Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/9yEM7JClghVAUgzLRgoIxj0-T4g.roa
File:                     9yEM7JClghVAUgzLRgoIxj0-T4g.roa (raw, json)
Hash identifier:          PdpSGBKnfwBbCh+OVoPm1imZyUIk9NjDU61IgZuCR4w=
Subject key identifier:   F7:21:0C:EC:90:A5:82:15:40:52:0C:CB:46:0A:08:C6:3D:3E:4F:88
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       04F9
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/9yEM7JClghVAUgzLRgoIxj0-T4g.roa
Signing time:             Sun 01 Jun 2025 01:30:48 +0000
ROA not before:           Sun 01 Jun 2025 01:30:48 +0000
ROA not after:            Sat 23 May 2026 09:51:00 +0000
asID:                     9605
IP address blocks:        240a:61:7c00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 23:17:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1273 (0x4f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Jun  1 01:30:48 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=F7210CEC90A5821540520CCB460A08C63D3E4F88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:a6:db:d8:86:b4:f2:0e:54:fb:3b:ba:bd:45:
                    1c:86:b8:01:2c:58:97:9e:5d:09:5e:fd:18:97:aa:
                    f2:d9:76:0e:33:ae:ab:88:57:d0:c6:dc:8a:4e:04:
                    91:ac:16:cf:33:7b:30:07:39:96:54:53:b6:93:fb:
                    46:44:a1:ec:a4:ce:01:1e:d1:5f:5c:3b:c0:74:68:
                    6c:73:49:3d:28:8e:3b:38:1c:3e:4b:87:dc:c3:57:
                    db:e6:72:bf:8e:5e:fc:43:1a:b5:6b:8d:3a:1e:4f:
                    de:a1:0b:3c:af:d9:1a:b7:00:ca:54:87:64:81:72:
                    28:d1:ed:c9:2a:8a:e7:b8:f8:c0:e1:95:88:e7:93:
                    2d:e4:10:e5:52:c2:cd:e8:03:b0:68:3f:a9:54:be:
                    53:9d:ea:7d:af:f4:43:71:e8:33:ad:7f:5d:e7:40:
                    84:67:db:cb:ca:8a:2c:bb:00:6a:06:66:16:c0:c0:
                    d2:60:4d:58:75:28:bb:c0:51:70:88:12:34:ed:12:
                    04:c6:05:41:92:37:81:4e:a2:11:c0:0f:eb:b0:17:
                    9a:99:d7:6e:15:24:ee:02:eb:3c:72:21:d9:86:55:
                    a9:85:80:01:4a:6c:d4:9d:d0:ed:41:89:66:dc:52:
                    33:24:b4:7e:cd:57:8e:58:18:27:f5:a6:53:05:3b:
                    8e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:21:0C:EC:90:A5:82:15:40:52:0C:CB:46:0A:08:C6:3D:3E:4F:88
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/9yEM7JClghVAUgzLRgoIxj0-T4g.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:61:7c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         b2:47:c6:14:12:99:80:86:33:24:bf:03:f4:71:fd:b3:97:2c:
         5e:05:dd:3f:b4:67:97:53:21:54:c2:8e:f6:2a:29:af:19:67:
         1c:45:98:60:5b:75:37:ed:71:60:50:7f:7f:bc:a5:47:de:81:
         cd:c9:fd:f0:8b:68:53:a6:55:dd:86:c4:60:d6:6f:52:3b:ac:
         1c:03:1d:0c:dc:31:f9:de:04:53:94:c5:41:57:e3:0c:9b:12:
         1c:2f:9d:47:85:9b:a8:c6:46:70:44:12:00:03:0c:e8:9f:78:
         15:36:52:6b:64:a8:b9:4d:c9:78:da:69:3b:54:d0:fb:26:81:
         3a:64:60:8a:85:38:c1:2a:7b:78:bc:fb:f9:10:86:3c:c8:e4:
         8d:b3:4a:de:9c:d6:da:97:bc:ba:35:1e:ef:6b:55:ec:31:28:
         7e:68:dc:a6:b7:5f:e1:68:89:00:2c:24:5a:8a:d8:1c:f0:0c:
         9c:ec:99:d4:e6:b3:94:59:c9:07:5f:e4:b5:7f:5d:82:26:50:
         de:64:0e:b7:cd:6e:e7:1e:e2:0c:eb:e4:53:14:66:7a:d4:16:
         0b:f3:86:50:d7:d0:99:e1:96:ca:ed:4e:a4:55:18:bd:06:0d:
         bd:74:45:c8:32:ec:c3:0e:1f:37:3b:0e:90:42:a9:c0:f6:98:
         26:78:1d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 02:45:00 2025 by rpki-client