Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/1OhLpv61KlkTVu5t54kmuAGvFFs.roa
File:                     1OhLpv61KlkTVu5t54kmuAGvFFs.roa (raw, json)
Hash identifier:          QS+2pUX7dM5Kz6kzUCb8voBQh0QJypgexzsitq+bC8o=
Subject key identifier:   D4:E8:4B:A6:FE:B5:2A:59:13:56:EE:6D:E7:89:26:B8:01:AF:14:5B
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0300
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/1OhLpv61KlkTVu5t54kmuAGvFFs.roa
Signing time:             Tue 30 Apr 2024 01:48:10 +0000
ROA not before:           Tue 30 Apr 2024 01:48:10 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:6c00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 768 (0x300)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 01:48:10 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=D4E84BA6FEB52A591356EE6DE78926B801AF145B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c0:55:dd:6f:89:39:57:57:a5:3c:e3:6c:79:
                    84:90:4d:2f:c2:4f:49:6c:99:38:7f:a2:7d:75:1c:
                    f3:fa:e1:89:ef:31:fa:e8:ad:19:83:60:0d:4f:02:
                    a9:54:7e:3e:e0:b7:32:30:56:32:08:71:62:d1:36:
                    b6:bd:61:0e:80:6b:80:65:68:35:6b:05:e9:40:8a:
                    a5:80:2d:55:1c:36:bc:2d:62:f6:84:70:ac:7e:eb:
                    ce:10:61:66:d9:63:69:2e:7b:fc:08:95:5e:0b:13:
                    04:e0:99:6f:42:63:06:4e:44:cd:d2:07:30:16:03:
                    8b:15:f4:9c:8a:d5:d4:c1:6a:bb:4c:9b:52:25:40:
                    05:2c:3c:3b:f6:f6:de:5b:46:36:12:60:40:b2:41:
                    b7:be:b0:64:b3:ca:bd:01:75:b1:46:b0:fd:48:0b:
                    4a:2c:96:29:d2:11:4c:f8:db:f6:8a:e3:f6:2e:40:
                    18:8e:dc:f0:3d:ac:0e:24:2c:9a:d1:b2:03:11:ca:
                    b9:73:8e:a0:98:55:fe:86:87:6e:c2:c1:ac:e8:dc:
                    b5:88:3a:f5:ba:ed:13:7f:d0:09:91:63:62:14:05:
                    11:25:4a:9b:03:10:2a:99:c3:05:dc:11:49:7d:99:
                    7d:fd:ab:29:ee:f7:0e:05:9b:c5:e9:21:dc:da:80:
                    ba:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:E8:4B:A6:FE:B5:2A:59:13:56:EE:6D:E7:89:26:B8:01:AF:14:5B
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/1OhLpv61KlkTVu5t54kmuAGvFFs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:6c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         54:fe:3b:50:22:7a:fb:20:b1:95:05:59:13:6a:38:e7:80:33:
         fe:32:1a:9c:52:a3:a2:58:a1:c3:55:ef:e6:b3:1c:72:f3:52:
         c9:6d:53:d0:0a:f4:af:94:5e:43:51:ec:b1:3d:c6:86:d2:9a:
         2f:7a:f6:a8:66:4b:ab:32:a2:3f:4a:66:96:95:6a:d9:df:f4:
         0b:d8:54:dd:a7:78:d7:d3:83:62:aa:cb:71:54:05:b5:a0:59:
         53:2d:ff:aa:96:64:fc:c1:99:49:d2:de:0c:7e:e6:f4:58:f7:
         da:82:f9:32:a7:a7:e3:5d:83:42:22:28:22:17:e5:61:5f:f1:
         2c:e4:37:7c:18:b1:0a:86:44:21:b1:66:f8:6d:d3:df:a0:20:
         75:31:00:2d:49:f7:0b:a9:42:8b:b7:5e:e0:4a:ba:49:1e:69:
         85:56:31:b8:51:65:12:cf:f0:69:3b:1c:c6:22:93:e8:e7:c0:
         9c:00:0d:42:b6:01:90:7a:15:8a:b1:f7:13:7d:6b:6d:d0:de:
         cf:c5:4a:5f:71:d8:78:5e:34:21:83:e6:35:8f:5d:58:bb:e0:
         e9:e3:23:f6:92:88:7f:89:42:20:54:88:4e:88:d6:ba:a8:16:
         a3:bd:55:4e:d9:a6:13:63:eb:63:7a:e5:ba:8e:c6:b8:2d:bc:
         ae:0d:06:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:30 2024 by rpki-client on console-ams.rpki-client.org