Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/zVxMi6mCXNp2ky5rZAaP8zzm_Is.roa
File:                     zVxMi6mCXNp2ky5rZAaP8zzm_Is.roa (raw, json)
Hash identifier:          IvJcF5Y+Qb9qVT0ZF/YgbvOWAgqlGAB4RaBvgwtyLeE=
Subject key identifier:   CD:5C:4C:8B:A9:82:5C:DA:76:93:2E:6B:64:06:8F:F3:3C:E6:FC:8B
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0509
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/zVxMi6mCXNp2ky5rZAaP8zzm_Is.roa
Signing time:             Tue 01 Jul 2025 01:28:47 +0000
ROA not before:           Tue 01 Jul 2025 01:28:47 +0000
ROA not after:            Mon 15 Jun 2026 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:61:4e00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1289 (0x509)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Jul  1 01:28:47 2025 GMT
            Not After : Jun 15 01:30:02 2026 GMT
        Subject: CN=CD5C4C8BA9825CDA76932E6B64068FF33CE6FC8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:85:e1:55:4b:54:e7:d2:52:7b:a8:3d:9b:31:
                    20:67:7c:4d:f2:b3:6f:3c:bb:bc:dc:57:fb:ea:53:
                    f4:19:49:2e:64:23:2b:d9:03:5c:85:95:94:b2:97:
                    1b:48:9e:86:e9:25:ef:ef:10:ec:98:79:91:01:20:
                    cd:88:5c:03:57:ae:fe:41:39:0a:a9:b1:14:0b:b8:
                    99:f0:78:9b:60:54:19:00:d3:50:76:90:6a:61:17:
                    63:6c:24:2c:0a:4c:45:3c:e3:2d:e8:17:41:55:68:
                    e8:94:1a:1e:15:c6:f5:39:78:fc:ed:e6:06:80:86:
                    bd:74:55:fa:cc:1c:64:a5:39:7a:e4:77:52:8f:9e:
                    22:98:bd:cf:8e:af:fe:d3:7a:d5:7c:4d:be:53:81:
                    ad:c7:66:2e:88:1c:51:5d:05:23:81:8b:ce:60:06:
                    5a:83:8f:4e:89:67:1c:88:72:c6:14:81:94:e1:33:
                    0e:db:8f:d8:ae:c4:24:f5:18:a9:2e:6d:5f:03:91:
                    02:b0:ad:8c:a7:fb:f3:38:e5:5b:ec:f6:91:8b:a8:
                    00:60:78:21:d5:d1:33:22:9c:d7:60:e9:77:8c:3b:
                    96:52:d8:30:db:64:63:db:6c:0b:15:e4:4c:3e:0c:
                    80:76:79:6e:48:e2:9e:8c:ba:50:5b:b4:fb:08:8a:
                    18:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:5C:4C:8B:A9:82:5C:DA:76:93:2E:6B:64:06:8F:F3:3C:E6:FC:8B
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/zVxMi6mCXNp2ky5rZAaP8zzm_Is.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:61:4e00::/48

    Signature Algorithm: sha256WithRSAEncryption
         5d:fa:8f:7f:b8:03:3e:d2:c8:c0:6e:5d:c8:f6:ae:78:14:55:
         5a:84:ab:7d:d4:73:8b:ec:8b:17:88:64:d2:4a:69:f6:03:e0:
         37:3d:07:13:41:a4:f8:6d:d5:0e:a3:17:51:4b:52:96:0e:56:
         f8:f7:9d:a6:c0:af:09:50:d6:c8:e7:9a:be:21:07:96:79:2a:
         39:7a:6b:42:0f:5b:dc:10:bd:05:09:18:6a:8d:83:e6:a7:2f:
         d9:e3:7e:34:62:3f:7c:fa:9f:96:af:dd:24:e6:cd:c9:90:42:
         ed:8e:a0:38:10:67:38:68:68:b0:be:6e:3a:d3:6e:02:d9:fc:
         d8:18:85:a8:dd:f0:ae:bc:7b:07:6c:ab:af:c6:40:a4:63:d4:
         e0:fd:b2:a9:30:2a:9a:99:7f:d9:d6:4d:5d:59:75:c0:4b:69:
         71:fc:2e:c4:0a:97:1e:0c:c7:b3:21:44:53:9f:88:f4:c2:eb:
         2d:9c:a6:a1:e9:c3:0a:42:2e:b8:04:0d:3f:d8:18:b9:88:87:
         07:93:7a:e7:bf:95:3a:a3:6f:86:0d:95:ff:7e:1f:52:90:6d:
         19:b0:c0:6c:fc:eb:1d:5d:54:01:4d:8c:d3:0c:32:60:5b:20:
         95:e2:55:35:22:cd:bd:64:c5:45:2d:42:66:86:bb:5d:b7:6a:
         62:38:38:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 15:34:26 2025 by rpki-client