Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/GdLBPhwxyuT5OFdDHLmTnVZZFzM.roa
File:                     GdLBPhwxyuT5OFdDHLmTnVZZFzM.roa (raw, json)
Hash identifier:          BaPIYtmeFi+8N5kxFv9S0D7KYG0t6qe5KUiIzlIWhas=
Subject key identifier:   19:D2:C1:3E:1C:31:CA:E4:F9:38:57:43:1C:B9:93:9D:56:59:17:33
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       033F
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/GdLBPhwxyuT5OFdDHLmTnVZZFzM.roa
Signing time:             Tue 30 Apr 2024 01:54:02 +0000
ROA not before:           Tue 30 Apr 2024 01:54:02 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:7300::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 831 (0x33f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 01:54:02 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=19D2C13E1C31CAE4F93857431CB9939D56591733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:21:e0:44:44:24:75:a5:d5:2d:1a:48:83:6c:
                    5d:e4:e7:6a:91:4a:43:d9:d8:da:28:01:72:46:a9:
                    ba:df:5f:f7:df:fa:8a:22:85:a4:29:0d:e5:e5:df:
                    d6:8a:c2:da:02:ff:bf:47:a5:e2:e7:86:a4:3d:38:
                    48:16:72:22:ff:66:47:ba:30:9d:46:47:05:80:30:
                    cd:58:ad:29:b3:ec:a5:fd:ef:c9:77:db:3b:2c:57:
                    e6:66:d8:1f:2e:df:41:a6:48:b1:77:54:58:e3:c0:
                    ef:54:f3:25:21:3b:9f:fa:d3:6b:b8:d5:11:ba:f8:
                    5a:88:81:ec:7e:31:83:96:21:8c:0d:70:a2:32:7f:
                    47:1b:44:e9:ec:8f:19:42:0a:47:24:0e:6b:f5:7b:
                    fb:10:ea:5d:93:05:cc:20:f1:68:09:8a:9a:9c:0d:
                    d2:15:c4:ec:66:42:6e:43:19:15:e0:bf:c6:4b:93:
                    aa:e5:90:c4:af:02:a9:de:9e:6b:03:a2:e9:52:5b:
                    b1:0f:b1:c6:db:c5:df:02:35:d2:b8:52:3d:dc:ba:
                    ef:b9:23:a8:93:86:aa:2f:1e:cd:49:77:ac:8f:6c:
                    f1:bd:a3:93:dc:86:eb:e2:48:7d:07:e6:bb:51:10:
                    c9:59:3c:68:09:98:3c:19:16:b5:0c:70:bc:f8:36:
                    96:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:D2:C1:3E:1C:31:CA:E4:F9:38:57:43:1C:B9:93:9D:56:59:17:33
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/GdLBPhwxyuT5OFdDHLmTnVZZFzM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:7300::/40

    Signature Algorithm: sha256WithRSAEncryption
         7d:d7:71:1f:41:c1:be:e2:87:ef:32:33:b6:a8:7d:90:99:83:
         66:54:42:01:51:be:68:9d:b2:ac:20:77:bf:2e:72:f6:b0:46:
         04:29:40:d5:3b:a6:90:0e:90:34:0b:61:5b:1b:b7:1b:33:a9:
         21:7f:1e:d3:7b:85:3b:ea:e3:94:f0:d2:31:06:5a:a1:a1:8e:
         2f:2e:f6:de:90:ff:b6:40:5b:e7:87:9d:3d:77:fd:ce:26:04:
         cc:44:c2:6b:f4:2d:bd:c8:75:7d:c6:13:61:c2:41:33:4c:ca:
         17:bf:ca:a7:e9:5b:6d:95:c8:ae:12:2e:9c:49:1d:f0:45:ba:
         71:92:05:04:a6:cb:35:f5:65:6c:cc:71:31:ab:43:d1:e3:be:
         30:5e:73:8a:5c:c3:fc:e8:f4:c6:72:f6:85:c9:d9:9e:c9:f2:
         5a:9a:83:38:e8:b9:4c:26:05:16:6e:b1:9f:1b:66:05:53:9e:
         02:1c:97:31:8c:4a:81:de:1b:b3:ec:6d:72:66:12:16:84:f7:
         03:ee:4b:66:82:ed:94:8e:33:7a:e0:df:e0:2f:49:71:32:3d:
         a1:b5:dd:5d:2a:35:b6:4f:c5:97:98:ab:cc:be:0d:2a:b4:9e:
         e3:78:01:bb:27:4c:fd:66:8b:15:3a:cb:40:80:a3:9c:5e:83:
         96:a4:36:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:20 2024 by rpki-client on console-ams.rpki-client.org