Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/0oZNz0PkPjuIH1UUOdNpF_1yQy8.roa
File:                     0oZNz0PkPjuIH1UUOdNpF_1yQy8.roa (raw, json)
Hash identifier:          c7qxQwot6coOYSUzbDw3eurFr0LCHpClvk+HJJevEWI=
Subject key identifier:   D2:86:4D:CF:43:E4:3E:3B:88:1F:55:14:39:D3:69:17:FD:72:43:2F
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       02F7
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/0oZNz0PkPjuIH1UUOdNpF_1yQy8.roa
Signing time:             Tue 30 Apr 2024 01:48:06 +0000
ROA not before:           Tue 30 Apr 2024 01:48:06 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:61:3800::/38 maxlen: 38

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 759 (0x2f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 01:48:06 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=D2864DCF43E43E3B881F551439D36917FD72432F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a4:8f:73:4f:f6:4a:9c:82:42:db:8b:e7:a0:
                    38:e4:c8:da:0d:95:d5:86:a7:b6:b4:66:c4:59:f2:
                    e8:aa:66:0c:ab:ae:51:e9:66:90:cd:90:54:3f:8e:
                    0b:75:db:16:de:92:d9:89:2a:59:72:af:0a:af:3f:
                    52:98:f1:30:44:7f:cb:02:d2:5d:02:ee:48:b7:db:
                    1c:d9:55:20:de:d3:9f:8d:aa:d9:dd:a3:18:3d:a8:
                    4a:81:33:a9:13:5a:66:e6:cf:94:eb:39:8e:1a:18:
                    53:99:97:97:7c:c6:e1:37:5c:72:a7:1b:36:6d:25:
                    5d:7c:06:43:0f:73:ff:12:91:a4:13:33:6b:44:eb:
                    fa:cd:ca:32:70:97:52:d7:56:aa:bf:e2:f6:ae:68:
                    40:7e:00:ae:e6:e2:f4:a1:36:58:ac:9c:e2:a3:ac:
                    df:44:f5:c9:d2:33:8f:f0:76:19:23:1c:6e:91:1e:
                    45:c9:fe:8b:88:40:35:f2:d0:10:76:19:b1:97:be:
                    ec:bd:27:48:5d:91:7a:d6:bf:5c:40:42:7d:3d:da:
                    cd:a9:54:04:94:dc:b2:f4:bc:6e:32:5f:7c:3c:f9:
                    ce:71:5a:25:c3:f5:33:00:7e:2b:d9:3e:f5:7b:79:
                    d5:55:50:bc:a4:2b:e3:ad:3a:c8:e0:0f:46:94:d7:
                    b1:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:86:4D:CF:43:E4:3E:3B:88:1F:55:14:39:D3:69:17:FD:72:43:2F
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/0oZNz0PkPjuIH1UUOdNpF_1yQy8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:61:3800::/38

    Signature Algorithm: sha256WithRSAEncryption
         65:62:2e:58:af:1e:43:3c:70:1f:d5:e3:42:18:aa:2f:8a:9b:
         59:fb:2f:fe:ed:7c:2f:d5:43:06:df:18:3e:0a:55:3f:fb:fc:
         9f:a5:78:8b:7f:58:b8:1d:cb:02:3e:b9:4d:17:c9:50:8b:b7:
         4b:e0:48:db:36:94:1a:b0:0c:9a:6e:a2:ea:89:5c:10:33:80:
         ac:1d:63:9c:99:9d:74:0e:14:a7:a4:d5:8b:3e:06:6c:55:70:
         06:26:f4:e2:3e:24:53:8c:89:50:fa:81:8e:cd:bd:e0:56:03:
         d5:f2:27:f3:0d:3f:13:53:30:7e:aa:f0:70:3a:b9:20:cc:b6:
         5d:d1:78:33:e6:9a:06:56:9f:7f:de:72:7a:f6:05:0d:a5:32:
         1b:5a:7c:09:bb:b7:39:62:a2:68:4b:a8:e4:15:06:24:df:a4:
         dc:8f:64:af:33:b7:3f:11:ad:be:77:68:b9:c4:d5:3e:be:c3:
         b1:ad:29:1c:2d:8c:0b:b0:f0:b6:b8:6c:1c:28:41:01:88:ba:
         52:be:72:e2:4d:ad:b0:ae:b9:ba:90:51:61:a9:0c:cf:28:f6:
         9e:cc:13:d3:b9:65:52:1a:4f:77:e9:bd:17:36:e1:80:68:5e:
         de:43:07:ad:1c:ff:76:b7:09:b8:04:f4:10:7a:ad:56:88:8e:
         f3:6d:5e:d9
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICAvcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNDA0MzAw
MTQ4MDZaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEQyODY0RENGNDNFNDNF
M0I4ODFGNTUxNDM5RDM2OTE3RkQ3MjQzMkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCZpI9zT/ZKnIJC24vnoDjkyNoNldWGp7a0ZsRZ8uiqZgyrrlHp
ZpDNkFQ/jgt12xbektmJKllyrwqvP1KY8TBEf8sC0l0C7ki32xzZVSDe05+Nqtnd
oxg9qEqBM6kTWmbmz5TrOY4aGFOZl5d8xuE3XHKnGzZtJV18BkMPc/8SkaQTM2tE
6/rNyjJwl1LXVqq/4vauaEB+AK7m4vShNlisnOKjrN9E9cnSM4/wdhkjHG6RHkXJ
/ouIQDXy0BB2GbGXvuy9J0hdkXrWv1xAQn092s2pVASU3LL0vG4yX3w8+c5xWiXD
9TMAfivZPvV7edVVULykK+OtOsjgD0aU17EVAgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQU0oZNz0PkPjuIH1UUOdNpF/1yQy8wHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS8wb1pOejBQa1BqdUlIMVVVT2ROcEZfMXlReTgu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYCJAoAYTgwDQYJKoZIhvcNAQELBQADggEBAGViLlivHkM8cB/V40IY
qi+Km1n7L/7tfC/VQwbfGD4KVT/7/J+leIt/WLgdywI+uU0XyVCLt0vgSNs2lBqw
DJpuouqJXBAzgKwdY5yZnXQOFKek1Ys+BmxVcAYm9OI+JFOMiVD6gY7NveBWA9Xy
J/MNPxNTMH6q8HA6uSDMtl3ReDPmmgZWn3/ecnr2BQ2lMhtafAm7tzliomhLqOQV
BiTfpNyPZK8ztz8Rrb53aLnE1T6+w7GtKRwtjAuw8La4bBwoQQGIulK+cuJNrbCu
ubqQUWGpDM8o9p7ME9O5ZVIaT3fpvRc24YBoXt5DB60c/3a3CbgE9BB6rVaIjvNt
Xtk=
-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:20 2024 by rpki-client on console-ams.rpki-client.org