Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/qQToz8ONjzLQimukbgmPq1l8wS0.roa
File:                     qQToz8ONjzLQimukbgmPq1l8wS0.roa (raw, json)
Hash identifier:          GmaXWUXbHVzK9EvNGIdqe6pX3ePIF4yjnLbqa38ovKk=
Subject key identifier:   A9:04:E8:CF:C3:8D:8F:32:D0:8A:6B:A4:6E:09:8F:AB:59:7C:C1:2D
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0404
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/qQToz8ONjzLQimukbgmPq1l8wS0.roa
Signing time:             Tue 01 Apr 2025 01:32:14 +0000
ROA not before:           Tue 01 Apr 2025 01:32:14 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:6b:1b00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 14 Apr 2025 05:12:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1028 (0x404)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr  1 01:32:14 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=A904E8CFC38D8F32D08A6BA46E098FAB597CC12D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ba:02:74:e5:03:a4:a7:a9:3e:0a:9f:4b:b8:
                    6f:a4:71:1f:47:3a:ff:22:ab:18:8a:5d:5f:13:0f:
                    be:43:4e:3a:f3:f3:15:f5:b6:46:82:a6:f8:fb:21:
                    3a:6f:a9:2e:2b:b5:57:a6:3a:e6:04:42:8d:6e:ba:
                    bc:e1:49:39:d9:53:28:32:63:01:be:96:cf:5e:68:
                    d8:79:1a:6f:67:71:ae:85:e2:36:ce:b6:08:24:10:
                    07:bd:a7:1e:b7:8f:22:64:2c:7d:bc:b9:5b:04:9c:
                    b6:b7:e9:fa:7c:fa:df:70:f0:f4:81:f5:a0:e0:83:
                    31:f1:e5:99:ba:67:3d:a3:39:eb:44:cf:3b:23:af:
                    5d:ee:3f:63:20:8a:7d:39:16:92:22:ab:de:82:0e:
                    81:dc:8e:58:47:32:72:a6:8d:c6:67:b5:28:82:e7:
                    ff:c3:a6:9f:cf:d1:b4:ab:2e:5c:5a:4a:cc:67:47:
                    be:ca:17:90:fe:67:f2:7f:63:20:d0:75:40:0e:c6:
                    39:2a:23:37:b9:f4:52:73:2b:db:5a:52:49:5a:d5:
                    6c:68:9a:ee:de:95:12:a0:52:42:69:ac:d6:e7:7e:
                    8e:51:1f:48:6f:17:63:e0:73:ef:06:a7:0d:ff:93:
                    2b:43:4f:5c:67:6d:45:7b:fc:2a:67:4d:1c:e4:b3:
                    97:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:04:E8:CF:C3:8D:8F:32:D0:8A:6B:A4:6E:09:8F:AB:59:7C:C1:2D
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/qQToz8ONjzLQimukbgmPq1l8wS0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:1b00::/40

    Signature Algorithm: sha256WithRSAEncryption
         30:b9:c1:cf:e0:30:bd:d3:5e:c2:ea:4f:6c:19:47:6f:ca:a4:
         ef:00:52:6d:7b:88:60:db:42:a6:92:bb:d9:4d:42:e5:8b:b8:
         3d:8e:a7:8c:36:9e:47:a7:b8:36:c5:dd:87:df:bd:b2:f3:f2:
         f5:89:47:6d:f9:02:78:ce:06:88:41:b5:af:ef:65:cc:85:55:
         97:71:0e:08:30:c9:db:91:6a:a2:c2:a8:9b:5f:e6:0a:25:b9:
         5e:f1:26:3f:c7:f6:9e:98:ac:3c:a0:ee:54:02:04:65:a2:3c:
         50:9f:9e:65:8f:4f:3c:34:87:ff:32:0b:e7:e5:9b:aa:0c:40:
         fb:d9:63:d4:8b:93:c0:61:3d:ab:f9:c8:f6:82:de:c0:71:6b:
         39:f7:e5:5b:cc:ea:f0:0b:63:3f:54:22:91:22:7b:e7:27:e4:
         fa:8b:54:52:b9:83:d1:ca:dd:5a:f8:49:b4:52:c6:75:66:5e:
         4e:63:d1:70:89:67:31:51:1b:e4:8f:0a:30:69:bb:dd:17:8b:
         55:9c:e1:54:a6:2b:6b:5b:bc:e7:99:78:9c:41:e6:16:da:e6:
         2e:56:fa:ad:ac:65:46:f3:04:fe:68:25:f4:37:fd:3d:72:49:
         f1:d9:0d:49:7e:47:dc:78:6d:92:ea:f7:e8:96:aa:93:a0:12:
         94:a7:ee:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:01:45 2025 by rpki-client