Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/cor35ZqFk8Att4wP-A4pDAdCr2g.roa
File:                     cor35ZqFk8Att4wP-A4pDAdCr2g.roa (raw, json)
Hash identifier:          kJ+O7gKm7PpoFLP1So92vDP5UEDo10kOfKnk0EPTyb4=
Subject key identifier:   72:8A:F7:E5:9A:85:93:C0:2D:B7:8C:0F:F8:0E:29:0C:07:42:AF:68
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       04FE
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/cor35ZqFk8Att4wP-A4pDAdCr2g.roa
Signing time:             Sun 01 Jun 2025 01:30:50 +0000
ROA not before:           Sun 01 Jun 2025 01:30:50 +0000
ROA not after:            Sat 23 May 2026 09:51:00 +0000
asID:                     9605
IP address blocks:        240a:61:8e00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Jun 2025 18:47:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1278 (0x4fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Jun  1 01:30:50 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=728AF7E59A8593C02DB78C0FF80E290C0742AF68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:bd:65:60:6d:9d:5a:f5:ee:90:c8:14:ea:77:
                    2e:f7:ea:8e:49:f9:26:a9:b0:22:c4:c6:c5:e0:60:
                    41:10:5b:10:4f:ea:0c:44:3d:35:e7:27:9a:a2:62:
                    e8:6e:ba:52:3f:5a:5b:87:16:8b:58:b7:c9:28:27:
                    d6:a9:f7:7c:49:02:05:36:28:cc:91:6c:1b:ad:7c:
                    51:26:4e:ad:f4:4d:81:84:92:08:dd:4f:7f:96:5e:
                    82:d3:6f:19:c9:cf:43:74:ce:6f:49:1e:5b:7b:26:
                    d4:5e:7f:ca:e1:92:03:c5:9d:8b:3c:5c:7f:34:03:
                    b7:99:0a:6e:6f:c2:de:85:f7:a0:f8:71:e7:95:08:
                    42:15:54:f3:64:a1:ac:04:3f:11:28:1a:72:9a:fa:
                    3e:06:5f:3f:7b:b0:93:30:fb:0b:b9:f8:9c:8a:d6:
                    a7:dd:f4:f2:d0:0e:7b:48:67:ab:1d:e6:5c:dd:6c:
                    24:71:d7:3d:7a:28:41:5d:40:3e:21:ef:86:88:f4:
                    e8:20:d0:b6:ab:30:08:44:21:56:ed:2b:7c:a6:c1:
                    2b:f4:16:de:b0:6f:02:07:64:e5:4f:b1:e9:13:28:
                    60:00:50:93:67:4e:c2:5a:91:4c:86:a7:66:06:fb:
                    95:94:94:f7:64:09:c2:87:a3:d4:3c:80:e0:b8:f2:
                    2e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:8A:F7:E5:9A:85:93:C0:2D:B7:8C:0F:F8:0E:29:0C:07:42:AF:68
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/cor35ZqFk8Att4wP-A4pDAdCr2g.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:61:8e00::/48

    Signature Algorithm: sha256WithRSAEncryption
         96:40:c2:cb:22:cb:56:e2:0b:fa:f5:d8:47:31:0b:9e:86:fc:
         df:37:4f:58:18:45:22:22:1a:9a:74:34:b7:3d:65:f5:95:d8:
         3e:fc:a3:a0:a0:88:da:8b:5e:89:a7:79:60:81:4f:23:10:34:
         84:c3:52:d7:e7:db:4d:98:24:58:98:7c:47:59:84:7b:5b:e7:
         72:4d:47:9e:be:05:c3:ef:0c:b9:45:e9:aa:22:79:cc:e9:cf:
         bd:e5:de:c8:9f:39:8e:da:3c:ab:12:1a:21:08:fc:7e:71:cf:
         d1:c8:17:ef:75:7f:78:c3:94:43:c9:81:58:78:7b:f3:a8:fa:
         46:f8:46:84:63:00:f4:1d:02:57:72:48:5e:9f:28:51:4c:06:
         92:d5:16:07:fa:97:dd:e2:de:8a:8c:8b:cc:04:51:61:c4:5f:
         22:c5:87:54:8e:b4:07:73:dd:bf:c7:96:3e:83:ae:f9:b7:cd:
         da:b2:8a:12:52:3f:2f:25:99:4c:9f:b9:3a:73:9a:94:8d:6d:
         da:5b:37:5a:5d:0b:1e:de:79:d1:45:27:4f:35:34:72:ea:18:
         7a:b5:c7:07:fd:d3:51:17:1f:07:e4:1b:19:4f:9e:96:1f:2f:
         7f:ec:b9:83:95:f4:d3:45:2b:ad:c0:bb:cf:73:c7:1a:4d:42:
         c3:7d:d6:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 20:35:21 2025 by rpki-client