Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/dsyhAMAIbU1nkMF6jJOMoSkdlXs.roa
File:                     dsyhAMAIbU1nkMF6jJOMoSkdlXs.roa (raw, json)
Hash identifier:          A6jZmcBiuK9xKWEcWPdNEPh6VZz7BKI6qzQTYKrvBM0=
Subject key identifier:   76:CC:A1:00:C0:08:6D:4D:67:90:C1:7A:8C:93:8C:A1:29:1D:95:7B
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       03CF
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/dsyhAMAIbU1nkMF6jJOMoSkdlXs.roa
Signing time:             Tue 01 Apr 2025 01:28:51 +0000
ROA not before:           Tue 01 Apr 2025 01:28:51 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:6b:1900::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 May 2025 15:52:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 975 (0x3cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr  1 01:28:51 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=76CCA100C0086D4D6790C17A8C938CA1291D957B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d0:8c:ed:b0:df:b9:d2:ce:11:1d:82:32:f9:
                    1a:94:f6:8f:ec:55:13:76:61:2e:70:60:83:19:6e:
                    d9:6a:f7:c6:af:39:30:62:56:e4:12:34:20:1b:f9:
                    f4:e0:fd:94:26:7b:8b:0c:09:e6:2e:99:7e:10:ea:
                    51:a3:f2:1e:62:ca:ed:8a:85:be:27:3f:44:49:4a:
                    60:67:57:a2:96:7c:b2:92:c4:18:99:8b:10:d7:9d:
                    e1:54:0d:d3:78:19:76:89:32:80:e2:6d:4e:b2:24:
                    6a:00:6d:bd:0a:4f:97:b2:2e:47:99:37:20:4f:f2:
                    24:10:09:37:63:49:14:e6:a8:ce:2b:10:99:64:04:
                    73:6d:4b:ee:7c:0f:7a:31:1f:04:b6:d3:41:56:99:
                    66:8b:89:85:45:1d:8e:e8:17:fb:48:88:21:9d:54:
                    75:71:dd:50:91:60:c5:91:88:8f:f9:40:70:56:f9:
                    ba:14:95:8e:1a:02:8a:a9:ef:8b:75:ed:00:2c:de:
                    75:17:8d:83:f1:f2:ed:20:c6:d1:a4:e1:ef:d0:49:
                    00:f9:cd:d4:b5:22:3b:c4:90:fa:69:ca:0f:71:1a:
                    f6:3a:93:95:a9:56:66:ec:85:fd:4c:a2:b2:e3:6a:
                    dd:81:89:bc:d2:ab:c9:4e:16:cd:e6:cb:ea:a6:dd:
                    b6:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:CC:A1:00:C0:08:6D:4D:67:90:C1:7A:8C:93:8C:A1:29:1D:95:7B
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/dsyhAMAIbU1nkMF6jJOMoSkdlXs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:1900::/40

    Signature Algorithm: sha256WithRSAEncryption
         25:52:c3:da:b1:a6:ca:20:e4:81:ad:0c:08:3e:90:ec:b3:2f:
         d4:f2:b7:81:5e:2e:75:54:ac:76:75:2c:04:f5:a7:bd:54:5e:
         f1:63:e9:db:bb:25:ed:65:51:4a:15:c7:49:1b:93:84:e0:47:
         54:35:8a:48:8e:34:ba:04:d8:9f:b0:2e:be:31:76:a6:1b:b0:
         28:76:5a:1c:fb:82:78:db:eb:a5:0f:ff:d5:f6:44:66:b0:f4:
         e3:d2:7c:e9:8a:db:fc:0a:72:00:52:d0:aa:3b:4c:9f:71:c7:
         66:4e:b4:df:ff:7b:b6:25:9d:16:fb:aa:43:d2:28:df:1a:03:
         f4:84:d2:c5:1e:bd:34:ed:1c:9b:3e:08:a4:08:89:f4:b4:25:
         c6:51:44:3b:a9:4c:d1:46:8c:1e:b3:67:6f:4e:46:75:c8:04:
         09:bf:4f:c9:fd:8a:0b:af:56:26:64:79:bb:e2:de:13:e4:75:
         c4:57:4f:4a:ab:ae:66:0b:b2:bd:e3:8a:8a:e1:29:21:26:3b:
         09:c3:14:66:3c:d0:b4:3a:72:0f:22:4f:c2:61:b4:31:b4:21:
         dc:25:58:9a:3c:51:58:94:f4:ad:df:12:5e:31:1d:68:28:b9:
         0b:47:1d:e5:c9:62:5e:54:c2:c9:e6:d4:b4:37:d0:3f:60:d7:
         31:ed:2d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 20:04:00 2025 by rpki-client