Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/AmeOi9YYiTzalciEK1DBqE1vpHI.roa
File:                     AmeOi9YYiTzalciEK1DBqE1vpHI.roa (raw, json)
Hash identifier:          j+raR6jh68qxQim26GiYq0VDIH0vEak9vjvqbB9MOvU=
Subject key identifier:   02:67:8E:8B:D6:18:89:3C:DA:95:C8:84:2B:50:C1:A8:4D:6F:A4:72
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0508
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/AmeOi9YYiTzalciEK1DBqE1vpHI.roa
Signing time:             Tue 01 Jul 2025 01:28:47 +0000
ROA not before:           Tue 01 Jul 2025 01:28:47 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:61:4c00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1288 (0x508)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Jul  1 01:28:47 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=02678E8BD618893CDA95C8842B50C1A84D6FA472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ad:2c:bd:f7:f0:ff:27:a5:07:cb:ed:71:a1:
                    ed:ad:18:3e:74:32:cc:1b:0f:9b:db:70:05:90:c5:
                    66:6e:7e:fb:f1:20:9e:02:ff:6a:e5:cc:7f:d7:fe:
                    e9:f6:8b:94:ff:d0:bc:3d:1e:06:0d:0b:a2:ab:ad:
                    8a:fc:10:0f:c0:7c:2a:e0:f5:ba:eb:2b:c2:19:08:
                    d8:0c:c3:bd:d3:b2:03:5b:c5:3f:b3:03:91:e3:7c:
                    2f:8c:8e:e7:56:eb:66:61:b3:d2:ca:ce:47:33:e7:
                    ed:58:5e:99:0d:8e:63:5f:06:c5:45:32:13:5d:cd:
                    2e:9f:23:0a:65:e4:81:12:e7:f8:eb:53:8d:b5:04:
                    6a:3f:df:39:ea:e0:bf:62:bb:42:84:33:bd:e1:78:
                    a4:15:9b:c9:4a:29:ba:c8:15:33:aa:6e:b2:54:a6:
                    b3:e2:1f:58:43:1a:e3:07:d8:71:a1:cf:bd:19:c4:
                    67:80:1f:0d:c4:67:3f:e7:ae:e9:54:8c:23:9e:a2:
                    fb:5e:ae:ac:92:a0:86:16:5a:fe:4a:fb:88:31:89:
                    25:b6:5d:46:56:34:df:74:45:f1:26:37:42:90:10:
                    7c:43:b7:2b:0c:14:e7:dd:38:4c:7e:f3:b1:1b:53:
                    ad:d1:44:52:0e:10:fb:33:d7:bd:10:3a:70:0e:35:
                    e1:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:67:8E:8B:D6:18:89:3C:DA:95:C8:84:2B:50:C1:A8:4D:6F:A4:72
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/AmeOi9YYiTzalciEK1DBqE1vpHI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:61:4c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         cd:11:f1:dc:dc:f3:1f:91:48:c7:01:c2:db:af:1c:d8:5d:0c:
         ab:ec:da:4c:e0:0b:0e:92:0e:92:e3:68:8b:1e:4b:91:64:42:
         9d:b4:6a:a5:5d:43:f9:e8:e1:18:56:7c:c9:77:78:2e:43:50:
         e7:cb:24:36:b0:1a:9c:d1:7e:e7:74:73:af:4f:b0:06:7a:eb:
         d6:3a:4a:b8:f6:88:50:d7:89:51:fb:39:61:4f:d7:b9:ad:26:
         4b:bd:43:77:ff:23:42:e5:c3:8d:28:93:6c:4e:00:ef:b1:93:
         55:bd:08:46:91:f8:08:b3:af:d5:07:9a:45:07:a4:aa:d0:78:
         d4:c9:87:52:97:00:a7:e2:f0:71:17:bc:f4:4d:2a:a6:b4:91:
         a8:34:0e:a6:53:cf:5e:6f:1c:b5:3e:d8:76:4f:64:58:56:47:
         e1:09:40:65:2c:b3:ec:51:18:a2:22:69:e2:17:e7:e6:bc:37:
         4e:cc:84:14:f8:74:c7:7c:ef:94:ee:3f:a6:16:4f:75:59:fd:
         76:64:82:35:8d:1e:83:91:b8:34:0f:63:8b:8e:93:11:37:3d:
         1f:e6:da:60:a9:95:2f:48:ad:7a:57:66:63:f1:9f:a7:a5:11:
         9d:18:36:29:34:4c:b9:5f:cd:f1:55:51:4b:f7:87:2a:3c:ca:
         85:a3:f6:82
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICBQgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNTA3MDEw
MTI4NDdaFw0yNjA2MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDAyNjc4RThCRDYxODg5
M0NEQTk1Qzg4NDJCNTBDMUE4NEQ2RkE0NzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDRrSy99/D/J6UHy+1xoe2tGD50MswbD5vbcAWQxWZufvvxIJ4C
/2rlzH/X/un2i5T/0Lw9HgYNC6KrrYr8EA/AfCrg9brrK8IZCNgMw73TsgNbxT+z
A5HjfC+MjudW62Zhs9LKzkcz5+1YXpkNjmNfBsVFMhNdzS6fIwpl5IES5/jrU421
BGo/3znq4L9iu0KEM73heKQVm8lKKbrIFTOqbrJUprPiH1hDGuMH2HGhz70ZxGeA
Hw3EZz/nrulUjCOeovterqySoIYWWv5K+4gxiSW2XUZWNN90RfEmN0KQEHxDtysM
FOfdOEx+87EbU63RRFIOEPsz170QOnAONeFpAgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQUAmeOi9YYiTzalciEK1DBqE1vpHIwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS9BbWVPaTlZWWlUemFsY2lFSzFEQnFFMXZwSEku
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAYUwwDQYJKoZIhvcNAQELBQADggEBAM0R8dzc8x+RSMcBwtuv
HNhdDKvs2kzgCw6SDpLjaIseS5FkQp20aqVdQ/no4RhWfMl3eC5DUOfLJDawGpzR
fud0c69PsAZ669Y6Srj2iFDXiVH7OWFP17mtJku9Q3f/I0Llw40ok2xOAO+xk1W9
CEaR+Aizr9UHmkUHpKrQeNTJh1KXAKfi8HEXvPRNKqa0kag0DqZTz15vHLU+2HZP
ZFhWR+EJQGUss+xRGKIiaeIX5+a8N07MhBT4dMd875TuP6YWT3VZ/XZkgjWNHoOR
uDQPY4uOkxE3PR/m2mCplS9IrXpXZmPxn6elEZ0YNik0TLlfzfFVUUv3hyo8yoWj
9oI=
-----END CERTIFICATE-----
Generated at Thu Jul 3 15:52:28 2025 by rpki-client