Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/9P4KRmbNMMH4bNl94azT7u_2v9I.roa
File:                     9P4KRmbNMMH4bNl94azT7u_2v9I.roa (raw, json)
Hash identifier:          CQbeX02Bv6/eqDfZI/QQ78BPHlP/2cYws0d3P2opzL4=
Subject key identifier:   F4:FE:0A:46:66:CD:30:C1:F8:6C:D9:7D:E1:AC:D3:EE:EF:F6:BF:D2
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       04FA
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/9P4KRmbNMMH4bNl94azT7u_2v9I.roa
Signing time:             Sun 01 Jun 2025 01:30:48 +0000
ROA not before:           Sun 01 Jun 2025 01:30:48 +0000
ROA not after:            Sat 23 May 2026 09:51:00 +0000
asID:                     9605
IP address blocks:        240a:61:7e00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 22:24:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1274 (0x4fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Jun  1 01:30:48 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=F4FE0A4666CD30C1F86CD97DE1ACD3EEEFF6BFD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3b:c0:87:ad:cf:d0:9e:3a:74:57:9f:5d:67:
                    81:8e:2d:31:0b:03:89:00:1d:33:49:b0:6b:46:a4:
                    11:15:13:14:e6:e7:62:19:26:26:fb:13:e2:39:17:
                    ca:38:0c:61:47:5a:b8:1a:f1:a2:24:c5:a2:97:70:
                    dd:dc:ec:4e:c0:2c:2a:11:a3:ba:78:17:54:2b:54:
                    83:2e:ff:1e:bb:26:0a:51:01:8a:ba:2a:d5:41:b4:
                    31:67:eb:fd:6e:99:77:b9:e3:31:7f:5e:c6:65:fc:
                    a1:55:fe:c6:39:84:e8:99:52:9d:e5:d0:38:58:2d:
                    25:1d:4a:7a:60:20:29:84:2c:67:bc:31:1f:44:9e:
                    c8:0d:66:37:5e:b2:7a:31:ea:86:6b:3a:cb:85:e4:
                    a8:93:6b:83:e4:fe:34:33:90:ba:dd:a1:00:81:d0:
                    04:6f:b2:c1:99:5a:44:8f:db:4e:8b:6e:98:99:89:
                    b5:42:cd:a3:30:16:31:e6:f0:14:02:18:c9:3b:89:
                    c8:1f:a0:fc:dc:43:2b:ab:d2:cc:af:5e:13:df:e7:
                    b8:89:dd:c1:6b:2e:02:f4:de:81:2a:ac:0a:ae:77:
                    01:21:5e:b9:ff:05:2f:c7:0a:db:2b:01:b6:89:7e:
                    fc:47:eb:c1:06:ac:57:5c:da:0f:dd:0a:78:59:b5:
                    9b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:FE:0A:46:66:CD:30:C1:F8:6C:D9:7D:E1:AC:D3:EE:EF:F6:BF:D2
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/9P4KRmbNMMH4bNl94azT7u_2v9I.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:61:7e00::/48

    Signature Algorithm: sha256WithRSAEncryption
         12:1c:bb:e7:b2:cf:94:c0:f3:f8:fc:0c:d8:48:5a:08:59:9c:
         44:71:03:5c:4b:1f:ce:2b:fa:7e:6d:50:73:a6:2f:5f:a2:05:
         e9:b5:bb:04:5f:5f:9d:1d:fb:7c:06:88:c1:f6:ac:2a:5c:0d:
         5f:38:71:c6:43:8c:90:df:f4:b6:0d:f5:52:2c:ab:e4:a4:04:
         71:db:f1:9e:6e:41:3c:28:4e:a0:ff:9f:19:d7:58:11:96:09:
         8c:8a:a1:77:c6:24:ee:a7:8c:e6:a1:5d:4a:22:8d:ae:83:bc:
         d6:03:9d:13:73:72:df:a0:9c:fb:ca:5b:9d:28:83:96:bd:5f:
         00:15:c0:64:66:d6:bd:42:ff:85:25:a0:08:bd:14:a3:2e:78:
         1c:4d:92:0f:35:17:2d:4e:40:b5:90:21:d8:9f:d3:39:42:81:
         12:bd:14:9b:c9:bb:5c:73:73:36:e9:a6:e5:2a:ae:22:ce:f6:
         6e:cb:32:81:c0:82:c6:31:d8:04:58:7a:4c:21:be:ca:bb:93:
         5e:2c:9b:70:5a:4f:4d:f8:17:07:00:10:c4:55:98:c1:89:5e:
         76:a3:06:85:8d:57:1b:3f:2f:56:fe:9f:d9:0f:7c:34:00:c2:
         a9:3a:5a:7b:eb:c1:50:dd:1d:af:21:e2:fb:52:1d:b8:9b:12:
         0f:1f:ce:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:19:19 2025 by rpki-client