Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/9aX81gTsbvVyh8z3tVOhn-w8y5k.roa
File:                     9aX81gTsbvVyh8z3tVOhn-w8y5k.roa (raw, json)
Hash identifier:          3iUWcIn5Umt3zF0UjZJ0/hxlk038eIORFDMzMTcb0ig=
Subject key identifier:   F5:A5:FC:D6:04:EC:6E:F5:72:87:CC:F7:B5:53:A1:9F:EC:3C:CB:99
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0312
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/9aX81gTsbvVyh8z3tVOhn-w8y5k.roa
Signing time:             Tue 30 Apr 2024 01:50:48 +0000
ROA not before:           Tue 30 Apr 2024 01:50:48 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:7900::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 786 (0x312)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 01:50:48 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=F5A5FCD604EC6EF57287CCF7B553A19FEC3CCB99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f0:af:4a:ba:42:a0:fc:af:62:ad:1a:4b:d3:
                    ad:4c:50:2a:f8:8f:9c:15:81:0b:81:64:fe:56:44:
                    02:de:68:7e:33:43:bc:26:62:f3:45:a8:3f:a5:bb:
                    6e:4e:d9:62:1f:1f:bd:d4:7d:05:2c:e5:94:b5:ac:
                    04:1c:42:6f:23:59:f6:6e:1c:84:c7:1c:f2:18:4b:
                    af:58:e8:dc:00:30:af:df:d1:1f:02:a9:57:77:f7:
                    bc:4f:f5:79:5e:20:bf:d5:7c:db:dd:69:d6:95:50:
                    7f:d2:3c:a2:81:2e:73:49:d5:d3:93:c9:72:97:e9:
                    8b:b6:ad:7f:9e:f5:92:0a:b5:1e:74:74:34:92:70:
                    4b:c3:8f:4c:b8:ec:52:ea:e6:21:dd:d5:c2:84:c3:
                    9d:5d:fb:95:2b:10:0e:8b:3e:a7:33:59:84:b5:f6:
                    29:ce:8e:d0:d5:aa:33:b1:97:07:01:fe:2c:b0:8b:
                    da:fd:d9:df:71:c0:1b:75:dd:d6:03:db:64:09:92:
                    c7:6a:bc:6b:40:ae:9a:c9:db:8e:11:e2:54:e0:3c:
                    be:3d:c2:6a:30:45:b2:a2:fe:c4:4c:03:47:a1:a9:
                    f8:b8:17:ed:80:ae:42:d0:e1:c0:5d:39:42:35:bb:
                    82:ed:b5:4a:c2:4b:ec:be:07:aa:d5:e7:d8:0e:6a:
                    ca:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:A5:FC:D6:04:EC:6E:F5:72:87:CC:F7:B5:53:A1:9F:EC:3C:CB:99
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/9aX81gTsbvVyh8z3tVOhn-w8y5k.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:7900::/40

    Signature Algorithm: sha256WithRSAEncryption
         1d:35:23:9b:96:08:a0:21:e9:81:f6:6b:53:94:15:f2:60:90:
         e3:3b:a4:27:75:f4:65:d2:46:3c:d8:69:7b:4c:29:9a:c7:73:
         0c:52:9b:7a:d6:a3:b1:89:d9:af:7e:b5:2c:9d:44:82:79:3c:
         8a:c5:85:75:21:92:df:85:a2:53:5b:2f:07:1a:f6:d0:3b:48:
         4a:8b:58:7d:0b:ad:ff:f8:de:37:ea:b6:c2:6f:18:be:98:57:
         b4:86:e1:63:68:7b:44:c9:1a:a9:1e:7d:d1:bf:52:df:60:4c:
         25:6c:94:cd:3e:14:4c:73:0a:bc:99:8d:3a:b1:6a:02:1d:9f:
         ba:5d:8f:95:48:8f:4d:3e:b4:56:0e:45:fd:1b:f7:33:ba:f6:
         2c:92:0c:74:cd:99:d8:a7:d2:1b:1a:a7:ac:34:d5:f3:9d:3f:
         67:98:d1:35:72:ff:f2:60:23:bb:72:38:c8:35:85:50:70:97:
         8c:ab:00:45:3e:8b:6c:d8:6a:2a:18:0c:4b:48:38:03:3c:96:
         61:d3:5b:77:77:fc:d4:c8:46:1e:5a:e8:ae:64:98:bd:3e:bc:
         e2:ec:4f:c3:ba:17:10:ad:89:81:58:43:37:bc:32:15:08:d4:
         0a:d2:ad:30:51:f1:0f:f0:03:69:4f:c4:01:16:f6:94:61:26:
         78:a9:c4:f4
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICAxIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNDA0MzAw
MTUwNDhaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEY1QTVGQ0Q2MDRFQzZF
RjU3Mjg3Q0NGN0I1NTNBMTlGRUMzQ0NCOTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDP8K9KukKg/K9irRpL061MUCr4j5wVgQuBZP5WRALeaH4zQ7wm
YvNFqD+lu25O2WIfH73UfQUs5ZS1rAQcQm8jWfZuHITHHPIYS69Y6NwAMK/f0R8C
qVd397xP9XleIL/VfNvdadaVUH/SPKKBLnNJ1dOTyXKX6Yu2rX+e9ZIKtR50dDSS
cEvDj0y47FLq5iHd1cKEw51d+5UrEA6LPqczWYS19inOjtDVqjOxlwcB/iywi9r9
2d9xwBt13dYD22QJksdqvGtArprJ244R4lTgPL49wmowRbKi/sRMA0ehqfi4F+2A
rkLQ4cBdOUI1u4LttUrCS+y+B6rV59gOasrlAgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQU9aX81gTsbvVyh8z3tVOhn+w8y5kwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS85YVg4MWdUc2J2VnloOHozdFZPaG4tdzh5NWsu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAa3kwDQYJKoZIhvcNAQELBQADggEBAB01I5uWCKAh6YH2a1OU
FfJgkOM7pCd19GXSRjzYaXtMKZrHcwxSm3rWo7GJ2a9+tSydRIJ5PIrFhXUhkt+F
olNbLwca9tA7SEqLWH0Lrf/43jfqtsJvGL6YV7SG4WNoe0TJGqkefdG/Ut9gTCVs
lM0+FExzCryZjTqxagIdn7pdj5VIj00+tFYORf0b9zO69iySDHTNmdin0hsap6w0
1fOdP2eY0TVy//JgI7tyOMg1hVBwl4yrAEU+i2zYaioYDEtIOAM8lmHTW3d3/NTI
Rh5a6K5kmL0+vOLsT8O6FxCtiYFYQze8MhUI1ArSrTBR8Q/wA2lPxAEW9pRhJnip
xPQ=
-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:33 2024 by rpki-client on console-ams.rpki-client.org