Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/G6xKdyptQTOGdhzEzD7sj1hS7Hs.roa
File:                     G6xKdyptQTOGdhzEzD7sj1hS7Hs.roa (raw, json)
Hash identifier:          KqQ/EdhEvm4KLDQCpzZsBELpsOp/6Evfynvw1qQBA2w=
Subject key identifier:   1B:AC:4A:77:2A:6D:41:33:86:76:1C:C4:CC:3E:EC:8F:58:52:EC:7B
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       029E
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/G6xKdyptQTOGdhzEzD7sj1hS7Hs.roa
Signing time:             Tue 30 Apr 2024 01:35:15 +0000
ROA not before:           Tue 30 Apr 2024 01:35:15 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:8800::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 670 (0x29e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 01:35:15 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=1BAC4A772A6D413386761CC4CC3EEC8F5852EC7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:de:1c:08:83:fc:2e:a0:64:3e:d0:04:d5:50:
                    a1:79:23:fd:98:94:0d:8e:7a:85:09:60:44:09:30:
                    e5:1b:eb:f3:bf:34:0f:d2:ef:c6:42:54:1c:97:12:
                    c3:2c:5d:44:4f:f6:f6:cb:93:17:28:8d:7e:af:0b:
                    8e:d2:0d:16:b4:69:5b:1a:b0:71:d3:9f:4b:72:30:
                    a7:67:e1:18:03:db:3d:8b:28:bc:dc:12:dc:be:e9:
                    46:ca:b9:96:4f:cd:41:d4:8f:50:a2:45:ad:e0:b9:
                    05:75:f5:d8:55:8b:f2:97:4e:e2:38:40:0a:3c:29:
                    69:e1:77:36:21:42:ec:dd:ec:9a:82:27:0c:50:d1:
                    a1:17:71:e1:cd:f7:a3:ee:b6:71:3a:e3:cf:f8:d0:
                    18:a0:15:e0:8a:42:b3:b2:e2:3a:3d:f7:8f:85:35:
                    07:88:de:d0:3b:49:8c:36:ab:b2:fd:c4:c4:1e:b3:
                    7f:60:e7:59:8b:dc:8d:bd:85:e8:e8:ef:11:c7:d4:
                    48:9d:6b:31:d8:de:de:d9:62:5d:42:05:85:a0:ca:
                    ca:65:5a:5a:83:41:9e:1d:5b:b3:1e:b2:95:45:bc:
                    89:09:e2:5d:a6:0e:6f:d2:4d:ac:cc:9f:8c:7e:78:
                    5c:47:50:4d:f1:7f:b0:03:6a:92:a2:4b:f9:54:a7:
                    bc:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:AC:4A:77:2A:6D:41:33:86:76:1C:C4:CC:3E:EC:8F:58:52:EC:7B
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/G6xKdyptQTOGdhzEzD7sj1hS7Hs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:8800::/40

    Signature Algorithm: sha256WithRSAEncryption
         3c:eb:38:22:4a:3e:53:c1:50:c7:18:6d:6e:e2:a1:e0:3f:8d:
         56:34:79:49:f8:a9:09:97:37:23:9e:63:7c:ac:58:1c:68:a5:
         f7:59:4d:48:a4:6f:ca:f0:9c:62:71:92:c2:77:86:cc:dd:f4:
         f1:6c:2e:30:d8:88:11:4a:91:54:54:9e:a3:71:e8:dd:58:42:
         23:c4:23:bf:c2:86:dc:42:42:13:a2:80:46:1b:53:89:b3:d6:
         b1:02:fb:60:d0:9b:bf:cb:bf:2a:87:30:39:c6:a1:a3:96:9f:
         2b:9a:97:4a:ca:89:44:84:14:3f:01:61:78:fc:1b:98:41:5e:
         a1:4e:4b:63:f5:0b:ff:c2:d7:34:cc:53:4f:d9:70:d9:f3:cf:
         6d:bd:9b:59:77:97:ad:7f:2e:f3:ee:2a:d6:25:36:62:45:87:
         25:fe:6c:27:f3:cb:9e:f6:59:bf:b4:63:32:47:b7:60:2a:02:
         b0:97:e6:0d:ba:51:8e:bc:4d:4e:41:a8:82:6a:8e:87:eb:d4:
         84:5e:1c:a4:39:b0:87:e3:3b:9e:a9:b5:fd:fc:78:ad:e0:8b:
         7d:dd:ba:fb:b7:c2:f8:ac:f9:20:28:f2:bc:66:70:18:bb:eb:
         99:a8:6a:93:a3:1e:f4:bf:bc:21:20:dc:e3:e7:60:3d:cf:bc:
         30:f7:40:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:30 2024 by rpki-client on console-ams.rpki-client.org