Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/pywqxEiU5M38tyEx4XPqb_WG-Ac.roa
File:                     pywqxEiU5M38tyEx4XPqb_WG-Ac.roa (raw, json)
Hash identifier:          EwkEFeYekk2HgkTHx63+DPLk6HeaIp8uUDa8PIjdKUQ=
Subject key identifier:   A7:2C:2A:C4:48:94:E4:CD:FC:B7:21:31:E1:73:EA:6F:F5:86:F8:07
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0413
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/pywqxEiU5M38tyEx4XPqb_WG-Ac.roa
Signing time:             Tue 01 Apr 2025 01:35:31 +0000
ROA not before:           Tue 01 Apr 2025 01:35:31 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:6b:4e00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 14 Apr 2025 07:48:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1043 (0x413)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr  1 01:35:31 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=A72C2AC44894E4CDFCB72131E173EA6FF586F807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a9:a2:35:eb:39:7b:e0:04:e7:83:34:eb:80:
                    c8:66:f8:13:d0:df:84:a5:9c:9f:2f:6e:78:18:de:
                    1f:df:59:b8:6f:3d:35:63:76:0f:11:4e:6a:b9:b8:
                    5b:46:35:8c:66:38:0a:14:85:8e:00:ef:75:90:bd:
                    68:02:b2:8e:6a:cd:70:3e:70:0f:8c:63:d1:4f:a0:
                    55:b6:08:95:79:88:9e:1f:26:0e:4f:8f:5b:e7:14:
                    8c:bb:0c:1e:54:22:6b:dd:9d:5c:49:78:d3:b5:00:
                    12:43:ac:9a:af:ec:e7:97:1d:f7:ef:56:5b:71:4d:
                    b4:f7:d3:97:e5:1c:1e:6d:ec:46:a8:6f:77:83:3f:
                    42:cc:c9:cf:16:4f:62:c6:64:a6:3f:3e:ab:ab:cc:
                    40:50:18:c9:47:00:4b:41:7e:06:9b:f8:58:97:75:
                    1e:97:68:07:42:0a:13:30:3b:fa:99:06:06:95:01:
                    08:62:3c:9d:22:2c:da:6e:0f:59:2d:79:fc:75:ce:
                    87:cb:ac:a0:15:82:9a:ed:49:10:89:db:ee:a7:fa:
                    aa:46:21:21:c0:1a:74:a2:a1:9d:4a:6f:ca:82:fa:
                    35:a9:b6:e2:7b:ae:79:ac:72:e9:3e:da:26:5d:2b:
                    71:45:15:c0:c4:c3:44:a6:6e:06:06:79:85:93:f6:
                    e9:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:2C:2A:C4:48:94:E4:CD:FC:B7:21:31:E1:73:EA:6F:F5:86:F8:07
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/pywqxEiU5M38tyEx4XPqb_WG-Ac.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:4e00::/40

    Signature Algorithm: sha256WithRSAEncryption
         9c:e4:f2:b8:e8:8b:8f:53:81:13:82:0e:42:2b:89:4d:b4:79:
         c6:59:fe:5a:57:48:6b:29:17:bb:28:d2:53:f6:6f:e3:0c:7b:
         71:34:7f:13:64:e0:b5:73:8a:0b:88:65:82:7d:c6:1d:17:ab:
         9a:e1:58:16:d7:61:74:69:91:53:6c:67:3f:f6:29:5a:c9:28:
         a0:9a:a7:0b:19:f9:97:60:67:40:00:5b:c3:1a:6a:29:a7:4b:
         b5:c6:45:57:10:8c:a0:fd:78:7d:fc:21:b6:60:5f:27:39:e8:
         03:d5:f6:96:70:0d:12:34:1f:d3:0f:78:68:9d:74:69:64:58:
         f0:a2:63:37:36:e9:9b:08:ba:9a:28:75:a7:f1:68:3c:59:f2:
         60:15:0e:18:ac:59:a3:cb:97:a4:12:87:ab:b3:4d:a2:9a:97:
         f3:58:8a:b0:50:2f:df:66:d2:b1:8f:67:fe:ae:69:b5:fe:ea:
         a5:79:4f:4b:bd:a7:4e:50:6d:b8:cd:d2:24:d7:2b:37:73:df:
         d3:3c:6e:e6:ae:3a:bb:f8:07:8e:32:3c:8a:8f:78:bc:7c:8e:
         41:3c:08:de:07:e3:d7:11:7d:4b:9d:0d:52:b2:cb:d6:40:2f:
         7b:5e:9c:5b:bb:00:20:61:b0:17:2e:ad:0f:23:b0:88:31:12:
         35:f0:d0:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:21:47 2025 by rpki-client