Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/AZeYEkZ2EJiclf1zLjbswpLW7hQ.roa
File:                     AZeYEkZ2EJiclf1zLjbswpLW7hQ.roa (raw, json)
Hash identifier:          brUfuLBv+I6t3IGqnfxhluj1hnpLMZxuaHOEdE1OdAg=
Subject key identifier:   01:97:98:12:46:76:10:98:9C:95:FD:73:2E:36:EC:C2:92:D6:EE:14
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       04FD
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/AZeYEkZ2EJiclf1zLjbswpLW7hQ.roa
Signing time:             Sun 01 Jun 2025 01:30:50 +0000
ROA not before:           Sun 01 Jun 2025 01:30:50 +0000
ROA not after:            Sat 23 May 2026 09:51:00 +0000
asID:                     9605
IP address blocks:        240a:61:8c00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Jun 2025 14:16:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1277 (0x4fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Jun  1 01:30:50 2025 GMT
            Not After : May 23 09:51:00 2026 GMT
        Subject: CN=01979812467610989C95FD732E36ECC292D6EE14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ec:97:cd:29:5a:7b:93:c4:a7:d3:ad:d2:9d:
                    f7:2b:38:97:c8:d8:bc:b2:17:e2:da:1d:00:9f:92:
                    69:0a:18:e6:48:89:10:c2:bd:f5:c9:31:57:48:2d:
                    86:0f:3a:46:56:1e:de:a8:ee:cf:0c:dd:f2:4e:47:
                    f5:e0:44:e6:42:0e:2c:a4:6d:46:d5:af:36:96:91:
                    af:8d:e3:6b:c5:60:2a:fb:ca:6a:98:37:d4:a3:6d:
                    fd:22:eb:e8:3e:a6:4f:f8:42:a1:3e:e9:55:63:cf:
                    e2:2f:1d:14:8e:16:56:db:f3:22:d8:85:29:44:d7:
                    8f:58:9a:bd:3f:72:28:50:f7:78:62:f7:9d:3a:ec:
                    8e:43:6d:8d:bf:2c:db:c8:b4:be:61:32:0b:99:2a:
                    dd:0e:26:46:97:ef:50:9a:8c:a0:f7:06:b5:55:d6:
                    31:0d:c2:df:6f:b5:2f:36:a5:d4:49:34:c2:0d:60:
                    3e:4c:23:0c:28:11:b2:ad:47:2d:9d:28:02:6c:36:
                    a1:b7:14:99:82:b0:ea:7a:8a:25:25:5f:81:9e:84:
                    5a:53:80:c8:26:6a:ca:94:ea:86:40:ed:42:8f:e3:
                    91:50:f9:9f:a3:e1:11:f8:3e:f1:c2:91:06:2a:d7:
                    7f:22:b5:88:ac:d5:33:25:32:5d:79:66:32:ab:6a:
                    fa:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:97:98:12:46:76:10:98:9C:95:FD:73:2E:36:EC:C2:92:D6:EE:14
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/AZeYEkZ2EJiclf1zLjbswpLW7hQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:61:8c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         2d:86:61:4d:9b:cb:68:fc:48:98:fb:9b:38:00:16:3a:f1:16:
         fe:24:f9:2a:b4:12:cd:6b:3f:b6:00:19:3d:50:61:14:ca:c0:
         01:24:9f:a8:74:d6:36:10:35:a6:ea:05:20:7f:22:ee:da:3b:
         9a:dc:a1:b7:65:10:20:b5:1a:e9:34:1b:87:93:58:18:fa:71:
         b0:9e:ab:1c:a6:ff:9d:a2:4e:f3:b8:e7:3f:39:41:dd:14:94:
         d0:44:7c:66:73:5f:b2:d1:bf:8c:42:5a:1b:aa:6d:0b:88:2c:
         86:61:08:29:13:65:c6:c3:8f:fb:87:7c:40:75:4e:52:14:7c:
         0d:a4:43:2f:ae:b0:1a:b5:42:53:37:50:c5:d9:96:de:23:1a:
         50:b1:13:c4:58:d4:ac:4a:93:85:30:6b:73:a9:20:d0:c8:de:
         a3:07:d7:f4:21:b2:32:8a:29:52:a4:8a:ab:19:9b:b6:81:58:
         f7:9f:43:9b:1b:08:64:88:cb:d0:c7:14:24:49:ff:00:b1:01:
         dd:a3:b6:ff:80:1f:f8:bf:25:ce:ae:ed:00:ac:58:08:9f:d4:
         88:d0:ad:7c:e3:40:b3:04:aa:f6:35:2a:d6:53:1b:8a:e8:aa:
         28:18:a7:95:3e:77:cf:91:a5:0d:4e:4e:16:72:77:e8:3d:91:
         7a:37:7b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 16:54:16 2025 by rpki-client