Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/7U_bprM05vlJZFmTGQvD877VUCg.roa
File:                     7U_bprM05vlJZFmTGQvD877VUCg.roa (raw, json)
Hash identifier:          C1PwiZ7A5IB/R4lXgslmRcqvjMoB0ZVyij7SReVUgKU=
Subject key identifier:   ED:4F:DB:A6:B3:34:E6:F9:49:64:59:93:19:0B:C3:F3:BE:D5:50:28
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0383
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/7U_bprM05vlJZFmTGQvD877VUCg.roa
Signing time:             Tue 30 Apr 2024 02:00:06 +0000
ROA not before:           Tue 30 Apr 2024 02:00:06 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:f700::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 899 (0x383)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 02:00:06 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=ED4FDBA6B334E6F949645993190BC3F3BED55028
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:aa:2b:fa:5a:c0:e0:82:a9:18:a0:63:3e:39:
                    66:bc:a1:40:2a:37:53:d3:83:2f:3b:59:b9:80:34:
                    f4:3d:d1:78:00:44:af:5c:0f:15:b4:86:e8:ac:f1:
                    73:cf:95:99:a7:c2:8d:76:86:48:7a:e0:4e:f0:96:
                    07:c6:54:eb:dc:39:7e:ff:b2:98:c1:9d:ee:9a:cf:
                    9c:ad:d5:06:d6:ac:60:c7:37:d1:22:55:d9:26:6a:
                    3b:7a:ae:b1:b4:a1:1a:e2:9d:03:26:96:60:06:0d:
                    01:24:95:a5:f1:96:4c:9c:82:95:a2:7d:a2:36:a3:
                    11:58:0b:32:88:7f:73:4b:93:fe:ec:6f:52:1b:d3:
                    e7:29:f8:c1:9e:cc:ca:37:f6:2a:ca:a6:76:92:ef:
                    64:94:c2:60:44:98:2c:2a:06:cc:e7:8d:50:ff:72:
                    02:ed:5a:8e:6e:23:f7:58:3a:fd:ed:8c:e4:69:7d:
                    d6:75:16:bf:b4:a9:f3:c2:87:39:b5:aa:bb:dd:3c:
                    4a:b7:e3:31:50:61:aa:7a:c8:da:f1:eb:6c:49:69:
                    95:89:5b:92:ab:4b:51:23:a1:68:73:b4:e4:a4:d0:
                    3e:89:ba:7b:19:18:22:96:ad:58:b2:06:25:d4:12:
                    00:f4:1d:17:2d:f6:8c:98:84:f5:57:b5:19:71:e3:
                    4e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:4F:DB:A6:B3:34:E6:F9:49:64:59:93:19:0B:C3:F3:BE:D5:50:28
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/7U_bprM05vlJZFmTGQvD877VUCg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:f700::/40

    Signature Algorithm: sha256WithRSAEncryption
         0c:47:92:0e:a9:38:2f:8c:26:06:01:13:03:14:8f:fa:7c:e9:
         4c:2b:fe:16:25:c3:65:d4:87:ca:12:82:33:c6:23:86:6e:7c:
         c7:76:5b:09:a0:36:d1:d3:b8:dd:35:cd:6f:14:ac:26:75:47:
         03:1d:96:f7:0a:60:92:2c:ea:51:23:c7:80:5b:e2:28:8e:62:
         1a:24:d0:0e:1c:b7:87:b6:75:67:07:28:97:b2:7b:c2:6c:bb:
         eb:43:35:2c:99:f5:1c:81:9a:f3:5a:06:fb:52:e4:7f:63:a0:
         1d:0b:05:59:6b:98:46:8c:24:a8:21:f9:a4:54:70:a6:dc:b0:
         20:1b:7a:f3:15:30:e1:f7:84:25:87:14:d4:45:84:c3:57:fa:
         9f:e0:03:b6:63:c1:6e:09:b9:13:67:6e:0d:32:a2:a1:a4:dd:
         56:8f:09:be:5d:67:47:22:1e:31:23:97:83:66:b4:d6:6b:77:
         18:8b:90:ac:ac:57:8f:14:20:e0:ab:c4:69:47:c8:45:08:54:
         33:84:bc:d3:64:bf:ce:76:51:52:d6:dc:24:88:dd:03:e7:73:
         54:42:65:db:34:4b:a3:24:a7:c8:78:2e:11:f8:00:d5:63:78:
         d9:c0:d0:06:9f:22:2d:b0:84:32:28:c3:64:c2:89:1e:d6:78:
         6c:90:d2:03
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICA4MwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNDA0MzAw
MjAwMDZaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEVENEZEQkE2QjMzNEU2
Rjk0OTY0NTk5MzE5MEJDM0YzQkVENTUwMjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC/qiv6WsDggqkYoGM+OWa8oUAqN1PTgy87WbmANPQ90XgARK9c
DxW0huis8XPPlZmnwo12hkh64E7wlgfGVOvcOX7/spjBne6az5yt1QbWrGDHN9Ei
Vdkmajt6rrG0oRrinQMmlmAGDQEklaXxlkycgpWifaI2oxFYCzKIf3NLk/7sb1Ib
0+cp+MGezMo39irKpnaS72SUwmBEmCwqBsznjVD/cgLtWo5uI/dYOv3tjORpfdZ1
Fr+0qfPChzm1qrvdPEq34zFQYap6yNrx62xJaZWJW5KrS1EjoWhztOSk0D6JunsZ
GCKWrViyBiXUEgD0HRct9oyYhPVXtRlx407TAgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQU7U/bprM05vlJZFmTGQvD877VUCgwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS83VV9icHJNMDV2bEpaRm1UR1F2RDg3N1ZVQ2cu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAa/cwDQYJKoZIhvcNAQELBQADggEBAAxHkg6pOC+MJgYBEwMU
j/p86Uwr/hYlw2XUh8oSgjPGI4ZufMd2WwmgNtHTuN01zW8UrCZ1RwMdlvcKYJIs
6lEjx4Bb4iiOYhok0A4ct4e2dWcHKJeye8Jsu+tDNSyZ9RyBmvNaBvtS5H9joB0L
BVlrmEaMJKgh+aRUcKbcsCAbevMVMOH3hCWHFNRFhMNX+p/gA7ZjwW4JuRNnbg0y
oqGk3VaPCb5dZ0ciHjEjl4NmtNZrdxiLkKysV48UIOCrxGlHyEUIVDOEvNNkv852
UVLW3CSI3QPnc1RCZds0S6Mkp8h4LhH4ANVjeNnA0AafIi2whDIow2TCiR7WeGyQ
0gM=
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:44 2024 by rpki-client on console-fra.rpki-client.org