Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/c74I0YiC-IOFrp1_ujvLfRlNsTY.roa
File:                     c74I0YiC-IOFrp1_ujvLfRlNsTY.roa (raw, json)
Hash identifier:          beWr7NNO/hpSpN27EH/984evQPNiLnYIvE3OrJGxW3E=
Subject key identifier:   73:BE:08:D1:88:82:F8:83:85:AE:9D:7F:BA:3B:CB:7D:19:4D:B1:36
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0462
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/c74I0YiC-IOFrp1_ujvLfRlNsTY.roa
Signing time:             Tue 01 Apr 2025 01:42:29 +0000
ROA not before:           Tue 01 Apr 2025 01:42:29 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:60:f008::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 19:12:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1122 (0x462)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr  1 01:42:29 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=73BE08D18882F88385AE9D7FBA3BCB7D194DB136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:ef:86:74:1a:e8:5d:97:f6:69:4b:9e:b1:8c:
                    6e:a1:3a:6c:f7:19:ca:06:f5:d2:1d:b8:05:ae:e9:
                    3b:12:c5:61:7d:16:d0:ac:1b:72:82:85:fe:8c:55:
                    43:a6:15:17:0d:43:25:90:8f:c6:14:4a:01:e1:a2:
                    75:c1:73:be:bb:73:eb:3f:8b:07:44:22:b7:46:85:
                    f2:e8:f7:d4:53:8f:58:21:83:8c:53:1b:1a:3d:e6:
                    4b:5c:f7:32:e2:5d:da:46:30:16:3e:c2:35:91:57:
                    38:7a:d0:ef:2b:d5:fc:9c:5e:d1:e3:b7:99:0b:48:
                    6d:2f:0d:22:78:94:a1:e1:a8:95:aa:65:fa:1d:8f:
                    16:bb:5b:8c:d0:75:12:9c:df:db:c2:f0:02:61:36:
                    39:34:f1:1a:e7:ed:a7:ac:b1:db:4e:89:e4:19:35:
                    38:9d:e5:a6:9f:c7:60:6a:17:c9:df:50:02:9a:a0:
                    9b:e8:c3:c8:8d:e1:27:45:c5:7f:ab:ae:07:57:fc:
                    82:f6:d4:dd:b2:5a:8a:71:99:1d:58:f2:77:fe:44:
                    75:c8:b5:f6:13:69:d9:af:bf:95:fd:20:35:a4:1b:
                    e6:ce:dc:4e:f1:cb:f7:b2:18:69:65:33:f7:d7:6f:
                    ea:f5:6f:4c:4e:cc:c7:ef:8d:d1:3d:86:34:fe:3c:
                    27:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:BE:08:D1:88:82:F8:83:85:AE:9D:7F:BA:3B:CB:7D:19:4D:B1:36
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/c74I0YiC-IOFrp1_ujvLfRlNsTY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:60:f008::/46

    Signature Algorithm: sha256WithRSAEncryption
         4e:97:11:34:da:e5:20:8b:55:68:ea:78:10:c1:90:8a:d9:6d:
         cb:dd:71:be:6e:81:ad:4b:0e:a3:98:03:40:53:37:fa:c8:7b:
         f3:d7:66:66:1f:15:1b:a5:bb:bb:6f:17:70:3e:2e:fa:c7:ab:
         57:e7:d2:e6:44:f1:8c:b1:7a:d6:ce:3a:6a:aa:04:ae:76:6d:
         b6:8a:bb:3a:a7:82:9e:3f:65:45:59:6e:d7:d7:ed:f2:f4:68:
         eb:4e:2c:d4:bb:dd:35:17:1d:7e:aa:63:8d:5a:24:5f:ec:95:
         1b:b5:76:5f:bb:88:cf:ad:f6:96:57:a6:5c:10:eb:24:83:fd:
         ab:31:ae:fc:3b:08:3c:ed:60:ac:a1:77:07:87:61:03:02:94:
         a9:ee:05:d7:2e:55:db:1d:94:e8:95:55:1d:44:94:75:e4:e7:
         6a:9e:da:f4:97:3d:06:59:c8:d4:b1:44:5d:51:da:a0:9f:a2:
         10:44:4d:af:3e:22:d5:d7:5e:16:3b:f4:8d:29:e2:4f:04:c4:
         fc:37:db:86:c6:42:f8:e0:0d:4b:7c:e7:07:9d:e7:8d:2f:35:
         87:d6:07:6a:ca:f7:1e:60:fa:ef:10:ee:7e:d4:51:42:8d:46:
         22:0d:08:d4:89:e2:58:c2:7c:a1:2a:1b:97:ad:cf:aa:1a:55:
         33:1e:48:42
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgICBGIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNTA0MDEw
MTQyMjlaFw0yNjAzMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDczQkUwOEQxODg4MkY4
ODM4NUFFOUQ3RkJBM0JDQjdEMTk0REIxMzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDq74Z0Guhdl/ZpS56xjG6hOmz3GcoG9dIduAWu6TsSxWF9FtCs
G3KChf6MVUOmFRcNQyWQj8YUSgHhonXBc767c+s/iwdEIrdGhfLo99RTj1ghg4xT
Gxo95ktc9zLiXdpGMBY+wjWRVzh60O8r1fycXtHjt5kLSG0vDSJ4lKHhqJWqZfod
jxa7W4zQdRKc39vC8AJhNjk08Rrn7aessdtOieQZNTid5aafx2BqF8nfUAKaoJvo
w8iN4SdFxX+rrgdX/IL21N2yWopxmR1Y8nf+RHXItfYTadmvv5X9IDWkG+bO3E7x
y/eyGGllM/fXb+r1b0xOzMfvjdE9hjT+PCcVAgMBAAGjggIrMIICJzAdBgNVHQ4E
FgQUc74I0YiC+IOFrp1/ujvLfRlNsTYwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS9jNzRJMFlpQy1JT0ZycDFfdWp2TGZSbE5zVFku
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcCJAoAYPAIMA0GCSqGSIb3DQEBCwUAA4IBAQBOlxE02uUgi1Vo6ngQ
wZCK2W3L3XG+boGtSw6jmANAUzf6yHvz12ZmHxUbpbu7bxdwPi76x6tX59LmRPGM
sXrWzjpqqgSudm22irs6p4KeP2VFWW7X1+3y9GjrTizUu901Fx1+qmONWiRf7JUb
tXZfu4jPrfaWV6ZcEOskg/2rMa78Owg87WCsoXcHh2EDApSp7gXXLlXbHZTolVUd
RJR15Odqntr0lz0GWcjUsURdUdqgn6IQRE2vPiLV114WO/SNKeJPBMT8N9uGxkL4
4A1LfOcHneeNLzWH1gdqyvceYPrvEO5+1FFCjUYiDQjUieJYwnyhKhuXrc+qGlUz
HkhC
-----END CERTIFICATE-----
Generated at Sun Apr 27 04:27:40 2025 by rpki-client