Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Pwenhvr70gdggvcmWGPjognz2ls.roa
File:                     Pwenhvr70gdggvcmWGPjognz2ls.roa (raw, json)
Hash identifier:          WeZJlWK3cogW1H6D3w9o8McEnee+KKS46EBR5zeHPlo=
Subject key identifier:   3F:07:A7:86:FA:FB:D2:07:60:82:F7:26:58:63:E3:A2:09:F3:DA:5B
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       04F7
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Pwenhvr70gdggvcmWGPjognz2ls.roa
Signing time:             Sun 01 Jun 2025 01:30:46 +0000
ROA not before:           Sun 01 Jun 2025 01:30:46 +0000
ROA not after:            Sat 23 May 2026 09:51:00 +0000
asID:                     9605
IP address blocks:        240a:61:7000::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 21:09:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1271 (0x4f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Jun  1 01:30:46 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=3F07A786FAFBD2076082F7265863E3A209F3DA5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:1e:1f:e1:40:e6:89:98:f6:c7:28:b5:e0:97:
                    b0:3b:69:aa:d1:e9:77:92:fa:11:bd:cd:2e:6b:77:
                    d7:67:4e:13:ee:59:8d:cb:07:b5:af:03:86:5f:89:
                    6e:24:e3:ac:0e:3b:01:82:1a:38:9e:27:f6:72:be:
                    28:25:8a:83:0b:74:ad:a9:30:a5:6e:48:e4:59:28:
                    f9:91:6d:d1:ba:1d:56:e2:88:c6:9e:ac:16:6a:63:
                    fb:f4:e0:0c:39:f7:bc:12:97:33:bb:93:c9:09:65:
                    39:68:04:a7:e4:5e:e8:7b:fb:ed:39:87:10:ab:d4:
                    fa:01:e9:8c:29:92:ef:55:f6:62:a4:f5:8a:43:b5:
                    2c:d8:ff:c6:74:fd:99:d9:4f:7b:d1:59:4e:ec:0f:
                    46:92:d8:71:1b:7b:99:2c:7b:f5:c3:80:1b:70:ff:
                    28:36:d7:8c:88:0b:1e:f1:29:69:a1:0c:4b:8c:6d:
                    e2:b5:cf:5c:30:b5:9c:23:dc:c2:7a:c2:a1:fd:e6:
                    23:6d:b8:43:41:26:3e:5c:7c:c5:6e:84:41:00:53:
                    df:2d:94:26:09:d3:07:dc:b9:68:b2:14:7c:dc:7c:
                    50:6b:e4:83:6c:7e:ca:e3:fd:ca:77:9f:24:fb:aa:
                    a8:14:8a:88:8e:59:d9:d9:63:b3:6f:96:b1:9f:95:
                    69:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:07:A7:86:FA:FB:D2:07:60:82:F7:26:58:63:E3:A2:09:F3:DA:5B
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Pwenhvr70gdggvcmWGPjognz2ls.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:61:7000::/37

    Signature Algorithm: sha256WithRSAEncryption
         6a:72:91:17:cc:49:64:11:74:46:cb:53:9c:ed:8a:de:75:c8:
         d7:09:57:a7:00:ac:85:c5:f2:ae:e9:c0:39:fe:8e:36:af:f7:
         f0:68:50:e8:b7:d5:56:dc:1e:1a:71:a8:79:98:b6:b2:72:70:
         2f:d4:4e:81:ab:8a:5e:26:6e:59:32:99:84:c8:3b:c3:50:24:
         2b:c4:b6:f3:e9:2b:21:3a:99:a8:0d:c3:38:51:83:a7:f7:48:
         dc:3d:ac:c2:a9:7c:ef:62:74:c3:e8:30:1c:93:c6:7c:42:a0:
         23:ff:86:1c:8a:dc:d3:8c:5f:3d:39:6e:59:d4:04:39:36:e0:
         83:e6:73:50:9f:68:78:6c:44:c7:e8:7c:ed:f9:e4:f1:3b:cc:
         55:85:13:7b:06:3e:b7:df:32:2b:79:4c:86:f4:e3:b8:07:27:
         d9:33:e8:bf:f7:20:0a:b4:ee:f9:c5:6a:5b:a1:ef:dd:d3:98:
         5c:14:c3:23:1f:43:ff:26:6f:8a:b4:32:3e:bc:13:35:86:06:
         fc:11:29:14:85:3c:c4:48:c8:64:1e:97:61:01:d8:0f:93:03:
         cb:88:94:da:7b:14:52:e1:6a:e4:d2:c3:87:d9:1d:e0:0b:64:
         51:68:7a:f6:21:52:99:64:2a:1b:24:fa:03:e6:b7:e2:9f:be:
         1a:a3:aa:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 01:06:19 2025 by rpki-client