Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/o2Tz-RKA1M6ploeDjTDPKVVkgdc.roa
File:                     o2Tz-RKA1M6ploeDjTDPKVVkgdc.roa (raw, json)
Hash identifier:          XGbLVX4Q6e8Ta3YyM0Iztk5bCUPM9wYG+07e0jQ4w3g=
Subject key identifier:   A3:64:F3:F9:12:80:D4:CE:A9:96:87:83:8D:30:CF:29:55:64:81:D7
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0419
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/o2Tz-RKA1M6ploeDjTDPKVVkgdc.roa
Signing time:             Tue 01 Apr 2025 01:35:34 +0000
ROA not before:           Tue 01 Apr 2025 01:35:34 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:6b:1600::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 14 Apr 2025 01:49:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1049 (0x419)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr  1 01:35:34 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=A364F3F91280D4CEA99687838D30CF29556481D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:32:f0:78:68:fb:e7:c3:06:f2:4c:ba:2f:d6:
                    6c:be:55:9a:38:2b:8a:11:57:b6:2a:6c:e8:8d:17:
                    41:0e:00:15:36:8f:e1:d2:da:c0:e6:90:33:9e:08:
                    40:e4:91:e4:87:bc:db:eb:d2:01:5d:14:18:a7:cc:
                    45:f5:83:c3:40:46:a5:39:84:16:13:86:6a:c0:75:
                    3f:8a:46:7b:70:9e:07:4c:11:32:dc:e3:85:52:fa:
                    1f:62:d9:c7:07:96:13:ac:ea:47:5f:2d:1a:bd:b7:
                    01:94:da:58:d4:c7:58:e7:81:fd:1b:d6:2d:90:d0:
                    7a:e7:52:06:74:d1:91:56:a6:48:e1:1c:2e:60:f0:
                    b0:b1:dd:f4:37:b2:3f:e0:6d:e5:92:35:64:30:de:
                    56:92:85:8a:83:2b:54:45:ea:9c:a1:58:5e:c0:dc:
                    fa:16:f1:c9:cf:30:86:fc:66:63:ef:49:69:e3:cb:
                    bb:8a:70:55:b5:5a:2b:56:a2:0a:70:0a:6f:b2:d4:
                    39:de:db:63:96:a0:00:3f:0e:16:f2:ad:ef:aa:ec:
                    f0:7c:d2:87:74:77:4e:98:aa:43:30:12:18:7b:0c:
                    1e:78:df:36:25:c0:a1:b8:c0:be:1e:57:1c:dd:1b:
                    a5:62:b8:cc:8c:e8:f3:b6:43:bb:24:98:28:db:8c:
                    ac:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:64:F3:F9:12:80:D4:CE:A9:96:87:83:8D:30:CF:29:55:64:81:D7
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/o2Tz-RKA1M6ploeDjTDPKVVkgdc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:1600::/40

    Signature Algorithm: sha256WithRSAEncryption
         98:71:4c:4d:12:f0:61:f5:a9:50:c8:36:11:e9:65:bc:f2:cc:
         01:75:52:55:f3:5e:0f:7b:a5:cb:48:05:1e:4f:32:71:48:2d:
         79:c6:aa:a1:47:58:d4:81:fa:87:bd:65:0c:fb:30:1d:f5:63:
         8b:5a:cb:97:25:be:dc:51:63:97:26:49:b2:02:80:fe:6a:9b:
         55:d7:1b:24:f0:0d:24:87:b2:44:1b:5d:e4:74:2e:3d:ae:74:
         e3:fa:d7:d0:b3:a4:fe:90:7d:52:44:6b:61:99:ca:4d:64:3e:
         a1:fe:88:0d:70:a9:8f:63:a1:d3:48:ff:18:b7:31:52:ee:6b:
         57:97:e7:f0:41:ab:5f:ed:49:a7:bf:43:eb:dc:33:f2:4b:cd:
         bc:38:fd:97:10:c8:20:c3:68:dc:95:b1:f3:97:ec:da:aa:c8:
         76:ce:0b:38:b7:4d:84:b2:52:db:6c:db:04:11:c6:f2:38:4e:
         c2:05:5b:de:b8:10:9d:67:48:e4:05:e3:e1:8a:3f:e2:bf:48:
         74:c7:7c:39:7f:3b:fd:a4:3f:36:17:74:87:98:d5:5e:07:ea:
         8f:83:95:b2:1c:b5:8b:8e:e8:ca:a2:54:c8:2e:18:91:a8:03:
         94:22:30:50:49:7a:13:73:8f:d0:e0:74:79:8d:9d:52:c8:17:
         1e:3d:a1:b7
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICBBkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNTA0MDEw
MTM1MzRaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEEzNjRGM0Y5MTI4MEQ0
Q0VBOTk2ODc4MzhEMzBDRjI5NTU2NDgxRDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDNMvB4aPvnwwbyTLov1my+VZo4K4oRV7YqbOiNF0EOABU2j+HS
2sDmkDOeCEDkkeSHvNvr0gFdFBinzEX1g8NARqU5hBYThmrAdT+KRntwngdMETLc
44VS+h9i2ccHlhOs6kdfLRq9twGU2ljUx1jngf0b1i2Q0HrnUgZ00ZFWpkjhHC5g
8LCx3fQ3sj/gbeWSNWQw3laShYqDK1RF6pyhWF7A3PoW8cnPMIb8ZmPvSWnjy7uK
cFW1WitWogpwCm+y1Dne22OWoAA/Dhbyre+q7PB80od0d06YqkMwEhh7DB543zYl
wKG4wL4eVxzdG6ViuMyM6PO2Q7skmCjbjKz3AgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQUo2Tz+RKA1M6ploeDjTDPKVVkgdcwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS9vMlR6LVJLQTFNNnBsb2VEalREUEtWVmtnZGMu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAaxYwDQYJKoZIhvcNAQELBQADggEBAJhxTE0S8GH1qVDINhHp
ZbzyzAF1UlXzXg97pctIBR5PMnFILXnGqqFHWNSB+oe9ZQz7MB31Y4tay5clvtxR
Y5cmSbICgP5qm1XXGyTwDSSHskQbXeR0Lj2udOP619CzpP6QfVJEa2GZyk1kPqH+
iA1wqY9jodNI/xi3MVLua1eX5/BBq1/tSae/Q+vcM/JLzbw4/ZcQyCDDaNyVsfOX
7NqqyHbOCzi3TYSyUtts2wQRxvI4TsIFW964EJ1nSOQF4+GKP+K/SHTHfDl/O/2k
PzYXdIeY1V4H6o+DlbIctYuO6MqiVMguGJGoA5QiMFBJehNzj9DgdHmNnVLIFx49
obc=
-----END CERTIFICATE-----
Generated at Mon Apr 7 04:20:06 2025 by rpki-client