Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/0_rQXgSji6LGXCUl4zfrALWeDKU.roa
File:                     0_rQXgSji6LGXCUl4zfrALWeDKU.roa (raw, json)
Hash identifier:          BLSOMES87evWPmi7e3HOdEJFGh6zFgwAGGaBOD0z3aM=
Subject key identifier:   D3:FA:D0:5E:04:A3:8B:A2:C6:5C:25:25:E3:37:EB:00:B5:9E:0C:A5
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       02AD
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/0_rQXgSji6LGXCUl4zfrALWeDKU.roa
Signing time:             Tue 30 Apr 2024 01:39:25 +0000
ROA not before:           Tue 30 Apr 2024 01:39:25 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:f300::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 22:26:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 685 (0x2ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 01:39:25 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=D3FAD05E04A38BA2C65C2525E337EB00B59E0CA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1c:07:4c:75:bb:4b:90:be:de:4f:54:4f:46:
                    2a:dc:54:26:9d:20:c7:f7:34:7a:61:67:47:9a:96:
                    05:a2:78:9a:ff:80:0a:e7:f1:e0:84:17:da:60:d6:
                    23:aa:47:23:a2:7f:78:9e:0f:35:20:75:c2:44:d2:
                    50:96:aa:a1:ba:e9:31:6c:e1:a4:b7:31:6c:ca:8b:
                    db:7e:82:f7:9d:0e:d8:32:1f:b9:c3:57:93:f6:b7:
                    bd:7c:bb:cb:b7:88:50:d9:bf:30:6a:a7:8a:81:01:
                    12:29:71:b8:63:e8:b6:3b:68:e7:04:60:46:cb:2c:
                    42:cf:55:52:b5:23:e3:1f:7d:cb:6e:a3:54:07:f8:
                    8c:fd:5e:95:cd:7b:95:d7:a8:34:81:ea:96:9e:95:
                    4d:97:99:82:09:d9:46:fa:1b:d2:ae:90:ee:66:cb:
                    d1:94:91:60:97:cf:72:74:e4:da:5c:21:9c:b9:ca:
                    17:1f:6a:4d:57:b7:64:a1:14:56:ea:fe:de:d3:9a:
                    83:35:64:47:bf:3a:26:d6:ea:bc:05:ce:2c:04:0b:
                    3a:ba:23:4c:9e:88:81:63:f2:50:af:7a:d6:1f:9d:
                    b3:3d:b5:92:66:f1:18:64:8a:eb:39:a2:9a:0a:e4:
                    24:e0:48:1d:09:ee:72:3b:da:e9:95:4b:9e:d8:bf:
                    89:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:FA:D0:5E:04:A3:8B:A2:C6:5C:25:25:E3:37:EB:00:B5:9E:0C:A5
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/0_rQXgSji6LGXCUl4zfrALWeDKU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:f300::/40

    Signature Algorithm: sha256WithRSAEncryption
         06:9c:3d:d0:b5:56:d3:17:b0:cc:84:3a:51:81:ab:6b:64:41:
         92:75:ce:71:4c:93:25:c7:db:6c:6b:1c:ae:64:6d:f1:41:1a:
         11:2d:59:c2:0f:bd:28:09:66:64:c1:af:a3:96:7b:5b:49:9d:
         8d:88:a0:d7:1c:87:6c:e8:c1:cd:d4:1e:ec:46:c7:ea:ad:40:
         1e:12:cf:f6:5a:9d:f2:d1:8a:78:ac:0d:74:03:6a:ec:ee:5b:
         64:99:40:52:e0:87:5b:bf:60:ce:bc:d7:96:5c:f4:96:31:f8:
         f3:e9:70:5d:e9:3e:67:05:a3:e4:64:32:74:4e:8e:f7:da:4e:
         63:8a:d5:8f:3b:59:6a:72:65:e7:41:9a:0a:ed:6a:62:6a:01:
         f1:05:63:a6:71:e3:e5:55:d6:16:93:36:c1:40:73:eb:48:f0:
         37:df:ab:97:52:de:f9:ee:cc:28:13:cf:88:6c:d3:e3:b0:73:
         67:61:e8:0e:46:be:e8:1a:92:bc:ee:91:ee:74:38:70:fc:bc:
         c0:4e:a2:34:f7:cf:ff:ef:83:8b:ca:64:b3:73:e3:a7:7b:c5:
         2e:21:4d:a3:bd:d4:73:45:9c:29:14:9f:87:2e:46:28:bc:5d:
         37:54:05:bc:59:1b:57:20:96:86:ae:8c:34:01:ff:0c:76:da:
         a4:73:08:22
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICAq0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNDA0MzAw
MTM5MjVaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEQzRkFEMDVFMDRBMzhC
QTJDNjVDMjUyNUUzMzdFQjAwQjU5RTBDQTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC4HAdMdbtLkL7eT1RPRircVCadIMf3NHphZ0ealgWieJr/gArn
8eCEF9pg1iOqRyOif3ieDzUgdcJE0lCWqqG66TFs4aS3MWzKi9t+gvedDtgyH7nD
V5P2t718u8u3iFDZvzBqp4qBARIpcbhj6LY7aOcEYEbLLELPVVK1I+Mffctuo1QH
+Iz9XpXNe5XXqDSB6paelU2XmYIJ2Ub6G9KukO5my9GUkWCXz3J05NpcIZy5yhcf
ak1Xt2ShFFbq/t7TmoM1ZEe/OibW6rwFziwECzq6I0yeiIFj8lCvetYfnbM9tZJm
8Rhkius5opoK5CTgSB0J7nI72umVS57Yv4mVAgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQU0/rQXgSji6LGXCUl4zfrALWeDKUwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS8wX3JRWGdTamk2TEdYQ1VsNHpmckFMV2VES1Uu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAa/MwDQYJKoZIhvcNAQELBQADggEBAAacPdC1VtMXsMyEOlGB
q2tkQZJ1znFMkyXH22xrHK5kbfFBGhEtWcIPvSgJZmTBr6OWe1tJnY2IoNcch2zo
wc3UHuxGx+qtQB4Sz/ZanfLRinisDXQDauzuW2SZQFLgh1u/YM6815Zc9JYx+PPp
cF3pPmcFo+RkMnROjvfaTmOK1Y87WWpyZedBmgrtamJqAfEFY6Zx4+VV1haTNsFA
c+tI8Dffq5dS3vnuzCgTz4hs0+Owc2dh6A5Gvugakrzuke50OHD8vMBOojT3z//v
g4vKZLNz46d7xS4hTaO91HNFnCkUn4cuRii8XTdUBbxZG1cgloaujDQB/wx22qRz
CCI=
-----END CERTIFICATE-----
Generated at Fri Jun 7 00:11:42 2024 by rpki-client on console-ams.rpki-client.org