Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/0bX9f1FRTQqo0f-3tn6HT3K7oY8.roa
File:                     0bX9f1FRTQqo0f-3tn6HT3K7oY8.roa (raw, json)
Hash identifier:          jJPPFfEw4Y72M7ZlWfnsKO0UpqsWUzg09H2zLg5iPQI=
Subject key identifier:   D1:B5:FD:7F:51:51:4D:0A:A8:D1:FF:B7:B6:7E:87:4F:72:BB:A1:8F
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       02E2
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/0bX9f1FRTQqo0f-3tn6HT3K7oY8.roa
Signing time:             Tue 30 Apr 2024 01:44:59 +0000
ROA not before:           Tue 30 Apr 2024 01:44:59 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:3800::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 22:26:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 738 (0x2e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 01:44:59 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=D1B5FD7F51514D0AA8D1FFB7B67E874F72BBA18F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:e3:d2:28:51:8a:15:52:b1:af:75:7f:ca:05:
                    bb:d3:92:d8:06:2e:e7:b6:e9:2a:2e:f9:f6:86:16:
                    d9:26:03:ec:2c:30:df:f3:dd:ab:bb:ca:77:71:c7:
                    a8:c0:1d:48:af:6d:6a:96:a1:e9:05:5a:37:a3:81:
                    21:a6:37:03:ce:0e:7c:cc:c2:58:24:11:bf:04:11:
                    1c:70:92:1e:7a:41:d5:0c:11:e7:8e:29:a2:24:4d:
                    c0:0d:5f:c9:ab:89:83:94:6c:5a:64:59:0e:00:67:
                    f6:12:a7:d4:dd:bc:b1:09:f8:a0:ef:b0:af:4a:af:
                    71:10:e2:2f:fb:95:2b:d3:9f:67:40:c0:fc:27:7d:
                    cc:f2:16:86:69:de:2a:da:2d:32:ad:15:33:ab:aa:
                    ef:8a:8c:56:e1:24:3f:4a:9a:ac:84:19:af:8a:c6:
                    10:fd:66:e2:e8:dd:e1:96:a2:40:c1:f8:44:ab:f2:
                    02:2c:7f:c9:d3:72:9b:ec:74:ea:6c:d6:db:21:32:
                    fd:b5:e3:9a:14:20:01:bc:41:cc:2b:79:80:d6:a9:
                    3a:a2:f4:5a:57:7b:4b:e1:94:0c:ba:ad:ab:d6:81:
                    49:71:4b:5d:87:a2:3a:7f:b3:a1:e3:23:44:29:8e:
                    66:b8:1e:f8:da:51:b3:65:c2:fc:37:a1:95:e5:90:
                    ce:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:B5:FD:7F:51:51:4D:0A:A8:D1:FF:B7:B6:7E:87:4F:72:BB:A1:8F
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/0bX9f1FRTQqo0f-3tn6HT3K7oY8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:3800::/40

    Signature Algorithm: sha256WithRSAEncryption
         5f:a1:9d:b9:70:d5:9f:76:a7:e4:34:9d:ec:6c:85:f7:f4:b6:
         89:d2:a0:f4:6d:64:5e:93:fb:41:78:b8:d0:ce:32:e1:00:78:
         d0:ba:98:d5:99:47:46:47:ef:e5:dd:71:73:e9:23:16:1a:a9:
         89:a1:25:d1:05:08:ff:1b:d4:83:e8:b6:1e:76:f6:8b:35:aa:
         b3:23:b7:d5:5f:ac:01:7c:5e:be:58:1e:b9:27:2d:6b:f8:ed:
         22:cf:df:04:9f:89:f0:60:35:e6:33:bf:a8:85:c5:2c:22:cc:
         7e:1a:70:a5:14:ad:a6:dc:02:fd:af:ee:29:e1:48:ac:02:43:
         92:19:8b:e9:e1:a3:b8:8e:a9:23:a9:42:9d:71:76:e5:39:ea:
         96:79:0a:87:40:37:66:2e:88:ed:35:2c:b6:66:fe:c4:cc:e0:
         33:62:86:0d:8a:6d:66:c0:10:e0:df:52:77:92:3e:ea:8f:2e:
         a4:3c:8f:46:92:e9:4a:21:a6:ec:2c:d9:09:b2:6b:c8:61:8f:
         01:17:80:f4:68:bd:0e:03:36:a3:bf:5d:c3:17:f4:36:10:8a:
         a2:12:78:7e:dc:20:d6:df:1f:7c:20:0b:5b:42:0c:b6:f2:c5:
         7b:7a:f5:42:32:a2:1b:0c:36:9e:8f:ef:24:68:24:7e:ca:99:
         35:f2:7b:d8
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICAuIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNDA0MzAw
MTQ0NTlaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEQxQjVGRDdGNTE1MTRE
MEFBOEQxRkZCN0I2N0U4NzRGNzJCQkExOEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDs49IoUYoVUrGvdX/KBbvTktgGLue26Sou+faGFtkmA+wsMN/z
3au7yndxx6jAHUivbWqWoekFWjejgSGmNwPODnzMwlgkEb8EERxwkh56QdUMEeeO
KaIkTcANX8mriYOUbFpkWQ4AZ/YSp9TdvLEJ+KDvsK9Kr3EQ4i/7lSvTn2dAwPwn
fczyFoZp3iraLTKtFTOrqu+KjFbhJD9KmqyEGa+KxhD9ZuLo3eGWokDB+ESr8gIs
f8nTcpvsdOps1tshMv2145oUIAG8QcwreYDWqTqi9FpXe0vhlAy6ravWgUlxS12H
ojp/s6HjI0Qpjma4HvjaUbNlwvw3oZXlkM5PAgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQU0bX9f1FRTQqo0f+3tn6HT3K7oY8wHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS8wYlg5ZjFGUlRRcW8wZi0zdG42SFQzSzdvWTgu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAazgwDQYJKoZIhvcNAQELBQADggEBAF+hnblw1Z92p+Q0nexs
hff0tonSoPRtZF6T+0F4uNDOMuEAeNC6mNWZR0ZH7+XdcXPpIxYaqYmhJdEFCP8b
1IPoth529os1qrMjt9VfrAF8Xr5YHrknLWv47SLP3wSfifBgNeYzv6iFxSwizH4a
cKUUrabcAv2v7inhSKwCQ5IZi+nho7iOqSOpQp1xduU56pZ5CodAN2YuiO01LLZm
/sTM4DNihg2KbWbAEODfUneSPuqPLqQ8j0aS6Uohpuws2Qmya8hhjwEXgPRovQ4D
NqO/XcMX9DYQiqISeH7cINbfH3wgC1tCDLbyxXt69UIyohsMNp6P7yRoJH7KmTXy
e9g=
-----END CERTIFICATE-----
Generated at Fri Jun 7 00:11:42 2024 by rpki-client on console-ams.rpki-client.org