Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/FUYrUNR85PmavJ05TCHSjia5Ac4.roa
File:                     FUYrUNR85PmavJ05TCHSjia5Ac4.roa (raw, json)
Hash identifier:          BNoQ3qu0IYVfND37rOlFr1E0UAuJ6TVIpmZC4XJA0GU=
Subject key identifier:   15:46:2B:50:D4:7C:E4:F9:9A:BC:9D:39:4C:21:D2:8E:26:B9:01:CE
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       04FB
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/FUYrUNR85PmavJ05TCHSjia5Ac4.roa
Signing time:             Sun 01 Jun 2025 01:30:48 +0000
ROA not before:           Sun 01 Jun 2025 01:30:48 +0000
ROA not after:            Sat 23 May 2026 09:51:00 +0000
asID:                     9605
IP address blocks:        240a:61:8000::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Jun 2025 14:15:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1275 (0x4fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Jun  1 01:30:48 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=15462B50D47CE4F99ABC9D394C21D28E26B901CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ca:a0:44:00:59:ea:27:79:6f:4c:86:38:d8:
                    d6:2f:90:6f:96:d1:8a:5a:2c:a3:29:8b:41:3d:39:
                    ba:8f:fd:6a:c3:bf:f2:8d:ce:7f:f6:92:f0:67:4a:
                    58:04:30:a6:10:90:9e:fb:e6:76:3b:3f:9c:e8:96:
                    23:ae:59:29:55:a7:4d:26:62:c3:9a:c7:53:ec:87:
                    61:c9:ac:44:37:d0:19:b3:ca:e1:42:f6:ca:1c:f8:
                    1f:b2:d7:26:a5:d1:b6:c5:2f:df:1f:ad:db:24:8b:
                    bc:45:73:bf:94:41:cc:88:aa:25:28:55:57:57:1f:
                    e7:9b:13:1e:3b:5f:a7:63:e1:1d:b3:a3:f9:72:cc:
                    ff:6c:ab:ef:d0:1a:aa:98:7a:49:81:ae:29:58:ae:
                    63:c5:69:28:c5:96:fa:03:54:00:4b:00:82:9e:d8:
                    6b:39:a9:24:20:66:b6:e9:8b:d9:50:54:68:3c:69:
                    14:f0:de:12:0a:ea:86:8a:8d:ea:56:45:94:27:aa:
                    88:ed:ee:38:ae:98:3b:67:b2:35:0b:26:e8:00:48:
                    0b:b3:d4:4c:9c:33:b3:49:e1:40:a1:d1:ca:87:3c:
                    2f:e8:5d:d9:63:09:32:62:9d:9e:2f:64:cb:88:38:
                    d2:99:cb:38:cb:18:06:b0:be:07:13:72:6a:97:ab:
                    85:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:46:2B:50:D4:7C:E4:F9:9A:BC:9D:39:4C:21:D2:8E:26:B9:01:CE
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/FUYrUNR85PmavJ05TCHSjia5Ac4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:61:8000::/37

    Signature Algorithm: sha256WithRSAEncryption
         05:da:13:33:e0:51:19:13:cf:23:da:ee:a5:29:94:78:94:47:
         07:86:41:c4:cd:48:f0:59:fa:0a:8c:da:31:cc:9f:4d:a9:03:
         fa:25:a2:b5:0e:eb:f1:95:5f:21:e6:09:24:9c:e5:08:f6:17:
         b2:dd:65:4f:13:30:60:8f:0e:a4:55:21:ad:57:74:c6:53:b9:
         59:fe:ef:a0:c2:81:bb:8a:b3:ff:d1:18:7a:07:4a:3b:bc:a6:
         ae:01:c2:ee:3e:d3:fd:3e:c7:a7:3f:e0:12:05:df:dd:9a:37:
         b2:53:bd:87:31:65:14:98:42:8e:c4:e4:0d:c5:06:ae:ba:15:
         fb:f1:ea:69:b6:74:09:75:14:20:1f:f2:45:84:e7:98:1e:38:
         0c:5f:6d:d1:b5:c1:88:c5:b8:27:15:0f:5b:af:05:3d:65:dc:
         e0:3f:2f:89:51:3f:63:0f:30:21:65:4d:76:f9:b0:45:05:bf:
         e7:7b:fb:7c:9a:ba:de:55:1e:06:dd:b5:4c:b1:77:6f:5d:14:
         1e:fd:5a:fa:9b:31:2c:e6:af:e3:42:bd:4d:c7:c6:89:60:0e:
         8e:d1:a2:08:b1:7e:5c:13:ba:03:7c:fd:3a:c0:98:df:dc:8a:
         22:93:28:e4:63:31:98:d3:a1:3c:b0:e8:e4:f7:ff:40:1c:dd:
         6a:c6:3f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 17:41:34 2025 by rpki-client