Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/AkYqBf9QDNkGG-O6etUHssAL4AQ.roa
File:                     AkYqBf9QDNkGG-O6etUHssAL4AQ.roa (raw, json)
Hash identifier:          XP5hnuWjGzjjHD7WNBs31kcUS4QelapFl6/Bm3cyMTQ=
Subject key identifier:   02:46:2A:05:FF:50:0C:D9:06:1B:E3:BA:7A:D5:07:B2:C0:0B:E0:04
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0324
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/AkYqBf9QDNkGG-O6etUHssAL4AQ.roa
Signing time:             Tue 30 Apr 2024 01:50:56 +0000
ROA not before:           Tue 30 Apr 2024 01:50:56 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:ca00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 10:06:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 804 (0x324)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 01:50:56 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=02462A05FF500CD9061BE3BA7AD507B2C00BE004
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:c1:f4:1c:46:1f:5d:01:a2:8c:b8:0b:c1:48:
                    fb:88:84:72:6a:89:38:71:ad:30:36:ae:a7:ce:0b:
                    c1:17:c6:8e:6b:a0:ec:85:88:bc:fc:78:c8:73:70:
                    bc:67:97:06:05:16:76:4c:c2:72:7c:18:61:18:8b:
                    62:b5:01:51:35:b2:03:a4:46:18:ad:be:e8:25:f3:
                    3c:e0:88:fa:8a:51:30:56:d5:da:22:4a:2f:b9:5d:
                    ae:e1:b2:c8:0d:46:2e:c5:29:5a:99:f5:28:80:6c:
                    0e:98:57:a7:54:52:0f:d3:15:1e:e8:b3:61:13:58:
                    1b:29:48:60:4e:bf:13:da:1a:98:9f:0d:61:00:b2:
                    e0:62:3e:3a:af:77:c0:85:7f:ee:52:21:10:72:23:
                    04:34:77:6e:27:22:61:34:c6:8b:f1:d8:73:87:2c:
                    dd:93:ae:53:58:f1:2e:ef:6f:8c:71:66:d2:13:cd:
                    76:78:38:34:d9:21:2f:12:92:62:68:81:c4:4e:ea:
                    26:19:13:03:c0:19:f6:40:66:6a:d2:ec:4c:65:0e:
                    75:9a:e2:05:18:9a:09:05:11:a8:8b:57:86:e4:c7:
                    89:2b:d2:77:52:c0:8c:58:78:b1:dc:42:b0:7c:65:
                    4f:44:52:4a:f8:ab:f1:06:e8:69:c8:f6:02:fe:17:
                    dd:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:46:2A:05:FF:50:0C:D9:06:1B:E3:BA:7A:D5:07:B2:C0:0B:E0:04
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/AkYqBf9QDNkGG-O6etUHssAL4AQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:ca00::/40

    Signature Algorithm: sha256WithRSAEncryption
         ba:a4:41:70:77:3e:dd:d0:c2:56:47:85:19:8f:13:a0:85:6a:
         17:15:18:f9:a3:ac:37:e8:12:a2:44:ae:07:fa:7c:92:a1:bd:
         a9:1e:28:c1:de:c8:f7:66:9f:5a:73:95:c7:62:a2:c9:8d:5e:
         f7:ea:a8:81:ba:87:e6:f2:30:9c:8b:81:ef:ab:cb:4e:a3:99:
         3a:bf:27:17:2e:d8:2e:84:89:e1:92:c2:08:ea:fb:70:12:3b:
         24:5a:26:85:6b:52:8b:99:05:d7:67:d4:88:46:4b:d0:2c:81:
         ac:71:14:58:19:6d:38:da:a2:2c:53:92:c7:0a:6e:a2:55:d8:
         6a:18:af:ca:f9:da:8e:8d:2b:f8:b3:d6:09:8b:69:50:bf:53:
         f7:d4:f3:06:7c:29:ee:61:d8:33:6f:3f:76:c1:36:3a:84:1b:
         31:f1:65:cc:88:17:6d:88:08:af:b5:96:bc:d8:28:2c:27:3e:
         69:cb:b8:3c:b5:9a:28:a3:c0:9f:7e:41:87:7b:13:b6:b3:7a:
         3c:00:47:f5:2b:b7:e8:f1:fe:96:5d:09:b0:48:f6:87:22:c5:
         1b:a9:ca:59:b2:3a:5d:0c:eb:0f:a3:e6:f3:48:f5:d5:50:76:
         48:76:a4:d8:cd:29:34:9b:e9:16:b2:a2:06:8e:f7:15:ae:d3:
         3c:f3:81:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 11:28:28 2024 by rpki-client on console-ams.rpki-client.org