Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/7Svx7SUm5KNGVVY2VzMcebPechI.roa
File:                     7Svx7SUm5KNGVVY2VzMcebPechI.roa (raw, json)
Hash identifier:          3Hlh/6iytyaoog9lKI3JZS1v0BFdfJjQXjlQ2p+A7i4=
Subject key identifier:   ED:2B:F1:ED:25:26:E4:A3:46:55:56:36:57:33:1C:79:B3:DE:72:12
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       038A
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/7Svx7SUm5KNGVVY2VzMcebPechI.roa
Signing time:             Tue 30 Apr 2024 02:02:41 +0000
ROA not before:           Tue 30 Apr 2024 02:02:41 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:8b00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 22:26:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 906 (0x38a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 02:02:41 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=ED2BF1ED2526E4A34655563657331C79B3DE7212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e6:b5:cd:25:a6:54:77:f1:5e:9f:f6:d3:97:
                    ed:5e:ea:6a:8d:40:fb:61:ba:d6:e0:15:52:78:e2:
                    0c:f8:0b:81:31:7e:77:43:cb:ef:63:30:1f:14:00:
                    dc:94:f5:af:86:9b:20:f3:d5:c0:57:6b:23:70:d5:
                    8a:36:56:5e:c4:7e:b7:ca:9b:4a:01:0e:30:b2:90:
                    cc:10:06:62:34:76:f1:f5:e7:65:2a:9f:30:a6:47:
                    83:78:4f:db:07:2f:f2:4e:68:bb:92:ac:9f:b4:f8:
                    12:8c:3e:8b:f7:1b:86:7c:d7:50:96:ae:05:b8:00:
                    db:3e:56:e6:48:aa:37:d8:3e:94:84:df:41:d7:7a:
                    22:b4:5f:65:8f:75:ab:0e:d1:92:79:61:22:e9:4e:
                    fb:2e:db:d1:7e:3c:70:b5:5e:a3:62:0b:b3:80:cd:
                    5c:95:11:b5:1a:cb:5a:85:43:f7:dd:70:c1:fa:82:
                    fc:35:6a:be:88:6a:f0:75:a4:1d:11:85:72:af:4a:
                    8a:1a:ac:8e:de:07:0c:0f:e8:2d:06:e3:04:80:8c:
                    87:3f:8d:02:e3:fa:b9:1d:e3:1e:dd:fe:87:c3:ce:
                    70:75:4c:f1:59:59:f3:ca:33:d2:a1:3f:fd:f6:3d:
                    26:39:e6:0f:ce:2c:45:f5:12:97:d2:a4:52:3c:1e:
                    dd:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:2B:F1:ED:25:26:E4:A3:46:55:56:36:57:33:1C:79:B3:DE:72:12
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/7Svx7SUm5KNGVVY2VzMcebPechI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:8b00::/40

    Signature Algorithm: sha256WithRSAEncryption
         b5:24:98:c8:83:f9:fe:37:51:6c:26:e9:aa:b4:71:a2:77:19:
         ea:b9:c8:66:79:aa:41:8a:de:e7:c9:92:0d:d5:73:16:09:30:
         3f:82:f3:d0:10:7f:bf:2a:68:ff:92:d0:d5:9b:64:5a:4b:04:
         5c:e5:f0:22:54:35:87:a1:d1:e7:1e:31:d0:e2:0e:d6:34:65:
         e0:24:d0:b8:a7:3a:02:7a:6e:6b:cb:c1:fe:06:bf:b2:1a:08:
         fe:ae:3b:bf:dd:53:1e:85:20:26:ca:6f:bf:0c:55:91:46:93:
         53:b6:78:2e:2b:06:af:d2:2c:58:ba:79:18:f3:51:f1:73:08:
         24:be:25:2c:43:2c:04:03:1f:85:a4:e9:8e:5e:bb:ae:53:d5:
         dd:58:bf:3f:c3:bc:9b:b0:95:44:5b:1d:a5:2c:5e:52:08:a9:
         a3:9e:8e:14:d4:60:9d:0b:9c:fc:fa:de:dc:05:77:03:f1:5e:
         b2:56:23:1a:1e:f3:e9:0f:77:76:c9:67:7c:8d:30:d3:b2:8a:
         69:0f:36:56:3f:bd:78:8e:94:b9:e8:8d:3e:83:be:3f:b2:5f:
         c2:5c:a4:f6:23:ab:9d:95:7b:41:f8:de:97:af:ab:4c:5a:1e:
         b2:7d:24:b3:2e:bc:4c:6c:7f:f3:ac:53:28:c8:75:ab:85:4f:
         ce:17:7f:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 00:11:43 2024 by rpki-client on console-ams.rpki-client.org