Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/J8yza43Qv6hiUGbr_935rV9lZGk.roa
File:                     J8yza43Qv6hiUGbr_935rV9lZGk.roa (raw, json)
Hash identifier:          yN0QR564gxMwwHfl/0aOYLMHb5BAWs2oItknqWfv/8Y=
Subject key identifier:   27:CC:B3:6B:8D:D0:BF:A8:62:50:66:EB:FF:DD:F9:AD:5F:65:64:69
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       02EE
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/J8yza43Qv6hiUGbr_935rV9lZGk.roa
Signing time:             Tue 30 Apr 2024 01:48:01 +0000
ROA not before:           Tue 30 Apr 2024 01:48:01 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:1700::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 20:52:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 750 (0x2ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 01:48:01 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=27CCB36B8DD0BFA8625066EBFFDDF9AD5F656469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:08:30:7b:9d:79:6f:f1:1d:c1:55:e3:11:8e:
                    ee:b5:f0:3c:e3:03:d7:bf:98:1b:f8:10:13:1c:d1:
                    89:1c:df:d8:d3:cb:76:0f:db:e7:ea:a0:57:0e:3e:
                    02:fb:f9:ee:f9:ae:bc:27:d8:61:bd:3e:02:78:0d:
                    ce:74:c0:09:90:e2:fc:1d:ef:a1:7e:42:22:5c:ea:
                    c2:82:34:d6:6f:17:dd:eb:4b:98:4d:c0:69:b1:f9:
                    16:31:68:eb:fd:73:29:10:11:1c:f3:38:f5:51:24:
                    25:36:24:52:81:30:b6:f1:45:d6:a9:43:54:67:1c:
                    d0:73:46:8d:f5:c1:2c:15:33:7a:58:10:7c:3e:01:
                    fd:2f:2d:cc:71:a1:bf:b7:0d:c2:ed:c2:6a:3a:4c:
                    22:00:a8:71:61:9b:68:1a:6e:9b:b6:89:a3:c9:a8:
                    bb:6c:f7:80:1b:10:3d:60:32:c9:7b:50:3d:46:93:
                    08:77:4c:0f:45:a6:7d:66:b5:5d:55:d8:70:a3:11:
                    8a:bc:87:85:ed:94:18:36:5b:f8:63:00:ba:f6:2d:
                    db:21:26:13:12:72:3a:98:7f:62:dc:2d:8d:c6:cf:
                    45:4d:e2:91:1a:24:d2:a1:5f:af:ff:b1:e9:aa:ce:
                    68:cb:50:f8:9d:42:0d:25:7c:f4:ee:04:82:35:4a:
                    16:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:CC:B3:6B:8D:D0:BF:A8:62:50:66:EB:FF:DD:F9:AD:5F:65:64:69
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/J8yza43Qv6hiUGbr_935rV9lZGk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:1700::/40

    Signature Algorithm: sha256WithRSAEncryption
         c2:8d:17:b9:b1:b0:32:46:c7:d0:ab:ac:b8:24:04:41:2b:c5:
         8a:00:68:5d:c9:6b:5c:98:b1:f7:bc:04:d2:b1:35:99:28:e4:
         3d:70:f4:d1:fa:73:bf:20:5f:9a:44:33:66:23:16:63:20:a4:
         c2:5f:73:1a:b5:db:9a:f2:69:9e:39:a0:fa:58:93:09:33:d3:
         bc:ee:a3:11:90:e3:62:34:29:2c:fd:05:f0:b6:3f:f2:ab:56:
         84:00:2e:0d:e9:80:4d:6e:9b:d4:02:ca:3a:e3:70:49:fc:f2:
         db:67:11:15:e4:b5:b7:ef:be:75:9d:02:1b:6b:4b:a3:f5:11:
         5c:09:58:06:fc:5e:d1:13:a0:ac:d4:0a:c1:e3:c3:1d:5a:97:
         6e:15:1a:ac:0d:9d:ba:4b:d4:04:d2:d7:3d:c8:a7:b1:22:51:
         df:e4:29:75:01:b9:91:58:35:41:c4:28:0d:49:31:3c:50:82:
         57:18:a5:f0:5b:48:48:84:7c:be:6a:0f:86:9e:dd:25:01:9b:
         c3:b3:50:6a:31:d4:57:a4:29:53:71:ea:e0:f3:f1:32:4d:f4:
         8c:c1:61:c6:7a:73:79:ab:e8:9a:9f:a4:e7:a1:52:d3:c6:83:
         c2:61:42:08:fb:f3:8b:fe:7e:d8:fe:f7:3c:ad:b8:fe:d3:07:
         fa:80:3c:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 21:52:33 2024 by rpki-client on console-fra.rpki-client.org