Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/sGQzyQGJxL7ceSZkn2uoajLOvgU.roa
File:                     sGQzyQGJxL7ceSZkn2uoajLOvgU.roa (raw, json)
Hash identifier:          e93UCv9dA9vaYOTj8BhAA9CVjqctcbC8GCf3ZJIkqT0=
Subject key identifier:   B0:64:33:C9:01:89:C4:BE:DC:79:26:64:9F:6B:A8:6A:32:CE:BE:05
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       047C
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/sGQzyQGJxL7ceSZkn2uoajLOvgU.roa
Signing time:             Tue 01 Apr 2025 01:45:34 +0000
ROA not before:           Tue 01 Apr 2025 01:45:34 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:6b:ae00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 14 Apr 2025 05:12:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1148 (0x47c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr  1 01:45:34 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=B06433C90189C4BEDC7926649F6BA86A32CEBE05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:66:56:18:04:d1:22:ec:7d:da:f5:51:95:c8:
                    81:bd:9f:7e:2e:72:97:eb:55:31:6f:8d:55:8a:74:
                    65:a2:1b:11:3c:a5:6f:9b:cd:fc:36:9f:74:c3:b9:
                    c1:c0:b8:64:52:17:93:5b:aa:6a:29:b0:0e:88:21:
                    48:6f:9f:ec:d2:14:33:1d:c0:67:85:d2:81:d1:48:
                    2a:6e:76:ad:75:46:98:c7:13:09:5c:f6:a5:6d:e9:
                    cc:c1:a3:5f:81:53:a6:37:e0:65:15:39:18:f4:85:
                    1d:48:c6:c5:4c:07:66:b2:8b:b4:05:e6:9e:b9:e7:
                    c6:63:23:6a:73:b5:31:b1:a7:27:d5:6c:92:d2:e6:
                    5d:3e:da:31:80:6a:9a:93:56:da:83:ea:97:b1:5f:
                    0f:5f:30:59:1a:8b:8d:2f:b4:b7:a9:62:f1:84:e2:
                    93:26:a7:bd:d2:46:94:fe:62:1e:05:38:87:b9:5a:
                    e3:ed:33:49:33:6e:e6:0a:01:f8:3e:2b:d2:a2:07:
                    47:e0:f7:1f:d6:a3:34:8b:dc:c0:39:5b:6b:2c:fa:
                    85:3a:09:cf:e8:20:53:95:0d:4f:02:9f:8c:4c:18:
                    20:4b:7b:8b:37:2e:ea:2d:45:1d:27:d2:0f:54:8a:
                    24:c1:e4:4e:ed:17:cc:7b:54:06:8f:c1:81:3b:bd:
                    f6:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:64:33:C9:01:89:C4:BE:DC:79:26:64:9F:6B:A8:6A:32:CE:BE:05
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/sGQzyQGJxL7ceSZkn2uoajLOvgU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:ae00::/40

    Signature Algorithm: sha256WithRSAEncryption
         ca:8d:51:29:31:6d:be:65:cb:fb:3c:6b:a8:36:e3:a1:a1:42:
         55:90:92:59:13:26:72:de:f3:5c:dc:ff:ef:5d:17:6c:73:5a:
         58:08:ec:d6:f0:e7:bd:9b:e3:f5:08:11:f6:9b:54:60:43:a6:
         44:00:7d:56:fc:a6:31:1a:09:11:41:4d:81:e2:2a:0b:4b:eb:
         e1:ee:d6:3c:4a:54:13:d4:f0:7c:9f:20:90:e6:b8:11:9c:0c:
         12:cb:78:0e:10:d1:c8:6f:52:7e:eb:46:e0:b0:14:09:07:3a:
         4d:1d:aa:a1:91:4a:0b:c4:ec:d7:4c:91:cc:bc:4d:e2:8f:d6:
         6e:cd:7a:63:67:44:c4:9d:63:33:9f:2a:ee:41:1d:ca:5c:31:
         78:c9:60:6d:0c:d0:a4:00:26:9f:42:12:2d:c8:4a:3c:28:c4:
         be:d6:56:e8:36:94:6e:74:44:d1:13:bc:16:da:46:90:c7:f4:
         bf:56:0f:3f:c8:a8:a3:86:d6:03:d6:fe:1f:34:27:32:bd:ac:
         9f:77:bf:16:39:48:15:f1:ff:03:38:f3:27:43:8f:f4:d0:a3:
         c0:3f:40:01:d2:9f:0f:29:c9:42:b5:23:91:ed:8e:cd:18:05:
         2c:d8:c8:b6:a6:32:cd:cb:13:7a:20:b6:03:57:c9:7e:74:a9:
         26:c5:69:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:04:46 2025 by rpki-client