Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/tFXlDR7M8-k23YpyzI_l3_3GY54.roa
File:                     tFXlDR7M8-k23YpyzI_l3_3GY54.roa (raw, json)
Hash identifier:          bPxEwZNa5jyY+/W/reu18L1RBl3poS9edjDHwKTnUcQ=
Subject key identifier:   B4:55:E5:0D:1E:CC:F3:E9:36:DD:8A:72:CC:8F:E5:DF:FD:C6:63:9E
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0433
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/tFXlDR7M8-k23YpyzI_l3_3GY54.roa
Signing time:             Tue 01 Apr 2025 01:39:25 +0000
ROA not before:           Tue 01 Apr 2025 01:39:25 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:6b:a000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 14 Apr 2025 05:12:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1075 (0x433)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr  1 01:39:25 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=B455E50D1ECCF3E936DD8A72CC8FE5DFFDC6639E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1b:94:a1:5f:e7:6a:61:3a:82:4e:d9:d0:f5:
                    b1:ad:7a:09:8e:4f:4e:f5:34:2d:04:d4:8b:04:65:
                    de:60:b3:f7:02:9d:70:2d:0a:f1:02:4d:62:04:72:
                    01:12:b5:2d:11:ec:33:70:7b:ce:bf:55:3c:e5:ef:
                    21:4a:d3:75:02:63:36:10:0e:97:b4:bd:87:13:b2:
                    45:c3:64:81:34:b2:44:8d:a1:3d:9e:10:e5:47:51:
                    48:e3:f1:3f:9d:46:a1:5d:d6:9d:f0:d8:7d:a6:74:
                    60:72:3d:14:62:80:68:ce:9a:75:3c:51:87:bf:0c:
                    71:61:3d:b5:78:0a:5d:ac:e0:5b:12:db:1d:96:94:
                    81:63:d4:4c:ca:ca:e0:e0:e2:93:fa:24:57:de:d0:
                    4c:cd:44:67:10:5d:3c:c7:7d:37:8c:91:4f:92:59:
                    43:74:a4:2f:8c:1c:27:f5:89:17:65:f0:fd:44:6a:
                    2d:a7:da:38:17:7e:6c:44:45:d6:82:ab:cd:7f:f2:
                    52:a2:f4:3f:3c:91:67:07:ad:76:cb:17:6f:3c:03:
                    9b:ec:08:08:02:13:09:e9:bb:c0:ae:f3:e8:9b:3d:
                    da:f1:00:29:71:8c:2d:9c:43:31:0c:b6:5b:cc:22:
                    b1:bf:65:d2:1d:00:8c:53:69:06:bb:7c:f6:69:07:
                    71:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:55:E5:0D:1E:CC:F3:E9:36:DD:8A:72:CC:8F:E5:DF:FD:C6:63:9E
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/tFXlDR7M8-k23YpyzI_l3_3GY54.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:a000::/40

    Signature Algorithm: sha256WithRSAEncryption
         03:6d:ec:2a:88:d7:37:61:95:f4:46:11:9a:70:74:cc:2f:bd:
         09:0f:82:b9:b6:71:50:bf:1e:dd:46:48:72:1f:26:8c:ee:42:
         06:91:b6:0c:8b:3c:b0:29:c8:18:a6:3d:3a:cd:54:1f:66:56:
         c1:22:f2:cf:08:06:12:10:d4:c5:7e:c3:a8:5b:32:67:6f:85:
         9f:02:77:a5:7d:5b:78:f2:1b:70:29:f3:c6:d8:ae:15:f2:04:
         fc:86:dc:4c:42:4a:6d:54:d3:ff:95:9f:f9:b6:68:12:55:ed:
         8a:7e:6d:71:b5:ba:70:db:c8:d8:56:5f:fc:fa:fc:43:28:41:
         b2:07:57:e3:d2:b9:48:0c:9b:af:4e:e2:2c:c0:14:88:a9:72:
         ca:1b:a7:13:96:5b:cb:36:c6:2b:0d:42:05:ad:bc:32:5d:97:
         a9:59:39:24:b8:d8:c7:1e:22:8c:43:30:de:10:f6:54:ef:67:
         54:cc:a3:08:82:41:38:e7:18:c5:5c:7c:28:d6:82:1c:9e:4b:
         8a:7a:ee:0b:f3:24:3f:2c:f7:30:81:8c:2b:6e:fa:06:5a:00:
         d1:69:90:10:66:a5:44:e5:ae:0d:e2:a3:d8:9f:03:b2:d4:6f:
         de:e4:9a:a5:00:9b:51:c3:43:1e:cf:d5:95:05:82:a9:fb:2d:
         78:fb:c6:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:05:11 2025 by rpki-client