Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/9AH4H9IRu_54azI5kwR_l1fOLgo.roa
File:                     9AH4H9IRu_54azI5kwR_l1fOLgo.roa (raw, json)
Hash identifier:          VtVfKvUbvUYk78QB6XaX89EpLreRXUSZ/wd0GY39CvQ=
Subject key identifier:   F4:01:F8:1F:D2:11:BB:FE:78:6B:32:39:93:04:7F:97:57:CE:2E:0A
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       02DA
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/9AH4H9IRu_54azI5kwR_l1fOLgo.roa
Signing time:             Tue 30 Apr 2024 01:44:55 +0000
ROA not before:           Tue 30 Apr 2024 01:44:55 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:a900::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 22:26:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 730 (0x2da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 01:44:55 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=F401F81FD211BBFE786B323993047F9757CE2E0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e7:48:b2:85:d6:2c:60:9b:a8:d1:21:90:55:
                    48:bc:da:ae:cc:24:a7:9b:d2:2f:bf:51:d7:d0:0f:
                    41:2a:24:04:0a:45:dc:3b:9c:53:44:6f:56:c9:c2:
                    4e:13:22:46:b9:c5:0d:d8:a5:16:d7:d5:7e:b9:1c:
                    f4:fb:9d:64:f1:65:90:31:54:98:8d:f4:5e:47:09:
                    c8:91:7b:20:c4:d0:72:0e:28:d1:81:d7:f6:37:a0:
                    4e:5b:b3:ef:71:82:a4:7f:6f:5c:6c:7b:dd:d7:35:
                    73:d2:d5:f5:02:fe:08:bd:a5:da:bd:73:b0:64:c8:
                    bb:59:4c:b1:e8:55:ce:7b:58:76:74:c1:bb:be:0b:
                    28:04:22:6d:56:04:da:e2:ca:74:d5:6b:ca:c6:cf:
                    dd:32:b2:1d:db:e9:a5:e0:83:c3:52:47:2a:b3:1c:
                    50:b3:f3:a7:48:9c:61:02:44:3e:56:24:e9:d3:44:
                    46:0c:32:82:6d:88:2f:bb:f4:53:53:05:2c:32:ae:
                    f5:6a:cb:7b:71:a8:7f:b7:88:46:1c:43:2c:bb:2a:
                    b3:9e:f7:ea:b9:32:b3:36:b6:c2:36:6e:b6:40:5a:
                    da:3b:2f:5f:8a:2a:44:e7:bc:06:6a:8b:2d:79:43:
                    89:9d:6a:9a:d6:aa:60:1e:b8:e3:6d:f0:98:1f:c4:
                    72:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:01:F8:1F:D2:11:BB:FE:78:6B:32:39:93:04:7F:97:57:CE:2E:0A
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/9AH4H9IRu_54azI5kwR_l1fOLgo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:a900::/40

    Signature Algorithm: sha256WithRSAEncryption
         a3:e6:55:ea:2c:cc:42:af:89:8f:46:fa:65:30:3c:a5:50:be:
         4c:4d:33:f9:19:f4:9a:4d:79:c6:cf:30:fe:58:91:3d:34:67:
         ed:6f:2b:cc:30:74:32:47:7b:f6:49:df:63:88:d6:5b:57:86:
         7d:88:2c:87:bb:71:1f:d8:20:22:c2:08:a9:fc:aa:4c:ea:f2:
         f9:e1:19:9a:78:04:cb:de:4f:8e:8c:ba:70:15:59:fc:67:61:
         5b:e7:70:f1:b6:5d:f3:7a:81:93:51:97:b1:ec:ce:e3:da:63:
         31:67:f7:90:c1:6c:b9:5d:02:6f:6d:12:68:f9:f8:22:41:c0:
         9c:aa:d0:f8:3c:96:9a:cf:37:05:91:43:cc:b3:15:03:a8:9a:
         71:96:04:ff:87:c7:01:cf:60:fa:54:6d:c5:6b:32:d4:59:ba:
         2e:2c:19:c8:31:d6:ab:f3:a9:fd:c7:38:e2:33:ed:aa:74:74:
         60:f9:3d:f0:03:57:8c:a6:e6:d2:90:ea:d0:f9:f3:c4:a6:7f:
         87:63:71:48:d9:9b:23:3c:33:fe:ec:c8:d9:c0:4c:6b:14:58:
         78:32:fc:ce:05:2a:51:50:75:91:d2:44:97:d9:e1:2f:c3:b6:
         54:b1:4e:de:be:f5:fd:81:cc:ca:18:78:16:78:45:21:8d:a5:
         d0:59:13:24
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICAtowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNDA0MzAw
MTQ0NTVaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEY0MDFGODFGRDIxMUJC
RkU3ODZCMzIzOTkzMDQ3Rjk3NTdDRTJFMEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCm50iyhdYsYJuo0SGQVUi82q7MJKeb0i+/UdfQD0EqJAQKRdw7
nFNEb1bJwk4TIka5xQ3YpRbX1X65HPT7nWTxZZAxVJiN9F5HCciReyDE0HIOKNGB
1/Y3oE5bs+9xgqR/b1xse93XNXPS1fUC/gi9pdq9c7BkyLtZTLHoVc57WHZ0wbu+
CygEIm1WBNriynTVa8rGz90ysh3b6aXgg8NSRyqzHFCz86dInGECRD5WJOnTREYM
MoJtiC+79FNTBSwyrvVqy3txqH+3iEYcQyy7KrOe9+q5MrM2tsI2brZAWto7L1+K
KkTnvAZqiy15Q4mdaprWqmAeuONt8JgfxHLdAgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQU9AH4H9IRu/54azI5kwR/l1fOLgowHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS85QUg0SDlJUnVfNTRhekk1a3dSX2wxZk9MZ28u
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAa6kwDQYJKoZIhvcNAQELBQADggEBAKPmVeoszEKviY9G+mUw
PKVQvkxNM/kZ9JpNecbPMP5YkT00Z+1vK8wwdDJHe/ZJ32OI1ltXhn2ILIe7cR/Y
ICLCCKn8qkzq8vnhGZp4BMveT46MunAVWfxnYVvncPG2XfN6gZNRl7HszuPaYzFn
95DBbLldAm9tEmj5+CJBwJyq0Pg8lprPNwWRQ8yzFQOomnGWBP+HxwHPYPpUbcVr
MtRZui4sGcgx1qvzqf3HOOIz7ap0dGD5PfADV4ym5tKQ6tD588Smf4djcUjZmyM8
M/7syNnATGsUWHgy/M4FKlFQdZHSRJfZ4S/DtlSxTt6+9f2BzMoYeBZ4RSGNpdBZ
EyQ=
-----END CERTIFICATE-----
Generated at Fri Jun 7 00:11:43 2024 by rpki-client on console-ams.rpki-client.org