Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/3eNNey4nghAmcPDFdIMbd26Ciug.roa
File:                     3eNNey4nghAmcPDFdIMbd26Ciug.roa (raw, json)
Hash identifier:          PTsr7ly2UD6JP5JAsKAbqDiNfPcNF28zfArljRgo84c=
Subject key identifier:   DD:E3:4D:7B:2E:27:82:10:26:70:F0:C5:74:83:1B:77:6E:82:8A:E8
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       025A
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/3eNNey4nghAmcPDFdIMbd26Ciug.roa
Signing time:             Thu 27 Jul 2023 17:23:38 +0000
ROA not before:           Thu 27 Jul 2023 17:23:38 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:0:900::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 602 (0x25a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Jul 27 17:23:38 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=DDE34D7B2E2782102670F0C574831B776E828AE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e9:dd:31:56:42:76:ca:19:8d:0b:6b:cc:14:
                    3f:17:a1:76:d0:bc:e2:79:e1:b7:c5:0d:e5:7a:3e:
                    4d:c3:96:52:69:bb:c7:65:8a:7d:ea:b4:d2:1e:a8:
                    ba:a5:e0:c6:15:f9:58:49:da:43:a6:3f:04:7d:1d:
                    7c:73:17:b5:19:5e:d0:61:79:c2:1d:a2:e2:a1:61:
                    69:71:c0:b4:a9:36:93:a8:2d:e5:29:74:53:88:7f:
                    b8:83:fe:69:1b:f0:77:74:e4:33:3a:a4:de:81:d1:
                    06:57:2a:e6:e9:e4:ff:87:46:88:58:16:0f:f8:20:
                    89:40:30:a6:6d:61:fc:20:94:13:bd:fe:3a:ad:ed:
                    03:66:78:d9:13:e7:4f:a0:7f:ca:eb:2e:15:37:00:
                    a2:15:34:98:f6:15:8b:6c:c7:95:dc:f2:8a:c8:92:
                    56:b7:86:10:07:67:51:68:5a:f4:31:5c:84:e4:79:
                    f8:a4:3d:0e:bd:20:80:27:ab:e7:51:f0:35:da:d1:
                    a5:5b:64:ff:80:b4:24:da:39:ec:f2:cf:74:6e:88:
                    21:7c:68:2c:41:aa:8a:f4:5b:25:20:d5:73:65:92:
                    19:7b:dc:9c:b8:cd:25:89:5b:65:e3:cf:28:08:0b:
                    e6:ab:d2:68:8c:8c:64:e3:cc:5c:6f:a9:46:de:9d:
                    4d:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:E3:4D:7B:2E:27:82:10:26:70:F0:C5:74:83:1B:77:6E:82:8A:E8
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/3eNNey4nghAmcPDFdIMbd26Ciug.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:0:900::/40

    Signature Algorithm: sha256WithRSAEncryption
         56:27:2d:58:8f:0e:6d:c5:cd:b3:aa:d8:8e:19:0e:17:1a:5b:
         0b:f4:19:c1:2d:f5:49:8b:86:d6:9e:81:28:8a:ab:07:1c:17:
         38:13:46:ef:16:b2:33:b9:22:5b:c9:be:cf:66:99:01:ce:9e:
         1b:27:0b:e2:6a:2d:a4:cf:f5:f6:1d:d5:b5:dc:39:e5:42:39:
         c9:7c:9e:58:a2:b9:5a:8a:82:6b:26:02:31:f6:2f:1c:67:5c:
         a4:a2:7a:2f:81:40:87:f0:f3:dd:aa:6a:ac:8c:ee:87:e0:f2:
         67:05:f5:1e:4e:b6:52:da:0c:a9:3c:9a:bf:56:69:4d:be:c0:
         dd:01:b5:b5:73:db:83:ca:04:3c:c8:27:f6:de:68:a4:16:66:
         0e:84:b9:f2:1e:e9:af:84:b5:ec:ec:de:29:93:e6:97:ff:18:
         38:cc:7f:75:a9:34:f3:4b:18:aa:74:91:54:e4:73:b8:66:e1:
         f2:79:19:e9:80:d9:55:4c:94:fb:0c:47:b8:96:88:b1:a7:8b:
         d1:85:00:1c:2e:d7:e6:8a:42:b7:dd:ca:fe:c9:95:5e:0a:aa:
         78:82:a4:e4:44:cc:26:8f:41:82:cf:ce:62:e5:c5:ec:43:12:
         6b:f5:4d:15:e3:50:dd:a2:30:11:a2:6d:83:74:d6:3e:78:32:
         7b:69:0f:1d
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICAlowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yMzA3Mjcx
NzIzMzhaFw0yNDA3MTQwMTMwMDNaMDMxMTAvBgNVBAMTKERERTM0RDdCMkUyNzgy
MTAyNjcwRjBDNTc0ODMxQjc3NkU4MjhBRTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDY6d0xVkJ2yhmNC2vMFD8XoXbQvOJ54bfFDeV6Pk3DllJpu8dl
in3qtNIeqLql4MYV+VhJ2kOmPwR9HXxzF7UZXtBhecIdouKhYWlxwLSpNpOoLeUp
dFOIf7iD/mkb8Hd05DM6pN6B0QZXKubp5P+HRohYFg/4IIlAMKZtYfwglBO9/jqt
7QNmeNkT50+gf8rrLhU3AKIVNJj2FYtsx5Xc8orIkla3hhAHZ1FoWvQxXITkefik
PQ69IIAnq+dR8DXa0aVbZP+AtCTaOezyz3RuiCF8aCxBqor0WyUg1XNlkhl73Jy4
zSWJW2XjzygIC+ar0miMjGTjzFxvqUbenU3tAgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQU3eNNey4nghAmcPDFdIMbd26CiugwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS8zZU5OZXk0bmdoQW1jUERGZElNYmQyNkNpdWcu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAAAkwDQYJKoZIhvcNAQELBQADggEBAFYnLViPDm3FzbOq2I4Z
DhcaWwv0GcEt9UmLhtaegSiKqwccFzgTRu8WsjO5IlvJvs9mmQHOnhsnC+JqLaTP
9fYd1bXcOeVCOcl8nliiuVqKgmsmAjH2LxxnXKSiei+BQIfw892qaqyM7ofg8mcF
9R5OtlLaDKk8mr9WaU2+wN0BtbVz24PKBDzIJ/beaKQWZg6EufIe6a+Etezs3imT
5pf/GDjMf3WpNPNLGKp0kVTkc7hm4fJ5GemA2VVMlPsMR7iWiLGni9GFABwu1+aK
Qrfdyv7JlV4KqniCpOREzCaPQYLPzmLlxexDEmv1TRXjUN2iMBGibYN01j54Mntp
Dx0=
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:44 2024 by rpki-client on console-fra.rpki-client.org