Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/HuQm4SGp_45-w4lhvg0rhZoWZa8.roa
File:                     HuQm4SGp_45-w4lhvg0rhZoWZa8.roa (raw, json)
Hash identifier:          CqJEL6HcgzB+ZPj2Mf5kwhummp4tf1q6zP5SH4YesGw=
Subject key identifier:   1E:E4:26:E1:21:A9:FF:8E:7E:C3:89:61:BE:0D:2B:85:9A:16:65:AF
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       027E
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/HuQm4SGp_45-w4lhvg0rhZoWZa8.roa
Signing time:             Tue 30 Apr 2024 01:32:17 +0000
ROA not before:           Tue 30 Apr 2024 01:32:17 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:1200::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 638 (0x27e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 01:32:17 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=1EE426E121A9FF8E7EC38961BE0D2B859A1665AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:69:6f:7e:c7:98:d5:68:00:74:43:c4:5c:87:
                    a6:c9:12:88:84:fd:24:c5:9c:e4:40:cd:97:2a:51:
                    24:9d:aa:60:85:6d:7a:09:f4:91:a5:a2:69:bc:cc:
                    3c:ff:6e:cc:e4:5d:c4:92:e6:2c:bb:f5:dd:ad:4b:
                    f0:a4:d3:ef:c6:87:a2:c8:22:69:9e:9b:59:a2:c2:
                    fa:d5:e9:14:8f:59:3a:2b:f6:d2:f1:ab:47:c4:9e:
                    7f:a9:7c:5a:c6:b0:1d:5c:56:0c:b6:88:66:24:f6:
                    0c:7f:23:f7:cd:22:9a:ac:73:00:0d:a1:0a:67:d2:
                    e6:91:7d:31:49:2f:d2:a4:b0:83:14:51:76:75:a1:
                    41:7c:84:66:c4:b9:ed:f9:e7:56:48:a2:01:74:f1:
                    a8:63:14:5c:ac:4b:09:33:4d:fc:4b:9c:7d:e0:59:
                    dd:77:0e:87:34:9f:09:6a:60:c7:ae:6d:e4:94:a0:
                    d7:7c:11:66:ea:5c:d6:1e:68:24:65:32:05:80:bc:
                    92:77:50:38:f7:06:1f:8d:48:4c:3e:cc:f9:2b:f7:
                    be:a9:4b:d6:8d:7a:42:0c:37:18:6a:97:80:25:f5:
                    c7:a0:06:d6:e0:ce:37:66:a1:97:d5:fa:8a:5d:2b:
                    ab:06:30:85:ae:89:3a:c8:a7:86:e8:82:ee:c1:1f:
                    5f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:E4:26:E1:21:A9:FF:8E:7E:C3:89:61:BE:0D:2B:85:9A:16:65:AF
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/HuQm4SGp_45-w4lhvg0rhZoWZa8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:1200::/40

    Signature Algorithm: sha256WithRSAEncryption
         42:82:99:1f:fd:06:47:30:db:17:c1:c8:a2:a2:03:a7:5a:7d:
         df:f0:e4:b4:4c:40:c7:ea:66:36:d0:2d:c1:0a:c8:7b:8d:af:
         d9:fa:81:a4:f4:a3:02:50:df:08:cf:24:b7:cf:c0:ce:4e:c5:
         d4:2f:cc:0f:fa:08:5a:cc:16:e3:84:25:a6:90:95:4f:a3:12:
         15:4a:be:b8:a2:2d:e8:56:06:69:94:ab:9e:ec:28:3b:4b:69:
         91:9f:e4:1f:36:bb:67:4a:11:b0:ca:b0:d2:57:fd:c2:97:78:
         7e:55:52:c7:1b:d9:3a:ae:34:c7:2a:6c:39:ce:c8:52:cb:62:
         ef:1b:a5:76:8e:2d:ce:e3:b1:34:b5:17:22:9e:b0:0d:5f:e4:
         a9:0f:e2:ad:73:5a:d7:3b:aa:ac:87:07:93:88:96:98:a0:72:
         35:ad:f6:08:22:e0:0a:49:d4:70:c2:3c:92:0c:d9:52:5e:aa:
         ec:06:59:fa:32:da:5e:7f:7e:2d:61:32:30:39:24:6f:23:08:
         a9:83:45:7f:4b:bf:f5:78:cc:e5:40:4c:cb:81:20:53:f8:b3:
         d2:08:76:62:89:ff:64:28:43:52:65:36:ec:66:56:c6:ec:e4:
         2c:ef:19:c8:8b:d4:92:c1:b9:29:35:74:19:c4:8a:54:68:01:
         47:96:13:a6
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICAn4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNDA0MzAw
MTMyMTdaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDFFRTQyNkUxMjFBOUZG
OEU3RUMzODk2MUJFMEQyQjg1OUExNjY1QUYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDLaW9+x5jVaAB0Q8Rch6bJEoiE/STFnORAzZcqUSSdqmCFbXoJ
9JGlomm8zDz/bszkXcSS5iy79d2tS/Ck0+/Gh6LIImmem1miwvrV6RSPWTor9tLx
q0fEnn+pfFrGsB1cVgy2iGYk9gx/I/fNIpqscwANoQpn0uaRfTFJL9KksIMUUXZ1
oUF8hGbEue3551ZIogF08ahjFFysSwkzTfxLnH3gWd13Doc0nwlqYMeubeSUoNd8
EWbqXNYeaCRlMgWAvJJ3UDj3Bh+NSEw+zPkr976pS9aNekIMNxhql4Al9cegBtbg
zjdmoZfV+opdK6sGMIWuiTrIp4bogu7BH1+BAgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQUHuQm4SGp/45+w4lhvg0rhZoWZa8wHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS9IdVFtNFNHcF80NS13NGxodmcwcmhab1daYTgu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAaxIwDQYJKoZIhvcNAQELBQADggEBAEKCmR/9Bkcw2xfByKKi
A6dafd/w5LRMQMfqZjbQLcEKyHuNr9n6gaT0owJQ3wjPJLfPwM5OxdQvzA/6CFrM
FuOEJaaQlU+jEhVKvriiLehWBmmUq57sKDtLaZGf5B82u2dKEbDKsNJX/cKXeH5V
Uscb2TquNMcqbDnOyFLLYu8bpXaOLc7jsTS1FyKesA1f5KkP4q1zWtc7qqyHB5OI
lpigcjWt9ggi4ApJ1HDCPJIM2VJequwGWfoy2l5/fi1hMjA5JG8jCKmDRX9Lv/V4
zOVATMuBIFP4s9IIdmKJ/2QoQ1JlNuxmVsbs5CzvGciL1JLBuSk1dBnEilRoAUeW
E6Y=
-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:20 2024 by rpki-client on console-ams.rpki-client.org