Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/COOQKJzPvyGMk_FiTM4eqQUsipE.roa
File:                     COOQKJzPvyGMk_FiTM4eqQUsipE.roa (raw, json)
Hash identifier:          3ekUnMpgkVR7Be/DIlImJMpPWMU1LztO9AvO1KATkmo=
Subject key identifier:   08:E3:90:28:9C:CF:BF:21:8C:93:F1:62:4C:CE:1E:A9:05:2C:8A:91
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0210
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/COOQKJzPvyGMk_FiTM4eqQUsipE.roa
Signing time:             Tue 30 May 2023 17:40:27 +0000
ROA not before:           Tue 30 May 2023 17:40:27 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:8f00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 13:40:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 528 (0x210)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:40:27 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=08E390289CCFBF218C93F1624CCE1EA9052C8A91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f8:58:40:37:bf:17:52:1d:c0:d8:c3:50:e4:
                    27:e2:7c:be:cd:df:ad:52:3f:06:aa:3e:48:7b:33:
                    6e:c5:bd:a2:3e:ad:42:cf:30:b1:03:f9:61:87:25:
                    e7:da:51:10:39:69:0f:b9:27:13:8c:f8:8e:fd:d6:
                    00:6c:9d:62:60:45:40:0e:77:bc:4d:58:c5:cb:bf:
                    c6:ce:5a:9a:8e:73:58:ec:dc:b1:39:f8:93:f9:dc:
                    da:e0:bb:1b:d6:bf:7c:0c:c7:6e:f7:49:f6:3f:2f:
                    0d:26:07:7b:d2:e1:a0:a8:4a:eb:7b:e5:c8:00:88:
                    e9:98:a0:f6:25:91:21:d7:fa:53:94:ad:7a:9e:ad:
                    dc:9e:df:04:ba:1c:49:76:22:e1:da:55:8f:3a:88:
                    6c:5a:ed:d4:ab:80:e8:0c:50:e5:39:50:60:f1:6a:
                    16:3a:5c:34:35:86:9c:0a:40:3c:10:00:ca:a8:ae:
                    6b:fb:30:8c:aa:85:3e:31:00:1f:7a:bd:24:f5:50:
                    91:6d:06:38:ff:e4:4b:c5:0b:11:ae:85:d1:e0:af:
                    e7:7f:d2:bc:46:f9:b3:27:57:0f:ca:c6:51:48:42:
                    36:03:9d:17:ca:8e:18:6c:cd:39:7d:19:22:51:82:
                    c8:64:32:2e:83:55:37:f0:49:92:3c:fc:92:b7:cb:
                    ea:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:E3:90:28:9C:CF:BF:21:8C:93:F1:62:4C:CE:1E:A9:05:2C:8A:91
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/COOQKJzPvyGMk_FiTM4eqQUsipE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:8f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         73:a4:34:25:c7:36:46:34:1f:0d:75:a1:b6:37:1a:b6:bb:5c:
         d3:42:67:47:a1:1e:05:c8:37:24:1a:5a:39:50:75:9a:ba:72:
         5e:84:fb:35:07:ca:2b:ec:3a:8b:6d:18:7a:71:5e:c0:53:18:
         c6:bb:16:26:9b:58:58:65:a1:30:83:77:0d:6d:fc:9d:a1:f9:
         23:16:df:12:4f:7f:d3:14:8f:b0:7f:29:35:51:ca:14:d5:f1:
         8f:c1:a8:88:d9:47:aa:47:c0:78:d3:84:4a:1f:e4:14:15:11:
         71:b7:77:bf:a2:fb:fa:48:80:6d:cf:7e:70:f1:a4:5f:92:da:
         b6:f9:93:ce:f7:eb:ef:f2:ba:2d:ed:ea:8b:7d:9b:59:2a:3c:
         12:42:28:1e:56:7b:8c:c3:00:83:29:ca:6e:f5:1f:d0:5e:34:
         ed:37:19:bd:ab:6d:53:de:84:02:97:fb:91:1e:29:ec:f4:80:
         9f:b7:18:b5:dc:32:03:37:7a:e1:a0:66:ec:25:67:42:35:85:
         b4:c6:9c:06:fe:c5:49:dc:31:63:1f:86:62:ff:37:de:29:da:
         65:92:27:06:4c:88:ed:be:ff:f3:09:90:d7:8e:01:5f:43:19:
         5a:0d:54:e8:d8:77:5d:1e:46:70:3e:4f:4e:aa:a3:b2:cd:fc:
         c5:72:c3:cb
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICAhAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yMzA1MzAx
NzQwMjdaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDA4RTM5MDI4OUNDRkJG
MjE4QzkzRjE2MjRDQ0UxRUE5MDUyQzhBOTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCp+FhAN78XUh3A2MNQ5CfifL7N361SPwaqPkh7M27FvaI+rULP
MLED+WGHJefaURA5aQ+5JxOM+I791gBsnWJgRUAOd7xNWMXLv8bOWpqOc1js3LE5
+JP53NrguxvWv3wMx273SfY/Lw0mB3vS4aCoSut75cgAiOmYoPYlkSHX+lOUrXqe
rdye3wS6HEl2IuHaVY86iGxa7dSrgOgMUOU5UGDxahY6XDQ1hpwKQDwQAMqormv7
MIyqhT4xAB96vST1UJFtBjj/5EvFCxGuhdHgr+d/0rxG+bMnVw/KxlFIQjYDnRfK
jhhszTl9GSJRgshkMi6DVTfwSZI8/JK3y+o5AgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQUCOOQKJzPvyGMk/FiTM4eqQUsipEwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS9DT09RS0p6UHZ5R01rX0ZpVE00ZXFRVXNpcEUu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAa48wDQYJKoZIhvcNAQELBQADggEBAHOkNCXHNkY0Hw11obY3
Gra7XNNCZ0ehHgXINyQaWjlQdZq6cl6E+zUHyivsOottGHpxXsBTGMa7FiabWFhl
oTCDdw1t/J2h+SMW3xJPf9MUj7B/KTVRyhTV8Y/BqIjZR6pHwHjThEof5BQVEXG3
d7+i+/pIgG3PfnDxpF+S2rb5k8736+/yui3t6ot9m1kqPBJCKB5We4zDAIMpym71
H9BeNO03Gb2rbVPehAKX+5EeKez0gJ+3GLXcMgM3euGgZuwlZ0I1hbTGnAb+xUnc
MWMfhmL/N94p2mWSJwZMiO2+//MJkNeOAV9DGVoNVOjYd10eRnA+T06qo7LN/MVy
w8s=
-----END CERTIFICATE-----
Generated at Sat Apr 27 10:15:52 2024 by rpki-client on console-ams.rpki-client.org