Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/-Y99J1sqqa4GM4v7sPh6zCenw5w.roa
File:                     -Y99J1sqqa4GM4v7sPh6zCenw5w.roa (raw, json)
Hash identifier:          CzS9HgVPeFJigksjLVIXiEKShpsvKJHGx89D8f44kwg=
Subject key identifier:   F9:8F:7D:27:5B:2A:A9:AE:06:33:8B:FB:B0:F8:7A:CC:27:A7:C3:9C
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       036F
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/-Y99J1sqqa4GM4v7sPh6zCenw5w.roa
Signing time:             Tue 30 Apr 2024 01:59:55 +0000
ROA not before:           Tue 30 Apr 2024 01:59:55 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:9b00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 879 (0x36f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 01:59:55 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=F98F7D275B2AA9AE06338BFBB0F87ACC27A7C39C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e2:c8:63:60:1c:29:ab:31:f4:62:4e:58:6f:
                    e7:79:f5:a6:7a:13:70:d6:c6:d4:73:27:b9:5b:cb:
                    d3:19:b3:ee:ff:8d:b9:21:4e:35:5c:81:df:e4:dd:
                    2e:f2:e5:e9:8f:fe:75:f9:2c:9e:91:6d:d1:e0:f5:
                    68:be:c9:57:d7:6d:e9:2c:65:dc:ba:fc:ff:0c:ca:
                    2c:5f:16:41:ab:1d:a4:aa:bd:72:03:f7:af:86:41:
                    d3:b9:07:69:8c:88:dd:3f:43:eb:35:98:9f:6d:a9:
                    40:8b:61:b9:19:e5:9e:a0:6d:65:2e:24:21:b4:a4:
                    26:5c:a3:6b:07:14:e6:39:db:d8:96:02:2b:d8:74:
                    8e:18:a6:a0:28:82:6e:aa:e9:81:91:05:e3:2c:4c:
                    dc:45:f0:9c:46:6a:ee:2a:d6:f1:08:a2:ce:80:ce:
                    6a:bb:e7:e8:7a:cb:eb:96:f8:26:07:7b:ee:01:60:
                    b1:58:75:c4:43:8c:f4:13:fd:c4:a4:f2:b2:8c:b6:
                    f7:8c:da:0f:5d:80:33:2d:eb:9c:03:b1:3d:4d:29:
                    ef:6a:45:cc:a0:74:fe:7f:da:10:b2:11:1b:8e:fc:
                    77:c1:9e:19:d0:7b:ab:cc:1c:86:a4:17:29:e4:27:
                    84:b3:5a:ad:06:75:06:89:ed:21:85:e6:13:35:08:
                    09:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:8F:7D:27:5B:2A:A9:AE:06:33:8B:FB:B0:F8:7A:CC:27:A7:C3:9C
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/-Y99J1sqqa4GM4v7sPh6zCenw5w.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:9b00::/40

    Signature Algorithm: sha256WithRSAEncryption
         4b:fb:ab:0a:7e:ed:e7:12:8d:8f:32:22:ea:97:d4:b8:f4:b2:
         6f:ef:dd:79:4e:7d:15:ac:d7:21:91:8d:b6:c8:af:83:41:e7:
         97:d1:f9:90:86:c0:74:2c:d7:5b:ce:81:87:0e:ed:0c:a3:26:
         d1:e9:29:f7:33:05:49:de:6d:06:de:3e:97:d2:e1:93:4d:26:
         c8:c4:3c:8b:b8:ac:fd:f1:65:e8:f8:a8:9f:ca:33:86:a7:7d:
         b2:55:1e:b5:c7:dd:0a:4e:74:43:85:eb:d2:bd:b3:ac:cd:a5:
         34:07:1f:a0:06:12:b1:48:b1:16:42:97:3b:89:67:3a:90:42:
         3d:dd:3a:eb:71:b5:d7:50:9e:20:80:14:f0:94:e7:98:b1:fa:
         f4:d4:1c:68:f6:00:7f:15:d2:f9:d0:b0:b4:fb:f2:2e:c9:c2:
         ef:d4:b6:1d:bd:be:d5:27:77:e7:93:84:ef:69:03:bc:a9:92:
         e1:9d:6a:f9:0d:e5:95:a7:7c:7b:73:4e:ea:97:50:30:0b:44:
         ab:0f:b3:a5:c7:a7:70:a6:b4:71:e6:0a:20:e9:46:17:ae:6d:
         9d:ef:54:4a:ba:65:07:d0:ad:fb:00:db:39:e7:64:55:4a:55:
         8e:07:c0:1d:c4:b5:07:02:5b:09:5d:c1:47:0c:8c:e7:d6:14:
         be:62:d4:cf
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICA28wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNDA0MzAw
MTU5NTVaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEY5OEY3RDI3NUIyQUE5
QUUwNjMzOEJGQkIwRjg3QUNDMjdBN0MzOUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDb4shjYBwpqzH0Yk5Yb+d59aZ6E3DWxtRzJ7lby9MZs+7/jbkh
TjVcgd/k3S7y5emP/nX5LJ6RbdHg9Wi+yVfXbeksZdy6/P8MyixfFkGrHaSqvXID
96+GQdO5B2mMiN0/Q+s1mJ9tqUCLYbkZ5Z6gbWUuJCG0pCZco2sHFOY529iWAivY
dI4YpqAogm6q6YGRBeMsTNxF8JxGau4q1vEIos6Azmq75+h6y+uW+CYHe+4BYLFY
dcRDjPQT/cSk8rKMtveM2g9dgDMt65wDsT1NKe9qRcygdP5/2hCyERuO/HfBnhnQ
e6vMHIakFynkJ4SzWq0GdQaJ7SGF5hM1CAnvAgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQU+Y99J1sqqa4GM4v7sPh6zCenw5wwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS8tWTk5SjFzcXFhNEdNNHY3c1BoNnpDZW53NXcu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAa5swDQYJKoZIhvcNAQELBQADggEBAEv7qwp+7ecSjY8yIuqX
1Lj0sm/v3XlOfRWs1yGRjbbIr4NB55fR+ZCGwHQs11vOgYcO7QyjJtHpKfczBUne
bQbePpfS4ZNNJsjEPIu4rP3xZej4qJ/KM4anfbJVHrXH3QpOdEOF69K9s6zNpTQH
H6AGErFIsRZClzuJZzqQQj3dOutxtddQniCAFPCU55ix+vTUHGj2AH8V0vnQsLT7
8i7Jwu/Uth29vtUnd+eThO9pA7ypkuGdavkN5ZWnfHtzTuqXUDALRKsPs6XHp3Cm
tHHmCiDpRheubZ3vVEq6ZQfQrfsA2znnZFVKVY4HwB3EtQcCWwldwUcMjOfWFL5i
1M8=
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:13 2024 by rpki-client on console-fra.rpki-client.org