Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/8ucxX7OFi28D0hepyLjqhyc7OUo.roa
File:                     8ucxX7OFi28D0hepyLjqhyc7OUo.roa (raw, json)
Hash identifier:          m5hJEnQ+9OtzYNN4fWlId+JMnvD7S8H2wpiX0rYpAEc=
Subject key identifier:   F2:E7:31:5F:B3:85:8B:6F:03:D2:17:A9:C8:B8:EA:87:27:3B:39:4A
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0423
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/8ucxX7OFi28D0hepyLjqhyc7OUo.roa
Signing time:             Tue 01 Apr 2025 01:35:39 +0000
ROA not before:           Tue 01 Apr 2025 01:35:39 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:6b:de00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 May 2025 13:34:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1059 (0x423)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr  1 01:35:39 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=F2E7315FB3858B6F03D217A9C8B8EA87273B394A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f1:07:81:fd:41:cf:ae:36:20:52:f2:6c:ba:
                    29:2c:6e:9d:18:2b:5d:95:dc:ba:4f:cc:46:37:79:
                    7c:67:b7:b2:b7:fb:97:14:59:b0:f9:6a:50:44:29:
                    de:88:24:a0:5d:12:cb:86:02:05:be:05:90:9e:e2:
                    23:5b:12:2c:bd:30:0e:4a:72:0c:7d:e1:6a:ae:d8:
                    6c:f9:3d:aa:57:ae:7a:04:c9:80:a8:30:88:0c:98:
                    d1:05:41:1d:f2:01:06:0c:40:71:06:0a:05:df:9a:
                    85:3e:72:a5:a9:91:af:7d:7b:7b:94:5c:af:04:39:
                    34:73:07:a5:4f:13:a8:b4:e0:e9:bf:20:6c:80:ac:
                    91:7f:8c:22:16:86:aa:0d:33:a2:a6:46:7c:32:4c:
                    00:19:41:99:34:39:7c:96:2d:16:ec:e8:3b:5c:b1:
                    58:09:4f:61:e4:67:7a:91:b6:fa:d5:24:20:18:f5:
                    70:c4:87:bc:88:b9:31:fd:8f:2c:c6:8a:2d:60:db:
                    79:9a:28:53:6d:b9:f6:a9:fa:01:f5:c7:72:35:2b:
                    1d:4f:1f:00:3f:7a:fe:a5:da:6e:24:77:65:98:e0:
                    c2:4b:70:d6:13:cc:44:05:3c:5a:79:9d:ac:64:d5:
                    27:9b:19:af:08:e2:cd:d8:06:78:67:15:00:48:66:
                    b6:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:E7:31:5F:B3:85:8B:6F:03:D2:17:A9:C8:B8:EA:87:27:3B:39:4A
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/8ucxX7OFi28D0hepyLjqhyc7OUo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:de00::/40

    Signature Algorithm: sha256WithRSAEncryption
         1c:d4:a6:e0:61:8a:ae:d0:38:c9:a5:82:6d:2f:6a:93:83:21:
         f5:f2:ae:b3:a6:5b:04:59:48:95:33:f0:09:e1:a1:ee:30:53:
         1c:18:31:30:71:ec:9a:1a:b9:15:f6:56:39:ed:f4:a2:6c:08:
         9f:e8:b6:8b:e1:6a:38:79:34:d1:3b:5f:bf:b1:90:8e:6a:62:
         29:52:7b:d6:c9:c8:69:ca:fe:8a:9f:f1:7e:44:74:25:52:0d:
         ad:da:77:91:f6:67:8e:a3:71:f1:95:d2:03:5e:c1:45:af:b6:
         07:e6:93:f2:3e:4a:b7:b2:e6:76:bc:10:1f:65:33:81:f9:08:
         47:36:f7:1f:f6:4d:40:ed:a6:d4:64:b4:71:d5:19:e1:7d:eb:
         10:97:ce:8d:d0:4f:4c:9d:58:0c:12:bc:f3:99:7e:33:61:7a:
         28:53:19:7f:21:83:0a:f3:2b:ef:64:df:46:73:9a:fc:df:23:
         49:32:75:dd:18:42:59:04:42:2c:70:74:94:87:7b:2a:0c:56:
         84:8c:7a:5b:11:d4:ac:ec:92:cf:1a:e0:58:aa:a7:78:6d:81:
         07:ce:3d:7b:2d:65:37:46:97:d2:fb:40:12:c7:73:c5:55:68:
         07:d6:fb:b3:be:5b:52:4d:ef:1e:0b:8d:51:bc:f4:52:34:2e:
         ac:dd:45:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 15:33:53 2025 by rpki-client