Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/pgDLFAob2hnvuJyOjtwNNKWSEH8.roa
File:                     pgDLFAob2hnvuJyOjtwNNKWSEH8.roa (raw, json)
Hash identifier:          f/T872cCVsQp6P7/okZ1ojuOI9Wc+8L8jSVCmNejgOk=
Subject key identifier:   A6:00:CB:14:0A:1B:DA:19:EF:B8:9C:8E:8E:DC:0D:34:A5:92:10:7F
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       041C
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/pgDLFAob2hnvuJyOjtwNNKWSEH8.roa
Signing time:             Tue 01 Apr 2025 01:35:35 +0000
ROA not before:           Tue 01 Apr 2025 01:35:35 +0000
ROA not after:            Sun 15 Mar 2026 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:6b:700::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Jun 2025 21:03:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1052 (0x41c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr  1 01:35:35 2025 GMT
            Not After : Mar 15 01:30:03 2026 GMT
        Subject: CN=A600CB140A1BDA19EFB89C8E8EDC0D34A592107F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9c:38:31:36:30:aa:09:e2:95:c5:1e:3a:70:
                    a5:89:74:f2:04:fe:99:17:c8:b2:f4:5f:e3:4e:71:
                    99:4a:8b:ea:d4:9e:4a:43:65:8e:d7:67:44:3c:f8:
                    8a:3f:cc:64:c2:24:93:2f:99:f0:2e:52:50:5a:c6:
                    10:62:3a:10:cb:3f:b9:ed:08:03:f3:8a:02:f1:2c:
                    c5:c4:ee:4f:7a:de:11:84:0a:36:1a:22:13:24:61:
                    a5:43:9e:4b:c7:f9:19:a5:a3:54:a1:72:18:51:9c:
                    b1:df:95:2a:d1:31:d1:21:6a:73:b0:73:0f:b5:37:
                    af:b6:80:64:00:6d:70:a0:c9:08:ee:56:4d:a7:59:
                    22:02:10:ea:56:64:b5:b1:7a:ae:d5:4d:46:b3:55:
                    f6:70:88:e4:1c:d9:f4:80:22:b4:c0:53:91:92:0d:
                    75:70:19:4a:2c:ac:31:50:b6:a9:8c:7f:e3:3c:74:
                    d4:22:07:a1:9b:0e:9b:66:2b:86:99:6d:ed:9c:5b:
                    9d:7f:92:6b:b0:7a:82:ca:51:02:31:65:4a:58:34:
                    3d:b3:19:0f:21:55:e2:ab:38:e4:18:5f:ed:0f:23:
                    cb:e0:ae:5f:a8:c8:10:6b:57:b8:73:8d:9a:7f:8c:
                    cd:de:6a:64:dd:c6:d5:23:07:e8:bc:11:b5:6b:88:
                    a6:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:00:CB:14:0A:1B:DA:19:EF:B8:9C:8E:8E:DC:0D:34:A5:92:10:7F
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/pgDLFAob2hnvuJyOjtwNNKWSEH8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:700::/40

    Signature Algorithm: sha256WithRSAEncryption
         51:15:d4:74:ed:d9:71:be:f4:4c:82:cb:3c:4d:91:fd:7a:11:
         aa:57:4d:7f:c0:75:4d:74:0b:17:42:83:d7:e4:aa:e0:91:ee:
         9f:d4:b6:bb:04:9d:28:27:8b:92:aa:4a:df:e6:91:53:e1:02:
         a9:93:c5:8b:87:e3:15:cf:83:6b:ea:3c:74:26:42:1a:83:62:
         d2:c6:3e:36:93:00:a5:cd:db:ac:99:b0:2d:41:0c:91:9c:68:
         e7:55:4a:ed:8d:f8:9d:4b:b1:b5:4c:0c:d4:67:08:23:3e:69:
         65:42:da:cc:83:ef:b0:93:1d:5d:da:ce:14:45:6f:ea:36:29:
         e0:18:13:22:e6:55:34:f8:47:ee:3b:6c:d2:43:a2:e4:a6:8f:
         f4:2c:02:aa:c6:d8:1d:18:e4:66:47:2d:70:4e:9e:10:90:13:
         30:da:d4:90:ac:d3:db:50:cc:6f:8c:b7:66:c2:8c:d4:64:8d:
         8f:75:b4:56:37:2e:84:2c:b8:e2:3d:14:82:07:71:9a:8a:fb:
         79:9b:09:b5:ad:58:c1:c9:4c:e9:3f:ae:22:bd:1d:8d:1b:30:
         44:cb:76:54:82:a4:62:7e:f9:1a:46:22:4a:f7:1a:bb:fc:5b:
         ea:1a:ec:bc:63:8b:f1:08:d7:56:b2:e4:de:28:d0:bc:2e:0d:
         f8:b9:84:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 03:43:52 2025 by rpki-client