Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ibuCUh5DSYXAptpppf9fhgT8M1E.roa
File:                     ibuCUh5DSYXAptpppf9fhgT8M1E.roa (raw, json)
Hash identifier:          4tIi7UyxslF3H9HlLJC7jAgBDbo9lFYiKN1ZYVkcqTM=
Subject key identifier:   89:BB:82:52:1E:43:49:85:C0:A6:DA:69:A5:FF:5F:86:04:FC:33:51
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       04EF
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ibuCUh5DSYXAptpppf9fhgT8M1E.roa
Signing time:             Thu 01 May 2025 01:33:55 +0000
ROA not before:           Thu 01 May 2025 01:33:55 +0000
ROA not after:            Wed 15 Apr 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:61:6000::/37 maxlen: 37
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 May 2025 09:16:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1263 (0x4ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May  1 01:33:55 2025 GMT
            Not After : Apr 15 01:30:03 2026 GMT
        Subject: CN=89BB82521E434985C0A6DA69A5FF5F8604FC3351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:83:bc:bb:5a:3a:d9:54:d5:67:5a:c5:52:93:
                    cd:16:03:45:6e:96:f6:e7:2b:d6:f5:83:03:13:22:
                    8f:f6:b7:28:38:88:77:61:ad:7e:47:ac:49:c2:11:
                    65:40:97:53:b9:66:26:fb:0f:2e:44:dd:e2:1b:2a:
                    2b:83:ed:ac:7d:51:13:c5:24:84:d7:71:50:35:90:
                    55:4e:4d:e3:60:c4:86:74:9e:5b:4f:d8:ef:72:bf:
                    6e:6a:9d:aa:57:67:20:0f:fd:ec:a4:02:fb:3c:ef:
                    a2:85:a1:22:62:f0:53:d2:0a:b1:27:50:2c:df:3a:
                    23:42:c0:68:50:9f:b4:43:46:c5:1b:d6:32:0a:64:
                    19:cd:89:9f:7f:c6:5a:54:2e:9f:0f:09:f7:12:fe:
                    82:b1:a1:9c:95:17:3a:0e:06:f9:35:e8:01:9f:a5:
                    b9:c0:85:46:06:b0:b4:54:1c:58:fd:a3:b9:66:9b:
                    8f:3a:e1:d8:d7:8c:a6:68:ca:40:ff:52:9e:5f:fe:
                    a8:8c:e0:53:30:27:86:3a:ff:69:4f:19:e6:f1:d6:
                    a4:bc:9b:4a:ca:53:b2:9f:8d:2f:94:3e:54:7e:ee:
                    4c:c3:64:18:62:66:8a:e2:3c:0a:5b:c7:a4:3c:c6:
                    8d:96:48:ef:3c:5e:bd:eb:a8:5f:e5:c0:0a:d0:be:
                    54:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:BB:82:52:1E:43:49:85:C0:A6:DA:69:A5:FF:5F:86:04:FC:33:51
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ibuCUh5DSYXAptpppf9fhgT8M1E.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:61:6000::/37

    Signature Algorithm: sha256WithRSAEncryption
         2a:01:3f:7e:d1:9a:48:0d:95:24:b6:51:c3:ac:c8:c9:7e:0e:
         5a:5f:13:11:5a:7b:6e:bf:5c:6a:b7:8f:72:a1:c1:25:4c:2c:
         99:7a:51:be:ee:7d:45:aa:40:96:eb:e3:c8:49:52:47:1a:ea:
         1e:43:b1:bc:fb:c8:e1:25:82:01:f4:5f:2f:81:db:ab:e5:14:
         0e:bd:31:f0:c0:14:e2:2a:5e:75:6f:ca:ff:51:40:54:fe:a8:
         f3:03:79:9c:a9:d4:6b:52:33:cf:a5:1e:5f:f4:70:a6:e3:44:
         2d:19:52:12:fc:ce:b7:92:75:6e:27:81:62:76:8f:db:04:dc:
         72:c2:e7:30:72:2f:f5:15:89:25:4c:66:7d:f4:01:3d:4e:9b:
         42:db:9c:9e:65:b8:49:87:e2:22:d5:25:a1:3e:3d:8a:68:e9:
         0f:1e:2e:82:3a:ff:36:ac:ac:01:a4:19:e1:a7:1f:ab:b3:0f:
         b0:b9:f2:aa:88:64:4b:03:a7:db:c6:52:41:28:5a:c4:ac:d3:
         ee:01:bd:a2:e7:c4:fe:50:2b:eb:c6:e5:99:3e:ab:aa:32:9d:
         72:03:16:45:d1:20:18:30:2d:2c:cc:81:e3:7d:54:df:00:6a:
         9e:b1:ad:29:09:54:e8:79:cd:0d:3d:a9:35:ff:a6:6c:b9:91:
         3c:84:53:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 11:23:46 2025 by rpki-client