Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/DuN7Pva9bYbUxPmuePsIZV5hJ6k.roa
File:                     DuN7Pva9bYbUxPmuePsIZV5hJ6k.roa (raw, json)
Hash identifier:          ydxoOMTkQtSMJUvFeHL7FdTds5rnr2JYRvBpYoq8Hzc=
Subject key identifier:   0E:E3:7B:3E:F6:BD:6D:86:D4:C4:F9:AE:78:FB:08:65:5E:61:27:A9
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       02D0
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/DuN7Pva9bYbUxPmuePsIZV5hJ6k.roa
Signing time:             Tue 30 Apr 2024 01:44:51 +0000
ROA not before:           Tue 30 Apr 2024 01:44:51 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:f400::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 720 (0x2d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 01:44:51 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=0EE37B3EF6BD6D86D4C4F9AE78FB08655E6127A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ef:07:80:a4:e3:c7:4c:53:78:55:31:f3:1e:
                    1a:8f:43:bb:2d:e7:2f:f3:7d:fa:72:f7:70:aa:5a:
                    07:dc:d5:d6:9d:c8:7c:cf:fd:84:13:4b:4c:7f:dd:
                    88:d4:7e:0b:ab:c3:1c:2f:a7:4c:5a:04:99:23:41:
                    6a:25:52:b5:97:c6:4d:26:48:21:af:4c:ad:87:e1:
                    50:b8:99:78:cb:dd:62:0e:15:4f:9c:c4:82:38:02:
                    36:d1:cc:3c:0d:6c:79:6f:4c:d7:9e:e1:cc:8e:b6:
                    fe:d6:67:38:0e:32:2e:64:d8:43:69:4a:63:ed:b6:
                    ba:95:ba:e7:46:d9:70:b1:92:1b:3f:9f:64:23:44:
                    07:b1:4f:d4:0d:22:9f:da:7a:ff:94:83:58:b5:90:
                    43:4c:48:e8:c0:4b:72:3d:57:98:e5:08:b2:8d:b3:
                    84:6e:d3:6b:69:7d:53:a8:b6:89:50:56:8b:6a:7b:
                    24:7f:aa:fd:6c:c0:31:34:98:e3:a0:d7:c4:da:38:
                    2d:96:14:5a:fa:9c:0f:14:29:76:f5:f1:bc:16:45:
                    e3:28:4d:34:de:01:b9:da:6a:d4:06:b2:a1:65:f6:
                    0a:57:aa:75:bc:35:fe:a6:75:65:6d:2b:25:4f:98:
                    fd:81:22:90:43:2e:e9:3b:58:84:9c:30:81:be:f7:
                    7f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:E3:7B:3E:F6:BD:6D:86:D4:C4:F9:AE:78:FB:08:65:5E:61:27:A9
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/DuN7Pva9bYbUxPmuePsIZV5hJ6k.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:f400::/40

    Signature Algorithm: sha256WithRSAEncryption
         8b:44:6b:50:b7:b1:48:f9:1c:13:0c:12:54:d8:7d:89:5d:ae:
         b5:67:f3:08:13:5e:ad:93:ec:c6:c3:56:55:70:4b:6a:e1:32:
         4e:e9:2f:c6:32:f3:f9:ac:91:af:41:d5:98:d9:fd:58:b9:85:
         1b:ef:2a:4e:20:d0:a4:67:d7:80:68:25:b4:c0:26:08:3c:16:
         1d:4c:0c:6f:bc:c6:7a:cb:94:01:a1:f9:a7:4c:f7:ee:c6:b2:
         9f:ea:6c:5c:a0:75:6a:09:04:0a:e1:70:0a:ca:61:21:77:28:
         e9:df:45:90:eb:a5:df:db:ec:c3:cd:46:37:03:09:05:26:4c:
         d2:cc:4c:6e:27:56:c7:25:c3:21:29:99:76:01:0f:01:65:fe:
         52:a1:50:40:c2:bc:f7:16:c3:3c:6e:cf:07:a0:34:a0:64:78:
         dd:2d:36:b8:67:2b:af:0b:ef:b6:9b:24:67:aa:7a:f8:fa:8a:
         59:99:90:d6:6f:18:5d:ee:30:60:04:2a:1e:87:e6:37:6d:77:
         09:7d:9c:4f:c7:90:7f:45:e2:0f:5c:dc:cf:fe:cd:10:9d:0b:
         9a:9a:f5:63:17:83:ed:7a:ae:b0:fb:34:ed:04:b4:76:b0:31:
         91:ec:36:ab:6a:b2:68:67:8e:e2:0b:1c:1f:46:dd:4d:5f:a2:
         32:ec:aa:fb
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICAtAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNDA0MzAw
MTQ0NTFaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDBFRTM3QjNFRjZCRDZE
ODZENEM0RjlBRTc4RkIwODY1NUU2MTI3QTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCw7weApOPHTFN4VTHzHhqPQ7st5y/zffpy93CqWgfc1dadyHzP
/YQTS0x/3YjUfgurwxwvp0xaBJkjQWolUrWXxk0mSCGvTK2H4VC4mXjL3WIOFU+c
xII4AjbRzDwNbHlvTNee4cyOtv7WZzgOMi5k2ENpSmPttrqVuudG2XCxkhs/n2Qj
RAexT9QNIp/aev+Ug1i1kENMSOjAS3I9V5jlCLKNs4Ru02tpfVOotolQVotqeyR/
qv1swDE0mOOg18TaOC2WFFr6nA8UKXb18bwWReMoTTTeAbnaatQGsqFl9gpXqnW8
Nf6mdWVtKyVPmP2BIpBDLuk7WIScMIG+938FAgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQUDuN7Pva9bYbUxPmuePsIZV5hJ6kwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS9EdU43UHZhOWJZYlV4UG11ZVBzSVpWNWhKNmsu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAa/QwDQYJKoZIhvcNAQELBQADggEBAItEa1C3sUj5HBMMElTY
fYldrrVn8wgTXq2T7MbDVlVwS2rhMk7pL8Yy8/mska9B1ZjZ/Vi5hRvvKk4g0KRn
14BoJbTAJgg8Fh1MDG+8xnrLlAGh+adM9+7Gsp/qbFygdWoJBArhcArKYSF3KOnf
RZDrpd/b7MPNRjcDCQUmTNLMTG4nVsclwyEpmXYBDwFl/lKhUEDCvPcWwzxuzweg
NKBkeN0tNrhnK68L77abJGeqevj6ilmZkNZvGF3uMGAEKh6H5jdtdwl9nE/HkH9F
4g9c3M/+zRCdC5qa9WMXg+16rrD7NO0EtHawMZHsNqtqsmhnjuILHB9G3U1fojLs
qvs=
-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:20 2024 by rpki-client on console-ams.rpki-client.org