 (0x3ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Dec 31 01:31:43 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=9344D29A6EADA842CDF22C65778652A223EE8BD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:af:54:99:92:f3:d9:17:1b:1d:1a:53:c2:44:
                    46:e2:d7:20:7c:f1:26:ca:2c:53:b6:8e:c4:0f:8e:
                    5e:fa:a8:2c:f1:05:12:57:6b:a6:e1:80:0a:a9:e5:
                    47:14:c5:02:c7:7c:5e:9f:bd:3c:0d:78:ba:26:69:
                    7e:90:bb:d7:47:51:d5:b6:d8:67:e2:ec:90:a7:4c:
                    be:37:73:f6:55:24:93:28:b8:d6:13:c7:0f:cf:9f:
                    6f:5a:91:05:50:b9:ef:0c:63:10:cd:9c:fe:19:28:
                    d7:e6:83:58:14:8e:4c:e3:cc:72:f1:d9:d5:91:31:
                    14:fa:c8:b9:da:27:35:78:6e:12:b6:e9:03:6d:02:
                    15:1d:ed:8a:f4:47:03:2e:60:75:3f:0b:58:bb:66:
                    a8:fb:2b:cf:aa:3d:5b:c5:ea:5a:a2:76:3f:77:67:
                    35:0e:27:39:b1:f3:9c:f1:1a:d9:3a:6d:d4:f0:47:
                    21:f2:a2:b6:ec:ee:8c:f0:a9:06:af:c4:b4:d7:11:
                    9e:29:51:a6:d2:0c:1f:62:b2:c6:a1:49:e1:a4:d1:
                    7e:96:7d:59:d6:da:64:0f:49:23:a2:b7:26:b3:28:
                    21:ca:ef:c9:49:05:ce:4e:6a:39:36:18:52:66:d6:
                    bc:1b:51:7f:81:ab:03:eb:b3:7a:7a:15:1b:6e:4b:
                    79:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:44:D2:9A:6E:AD:A8:42:CD:F2:2C:65:77:86:52:A2:23:EE:8B:D3
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/k0TSmm6tqELN8ixld4ZSoiPui9M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:61:5800::/38

    Signature Algorithm: sha256WithRSAEncryption
         a3:8a:1a:15:0b:36:9f:47:14:0a:32:fd:9d:bc:6d:83:cf:cf:
         2e:c3:c8:af:10:82:88:41:7d:6d:6a:9c:54:98:d6:da:91:f1:
         a0:f4:67:07:9f:ed:42:2f:69:4c:b8:cb:07:5a:b8:92:d3:f9:
         5c:47:49:81:1b:c7:bf:7b:8e:bf:8d:ac:38:d1:b9:ec:22:75:
         ef:fe:ee:d0:85:ee:e1:45:f7:4d:41:6d:f2:b8:73:50:8d:87:
         6f:ec:46:12:3d:41:1b:76:64:0e:e0:12:f1:aa:8d:39:15:35:
         c0:99:8e:91:5c:da:16:1f:07:0d:b5:99:51:5f:d7:27:ee:d1:
         ff:f4:28:81:f5:46:8e:b8:f8:24:41:10:fc:e7:88:29:44:df:
         9c:22:47:52:83:49:be:31:c2:dd:0a:72:74:6e:84:ad:fd:ad:
         37:b8:a3:dc:19:28:0a:82:03:f0:8b:4b:09:36:51:ae:46:2a:
         56:40:cd:01:2d:04:c4:41:ac:4d:ec:20:e9:49:de:8e:08:98:
         05:b8:c9:e6:86:a2:6c:87:c1:fa:12:1b:88:c9:bd:66:59:9a:
         08:a4:c2:6d:b8:27:da:fc:d9:34:92:eb:c7:6d:e6:86:67:3a:
         e4:34:8f:5f:80:86:2a:04:3c:db:c2:fb:be:db:8f:83:e4:ec:
         82:60:24:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:09:20 2025 by rpki-client