Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/sRDoMnZNZFBLhDSvS6DN1Wuosgs.roa
File:                     sRDoMnZNZFBLhDSvS6DN1Wuosgs.roa (raw, json)
Hash identifier:          drMW8S+YDpAXh3Hd1UM6hszehIsnv8zdiZD0SN1IRWQ=
Subject key identifier:   B1:10:E8:32:76:4D:64:50:4B:84:34:AF:4B:A0:CD:D5:6B:A8:B2:0B
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       049E
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/sRDoMnZNZFBLhDSvS6DN1Wuosgs.roa
Signing time:             Tue 01 Apr 2025 01:49:21 +0000
ROA not before:           Tue 01 Apr 2025 01:49:21 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:6b:9400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 14 Apr 2025 05:12:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1182 (0x49e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr  1 01:49:21 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=B110E832764D64504B8434AF4BA0CDD56BA8B20B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:76:a9:a5:b3:68:79:b9:9f:de:5e:7d:d5:6c:
                    2e:b6:aa:4b:05:e8:1c:60:88:b5:1b:00:eb:76:aa:
                    a4:f1:6b:a6:4e:1e:f8:f2:4f:b0:46:07:a0:99:2c:
                    ac:7f:19:26:17:2b:e4:9a:7d:80:c5:d0:8f:17:e3:
                    c6:55:ed:0c:22:a9:7e:ea:6a:de:c5:f2:92:bf:05:
                    37:80:a1:85:a2:1f:21:25:d7:f7:1c:16:64:a3:0f:
                    44:9b:a3:19:fd:3b:b4:fe:1a:44:72:41:e5:25:43:
                    bc:d4:25:43:ca:38:bb:2d:c5:c4:6e:cf:7f:b7:ec:
                    89:f1:0b:1e:fc:0f:79:2a:b3:8d:5c:da:ed:78:a1:
                    7e:c8:a2:b3:67:d2:d6:d6:6f:b3:82:33:7f:b1:04:
                    87:00:27:04:0f:9c:de:d3:e6:cb:03:6e:85:7d:6c:
                    14:0d:d0:a1:e7:c5:24:42:ea:85:65:d9:cb:18:4a:
                    00:fe:42:50:96:3f:94:39:4e:51:a7:d5:7f:58:a4:
                    1d:7f:87:9d:91:6b:46:8f:27:42:9d:64:86:1b:d4:
                    37:3d:fc:64:32:eb:c8:ed:c1:4f:57:45:05:fb:69:
                    88:c2:80:a0:bc:38:99:b0:b0:7d:ac:52:67:82:9d:
                    7f:f2:80:fa:d5:7b:d5:b2:e2:6d:22:f6:3f:74:5e:
                    45:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:10:E8:32:76:4D:64:50:4B:84:34:AF:4B:A0:CD:D5:6B:A8:B2:0B
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/sRDoMnZNZFBLhDSvS6DN1Wuosgs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:9400::/40

    Signature Algorithm: sha256WithRSAEncryption
         0a:1c:11:0c:60:b5:8f:13:17:ae:1d:d7:5e:a2:86:97:c0:55:
         bd:ff:ea:c8:47:00:11:71:61:df:fa:94:ec:ed:00:92:c2:7f:
         ce:8a:46:3c:37:b8:ce:4e:61:df:36:7e:20:2a:76:75:5c:25:
         a9:34:40:85:59:0c:6b:f4:19:86:aa:ca:8c:1a:63:5f:34:e5:
         bd:9a:b7:59:2e:b3:11:be:1e:db:e8:51:0f:a4:b1:d6:63:bd:
         a1:45:4e:0c:cb:e1:5d:a3:99:97:22:1e:e4:a0:be:5b:cb:16:
         57:a8:03:fd:34:de:ab:b1:32:90:dc:16:6c:5d:f9:6a:46:85:
         77:41:b5:da:e8:f8:59:cb:88:e4:e0:de:c7:30:84:75:5f:e3:
         06:27:80:0b:55:3c:41:2e:f0:0a:12:e4:21:74:4a:78:cd:c7:
         a3:8a:56:1c:80:0a:f3:89:b1:e7:ba:72:c1:64:56:be:86:94:
         77:35:6a:b9:0f:e3:77:6d:9f:4a:da:42:b5:11:f0:cc:da:be:
         6d:c5:5f:00:ef:b3:5c:9b:d3:10:0a:eb:bc:42:d3:c3:2b:4c:
         13:52:54:20:d6:b1:35:33:96:cd:4f:b3:b9:13:8d:f7:a9:81:
         02:a5:9f:97:45:2f:af:57:17:a0:f1:be:64:85:e3:50:e7:a1:
         c8:ef:ce:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:02:18 2025 by rpki-client