Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Fq0bG9lZIKXpYCH-INUzVDZ0Gic.roa
File:                     Fq0bG9lZIKXpYCH-INUzVDZ0Gic.roa (raw, json)
Hash identifier:          VTc3X6qXHspGX3oa1XTwQ1gLN/vRndje3nDcmgEG0/8=
Subject key identifier:   16:AD:1B:1B:D9:59:20:A5:E9:60:21:FE:20:D5:33:54:36:74:1A:27
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       04F0
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Fq0bG9lZIKXpYCH-INUzVDZ0Gic.roa
Signing time:             Thu 01 May 2025 01:33:56 +0000
ROA not before:           Thu 01 May 2025 01:33:56 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:61:6800::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 May 2025 18:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1264 (0x4f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May  1 01:33:56 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=16AD1B1BD95920A5E96021FE20D5335436741A27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:46:df:fd:7b:de:f6:de:c4:84:90:e5:ad:2f:
                    7a:1e:a2:5f:33:c9:94:1f:da:6f:2c:c6:f2:4a:64:
                    d5:24:1e:8c:33:f8:61:d5:9f:fb:fc:ef:f6:c3:52:
                    05:86:22:c8:e4:cb:37:03:73:8f:f0:6c:b3:89:f9:
                    7b:6c:36:db:1d:cd:bc:35:43:ff:37:da:75:7a:a8:
                    c7:cd:60:e1:23:45:d4:5d:76:bb:bd:69:9e:cc:45:
                    43:17:cf:cc:86:69:1e:0a:a8:08:bd:25:dd:c4:ab:
                    4c:ec:b1:48:87:b0:bd:08:70:ca:81:f6:50:56:d8:
                    f3:29:b0:e4:c7:20:b7:1f:c2:47:05:a7:a9:b8:8f:
                    dd:62:24:bb:d2:f3:a7:78:3f:f5:c6:26:12:44:c0:
                    87:2e:80:5c:ca:ba:9a:d3:40:d8:fd:30:14:d9:4e:
                    eb:3b:99:f3:c4:98:d4:e4:28:3b:ef:93:3e:23:27:
                    d0:9d:15:c3:ed:f8:e8:31:75:fb:50:cd:7d:63:06:
                    c8:43:6b:ae:94:f1:e9:85:71:1a:9e:05:90:3e:1e:
                    2c:49:78:6e:73:3b:86:ab:f3:43:2a:ba:76:3b:dd:
                    41:93:18:2e:57:60:5b:ee:d9:2f:ec:f4:cf:3b:e7:
                    d5:df:be:1d:58:27:c3:91:1f:fa:ee:b9:84:d8:b4:
                    9b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:AD:1B:1B:D9:59:20:A5:E9:60:21:FE:20:D5:33:54:36:74:1A:27
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Fq0bG9lZIKXpYCH-INUzVDZ0Gic.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:61:6800::/38

    Signature Algorithm: sha256WithRSAEncryption
         c8:84:ee:37:d6:be:ad:d9:3a:31:83:7c:f8:e3:20:69:a1:24:
         fa:39:f8:a1:15:f3:9f:61:1d:fe:45:6e:64:83:fb:e9:8b:19:
         f6:98:79:b0:4d:ba:48:a3:a1:01:0f:56:6a:cd:14:81:60:da:
         35:47:d4:96:24:8e:96:20:0d:7a:2e:5d:a5:20:e6:4d:47:66:
         be:3d:a4:dc:0f:57:7f:38:97:50:91:a8:5b:04:9b:c0:0d:58:
         fd:19:1a:9a:cd:2f:d1:22:15:92:76:44:eb:c0:88:f4:13:23:
         6e:54:dc:d7:97:47:84:64:1e:97:3b:31:7e:8d:c1:b9:12:5d:
         67:2d:2e:7d:5b:85:c4:fb:65:24:5d:4c:5f:1c:2f:5f:fe:69:
         70:6f:be:17:8d:d4:a6:d4:02:3e:74:75:fe:8c:91:23:5a:dd:
         8f:5b:61:7c:5d:3c:d4:f6:2a:72:25:cc:47:70:8b:41:2d:97:
         21:c2:48:88:06:2d:f6:99:d8:fe:22:c0:c7:a1:8f:71:4d:2c:
         c6:1c:c4:bb:1e:ef:a7:19:7e:3a:f7:d5:25:3a:31:c3:11:63:
         73:83:24:bb:df:7b:30:39:37:fc:57:c0:27:57:5a:8f:0f:13:
         82:09:7b:f2:91:94:ea:c4:fb:5a:b0:a2:4f:8e:4c:8d:67:68:
         05:0e:bd:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 20:32:59 2025 by rpki-client