Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/-CQw6kaaVpMQIYF2aF5oDWsEPho.roa
File:                     -CQw6kaaVpMQIYF2aF5oDWsEPho.roa (raw, json)
Hash identifier:          hGxuAF7Uuqs7zp9ZQjThgzb2KBG3SEn7AJDT7FbK8cY=
Subject key identifier:   F8:24:30:EA:46:9A:56:93:10:21:81:76:68:5E:68:0D:6B:04:3E:1A
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       01A5
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/-CQw6kaaVpMQIYF2aF5oDWsEPho.roa
Signing time:             Tue 30 May 2023 17:36:23 +0000
ROA not before:           Tue 30 May 2023 17:36:23 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:2b00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 13:40:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 421 (0x1a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:36:23 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=F82430EA469A569310218176685E680D6B043E1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8e:38:2f:bd:73:a9:3d:8a:43:60:57:81:44:
                    f1:91:b8:81:e3:0d:c1:4d:d4:5a:c8:a2:2a:d4:02:
                    4b:b3:14:42:c0:ea:19:a8:9e:00:19:d0:ad:12:3e:
                    89:32:a1:5f:73:00:53:b0:88:73:56:b1:88:40:4d:
                    1d:13:c5:90:ce:ae:a1:df:88:ac:a0:81:51:34:c5:
                    de:de:d8:d4:0b:a6:da:01:d6:d1:90:15:0d:58:44:
                    a8:07:3f:34:bc:e2:b8:03:23:45:de:49:b6:4a:88:
                    5a:f8:63:9a:41:45:21:04:fd:86:af:ab:bc:66:b8:
                    54:ad:3b:7e:f9:20:1e:e8:43:dc:c0:a2:8b:81:8d:
                    00:ca:50:d3:e2:3c:b4:e7:c8:e4:9e:3e:b9:d6:09:
                    ef:3c:e5:53:4c:15:76:be:8d:d7:60:86:a0:67:8a:
                    53:6b:ee:a2:b7:e1:c6:fc:eb:dc:34:a7:e1:ef:6d:
                    1e:2a:c1:5c:58:6d:1a:04:d9:d6:69:47:46:7f:86:
                    91:da:86:c7:33:66:d6:55:4d:9a:36:61:5f:e7:05:
                    a1:82:e1:46:ef:a1:bc:e7:2b:0c:4d:20:b9:43:cc:
                    d8:44:c9:e9:1b:93:c9:dd:46:ce:4a:09:4e:26:34:
                    0d:d0:0c:70:95:c3:69:a7:ff:5c:9b:68:fe:1c:86:
                    17:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:24:30:EA:46:9A:56:93:10:21:81:76:68:5E:68:0D:6B:04:3E:1A
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/-CQw6kaaVpMQIYF2aF5oDWsEPho.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:2b00::/40

    Signature Algorithm: sha256WithRSAEncryption
         76:91:e0:5e:8b:16:fb:0f:1f:dc:60:be:5e:9f:97:d9:16:00:
         e4:1e:6a:6c:c1:93:71:37:e1:9e:57:c1:45:eb:cd:05:d4:aa:
         86:28:f6:bc:d4:25:f0:0f:a9:a2:5b:57:41:1c:d4:89:94:74:
         d3:65:9c:88:e9:93:ee:95:ac:5a:66:54:3c:97:f3:3a:e7:45:
         73:29:3a:8f:3f:a0:28:64:8d:93:64:4a:ed:0a:4b:0a:1c:8f:
         16:91:d8:0b:f2:3e:4d:8b:c5:ef:85:e4:ec:2d:d0:fd:70:7b:
         4b:2c:b0:b6:2b:5c:19:94:2c:cc:81:e2:91:75:ac:8a:f3:91:
         bb:c8:48:49:9c:fc:4c:e7:a7:c9:ee:9b:ee:a8:ea:6e:73:91:
         64:80:d2:70:68:9e:b0:25:36:2e:bc:77:ed:25:e7:b3:e7:52:
         e0:54:1b:da:05:10:d9:11:a7:f3:60:99:46:50:68:b6:bb:2f:
         d6:37:19:d8:f7:9e:30:53:18:8c:2b:71:57:08:12:fd:1f:64:
         66:d1:6b:ac:e8:b8:d2:7a:0f:bc:32:9a:fb:e5:cc:d9:99:d1:
         3b:ce:e7:7b:82:7a:3e:fa:d6:70:60:91:9f:14:40:d3:2d:29:
         64:fe:be:2c:0d:46:a3:cd:0e:17:db:1b:41:ef:77:83:6f:f9:
         4e:6a:fd:d7
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICAaUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yMzA1MzAx
NzM2MjNaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEY4MjQzMEVBNDY5QTU2
OTMxMDIxODE3NjY4NUU2ODBENkIwNDNFMUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCnjjgvvXOpPYpDYFeBRPGRuIHjDcFN1FrIoirUAkuzFELA6hmo
ngAZ0K0SPokyoV9zAFOwiHNWsYhATR0TxZDOrqHfiKyggVE0xd7e2NQLptoB1tGQ
FQ1YRKgHPzS84rgDI0XeSbZKiFr4Y5pBRSEE/Yavq7xmuFStO375IB7oQ9zAoouB
jQDKUNPiPLTnyOSePrnWCe885VNMFXa+jddghqBnilNr7qK34cb869w0p+HvbR4q
wVxYbRoE2dZpR0Z/hpHahsczZtZVTZo2YV/nBaGC4UbvobznKwxNILlDzNhEyekb
k8ndRs5KCU4mNA3QDHCVw2mn/1ybaP4chhdrAgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQU+CQw6kaaVpMQIYF2aF5oDWsEPhowHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS8tQ1F3NmthYVZwTVFJWUYyYUY1b0RXc0VQaG8u
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAayswDQYJKoZIhvcNAQELBQADggEBAHaR4F6LFvsPH9xgvl6f
l9kWAOQeamzBk3E34Z5XwUXrzQXUqoYo9rzUJfAPqaJbV0Ec1ImUdNNlnIjpk+6V
rFpmVDyX8zrnRXMpOo8/oChkjZNkSu0KSwocjxaR2AvyPk2Lxe+F5Owt0P1we0ss
sLYrXBmULMyB4pF1rIrzkbvISEmc/Eznp8num+6o6m5zkWSA0nBonrAlNi68d+0l
57PnUuBUG9oFENkRp/NgmUZQaLa7L9Y3Gdj3njBTGIwrcVcIEv0fZGbRa6zouNJ6
D7wymvvlzNmZ0TvO53uCej761nBgkZ8UQNMtKWT+viwNRqPNDhfbG0Hvd4Nv+U5q
/dc=
-----END CERTIFICATE-----
Generated at Sat Apr 27 10:15:52 2024 by rpki-client on console-ams.rpki-client.org