Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/9rTEyng_lq7WjHr10SiW_qByh3o.roa
File:                     9rTEyng_lq7WjHr10SiW_qByh3o.roa (raw, json)
Hash identifier:          cfDkF6rlc1auY9Fvm/6GyZs4A/i8sBq48JnALJ34USA=
Subject key identifier:   F6:B4:C4:CA:78:3F:96:AE:D6:8C:7A:F5:D1:28:96:FE:A0:72:87:7A
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0502
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/9rTEyng_lq7WjHr10SiW_qByh3o.roa
Signing time:             Tue 10 Jun 2025 10:45:23 +0000
ROA not before:           Tue 10 Jun 2025 10:45:23 +0000
ROA not after:            Sat 23 May 2026 09:51:00 +0000
asID:                     9605
IP address blocks:        240a:0:800::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1282 (0x502)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Jun 10 10:45:23 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=F6B4C4CA783F96AED68C7AF5D12896FEA072877A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:7a:fa:f7:ed:d8:41:53:e9:a9:9d:ae:2f:f3:
                    c9:3c:bd:3c:f9:14:64:b6:a7:9f:e5:ee:c2:ef:b0:
                    12:76:06:b1:b6:89:d2:ca:e7:44:bb:fa:a4:a9:5f:
                    98:0b:0c:3c:91:e8:de:7c:9f:ae:ef:20:85:66:fc:
                    0d:88:b6:34:4e:76:86:b6:f5:24:86:af:b2:02:0a:
                    1e:d8:14:5a:20:ce:c3:6f:76:50:db:71:34:93:b9:
                    4b:f2:f6:2c:9a:1e:a6:89:15:31:ee:8f:23:be:3e:
                    fa:b4:8a:42:12:d1:f6:f3:ce:81:b7:4e:7e:af:79:
                    cc:ff:3a:ef:95:ad:a1:5c:11:0d:3e:74:9e:b9:74:
                    dd:e3:00:ca:f6:25:d1:04:ea:57:b5:b4:2d:03:6c:
                    73:4e:91:84:1e:3d:7e:5f:5a:f0:de:fe:63:27:a0:
                    f9:27:83:7d:9f:90:4a:19:48:f2:53:8d:0d:68:e5:
                    43:62:9c:16:a2:3d:50:16:16:eb:c4:40:a3:46:c1:
                    a8:97:60:27:37:a3:80:78:14:6e:98:e4:4b:e6:2f:
                    74:b5:85:33:d8:f0:17:92:00:a3:39:60:67:ff:d3:
                    a6:75:6a:c8:bb:f9:70:50:43:90:ba:f6:c3:51:5e:
                    f7:5e:3e:78:b6:1a:16:23:bd:c1:66:85:fc:02:c7:
                    9c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:B4:C4:CA:78:3F:96:AE:D6:8C:7A:F5:D1:28:96:FE:A0:72:87:7A
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/9rTEyng_lq7WjHr10SiW_qByh3o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:0:800::/40

    Signature Algorithm: sha256WithRSAEncryption
         45:9e:aa:f3:1b:b3:a5:23:71:c9:41:87:ab:30:7d:da:19:93:
         9c:7e:bc:56:fc:6c:81:e1:ed:73:20:3b:17:b5:95:47:d7:4b:
         44:b6:ce:05:ff:5d:d0:0a:63:3a:a1:a3:e3:99:e9:07:b2:7c:
         93:e6:99:6c:09:3e:ee:ec:56:52:1b:6d:af:cb:2a:93:4a:51:
         98:f3:62:50:51:d7:37:47:39:f9:3e:44:25:a2:f0:bf:cb:16:
         57:fe:19:7b:92:3e:fd:1f:78:57:a1:fd:e9:f1:d1:42:bb:f6:
         83:6e:ae:8a:55:52:65:ef:b9:fe:d4:57:b0:d9:50:4e:93:ee:
         00:b5:c8:43:36:88:99:1f:f9:b6:76:ac:02:8f:5e:80:11:4a:
         01:06:1d:95:40:f5:ee:83:55:1e:d2:57:48:cb:80:e4:e5:dc:
         64:a2:82:55:4b:82:c7:e1:88:8a:40:8c:50:99:73:29:af:e6:
         f0:73:84:e2:9f:ae:91:2f:c1:94:34:05:08:8a:95:83:3a:25:
         69:c9:a5:3f:2f:fa:18:c6:71:93:44:f3:31:fc:10:b6:e2:98:
         2f:af:6d:36:f2:3c:af:93:aa:03:d5:09:69:0a:4d:18:3b:09:
         a5:96:1c:2c:29:d9:23:0a:6e:25:ba:69:d3:4b:e6:f9:eb:c4:
         91:19:09:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 15:50:06 2025 by rpki-client