Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/p9yH5jYQJr4V2VYffPBkRddLywo.roa
File:                     p9yH5jYQJr4V2VYffPBkRddLywo.roa (raw, json)
Hash identifier:          trh8SbeTl5+pE8UFACq7XExn6jpr7vLZrSWzqwHZaXQ=
Subject key identifier:   A7:DC:87:E6:36:10:26:BE:15:D9:56:1F:7C:F0:64:45:D7:4B:CB:0A
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       04CC
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/p9yH5jYQJr4V2VYffPBkRddLywo.roa
Signing time:             Tue 01 Apr 2025 01:52:58 +0000
ROA not before:           Tue 01 Apr 2025 01:52:58 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:6b:7500::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 14 Apr 2025 05:12:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1228 (0x4cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr  1 01:52:58 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=A7DC87E6361026BE15D9561F7CF06445D74BCB0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:7d:de:bf:20:1c:b0:43:02:b0:40:14:51:80:
                    89:bf:ce:68:58:d6:1e:80:cf:6d:de:b7:65:2a:41:
                    32:7a:87:a4:3a:07:3d:da:0b:a5:b7:d5:27:20:71:
                    e0:06:77:40:1f:e5:66:35:48:65:c7:6e:46:3c:c6:
                    90:7a:27:cf:e6:a2:87:65:ce:20:50:4c:5b:18:25:
                    a2:de:d1:95:8b:14:9f:0d:c3:79:39:27:06:f2:2a:
                    ec:29:ec:96:01:ea:be:27:ad:c2:f6:22:43:6e:49:
                    57:9a:3b:19:78:0a:5c:7f:df:c4:98:c4:6c:dc:49:
                    52:1f:96:8a:95:87:b8:ab:72:12:2c:9e:18:cb:43:
                    66:e1:a4:da:87:37:a9:dd:1a:1a:66:c7:01:41:df:
                    70:03:1f:17:e7:3a:6f:55:98:38:e1:02:f9:e3:bd:
                    56:1a:a0:6b:be:ca:8e:c3:b1:1f:1e:09:46:fd:79:
                    9e:bd:47:43:21:98:90:59:53:5c:56:19:3a:be:79:
                    e3:b5:15:06:1d:e8:dc:3f:28:5b:de:5f:9c:23:19:
                    a2:2d:03:c2:9f:41:a1:95:a8:63:d6:1e:d7:21:92:
                    a0:da:55:92:69:0f:cc:0c:02:be:1a:62:af:1c:c2:
                    ec:63:33:d0:2d:6c:c2:5b:b2:5e:8f:21:c8:d5:1b:
                    af:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:DC:87:E6:36:10:26:BE:15:D9:56:1F:7C:F0:64:45:D7:4B:CB:0A
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/p9yH5jYQJr4V2VYffPBkRddLywo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:7500::/40

    Signature Algorithm: sha256WithRSAEncryption
         8b:91:a9:da:4a:ec:9f:1c:17:d8:22:01:de:ef:f4:d1:c0:40:
         29:06:70:3a:6a:1a:47:eb:38:69:f5:83:71:a2:be:1c:2b:37:
         cf:f8:ef:a2:ce:12:4e:a8:45:3a:44:84:f9:b5:c2:79:a2:e1:
         b6:e9:69:59:a8:0a:af:e5:62:78:7a:52:ca:14:d9:29:3a:85:
         b7:2d:c2:f9:ef:6d:72:99:a3:31:e0:ac:28:26:f6:b0:bf:f4:
         62:b7:66:50:b3:0c:eb:2e:9f:37:da:86:e1:ab:f7:ba:38:1e:
         0e:a2:d3:37:d6:a1:bf:61:18:3f:27:d4:93:b8:13:6b:bf:b3:
         5b:71:39:e2:44:3c:fe:88:70:d8:76:f0:d5:0e:b9:ca:ed:79:
         9b:64:f8:41:69:7d:bf:6e:dc:ab:54:08:60:08:7d:04:5c:ae:
         50:7d:c5:1e:b6:aa:82:c3:6c:c9:03:61:06:0c:aa:83:d7:14:
         43:13:0d:90:12:0a:5c:36:d0:cc:27:5e:77:ec:0c:db:e5:14:
         f5:50:ed:b9:0a:8d:90:26:d7:e4:e8:83:36:9c:a0:2f:d9:bb:
         6f:ca:28:30:5b:4b:57:4a:b3:99:41:74:78:d4:7d:73:97:ad:
         cc:ae:9f:ad:f2:24:de:54:37:8c:e6:d6:4c:2b:61:6b:09:6c:
         df:a8:bb:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:59:10 2025 by rpki-client