Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/mvYiL0aA2psRtTDn3sOjudwJ4kE.roa
File:                     mvYiL0aA2psRtTDn3sOjudwJ4kE.roa (raw, json)
Hash identifier:          klf+OLEZjWVgPfG2H6nfSPtwVzxviOzWBZ7+1KvaHeQ=
Subject key identifier:   9A:F6:22:2F:46:80:DA:9B:11:B5:30:E7:DE:C3:A3:B9:DC:09:E2:41
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       046C
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/mvYiL0aA2psRtTDn3sOjudwJ4kE.roa
Signing time:             Tue 01 Apr 2025 01:42:33 +0000
ROA not before:           Tue 01 Apr 2025 01:42:33 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:2:d90::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 14 Apr 2025 05:12:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1132 (0x46c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr  1 01:42:33 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=9AF6222F4680DA9B11B530E7DEC3A3B9DC09E241
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:20:ee:0f:c3:73:ed:ae:1f:6e:1e:ed:1f:96:
                    05:2c:aa:aa:19:2a:07:77:68:d8:b3:be:4c:a3:58:
                    6f:03:ca:dd:03:1d:be:bb:b9:26:83:2b:60:2b:a7:
                    7a:b2:b4:b5:a1:ef:82:74:56:9a:e1:f4:3c:fc:79:
                    ea:c8:4f:18:49:42:d9:d8:8a:64:8b:51:59:cd:b8:
                    71:cb:c3:0c:92:e8:ef:8f:5e:58:62:7b:36:27:8d:
                    db:d4:7d:07:d8:13:23:12:ff:49:41:89:01:08:8f:
                    46:93:cb:84:f5:cc:db:e3:48:4b:31:e6:39:86:97:
                    0a:5d:97:d0:26:c9:d0:43:d4:aa:2f:08:6e:a0:14:
                    5d:ef:71:64:84:ea:30:d3:71:b1:54:c2:f2:4d:d4:
                    68:61:1e:91:a1:67:da:96:bf:ef:91:62:18:67:15:
                    21:52:ef:be:23:cc:1a:d2:da:95:85:48:6b:59:6b:
                    75:13:a6:25:cf:73:98:b5:45:8c:34:0f:ae:e6:f6:
                    16:ea:c1:e5:4d:54:c0:03:9e:bd:c3:dd:13:de:d0:
                    d2:bf:cf:39:7e:a3:02:ee:8e:6f:30:5d:82:c4:05:
                    47:df:8c:f4:00:18:c9:8e:a0:ce:90:4a:15:ec:f1:
                    15:c2:19:4f:09:d7:ec:0c:21:6d:bd:18:5a:6f:8e:
                    96:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:F6:22:2F:46:80:DA:9B:11:B5:30:E7:DE:C3:A3:B9:DC:09:E2:41
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/mvYiL0aA2psRtTDn3sOjudwJ4kE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:2:d90::/44

    Signature Algorithm: sha256WithRSAEncryption
         32:c2:bf:2b:e1:d8:17:97:c0:9c:12:9d:da:25:b9:18:9f:e1:
         3d:22:ca:b4:70:89:fd:01:a4:f3:50:f0:10:b3:1d:ca:8a:80:
         81:d6:ec:61:b6:b5:f2:1b:0d:cc:40:38:a5:83:2f:35:a1:05:
         33:8b:22:30:d5:34:c1:c2:74:f6:83:b2:04:17:64:f7:e7:fb:
         8d:51:0d:01:80:83:d9:19:f0:0c:5c:bd:30:e3:b9:8f:09:d0:
         97:2c:93:59:31:6a:94:e6:8c:59:51:fe:fe:df:92:93:f8:a0:
         cd:42:1f:ff:7a:fa:98:10:68:cc:ff:b5:ad:07:0c:77:6e:3c:
         3c:9a:dc:01:13:28:63:6f:8e:bd:cd:72:57:e7:bf:56:aa:31:
         77:e9:1d:f7:21:6e:b7:f7:03:1d:81:ba:03:22:e8:d3:cd:67:
         58:e3:b5:42:c1:45:ee:5c:56:18:6a:08:59:50:76:e6:5a:34:
         55:7d:c0:d8:c9:09:34:30:d2:b7:fa:31:b8:de:50:ab:d9:67:
         09:8e:33:6b:5b:bf:21:46:33:69:34:06:3e:0f:de:17:7a:b9:
         19:b5:ed:78:1e:a8:f9:61:3a:e8:ca:90:44:e1:0a:fd:90:94:
         96:ea:76:6d:d0:2e:09:72:ba:0c:af:14:28:09:6a:56:fe:7f:
         ef:3c:04:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:05:16 2025 by rpki-client