Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/K1YEub9gh-MEmGcGQ-MbQDi1mJY.roa
File:                     K1YEub9gh-MEmGcGQ-MbQDi1mJY.roa (raw, json)
Hash identifier:          SNK5VW9zZMF4Vi3WaZ0kLW1rD3zO25L8/njHGzueqI8=
Subject key identifier:   2B:56:04:B9:BF:60:87:E3:04:98:67:06:43:E3:1B:40:38:B5:98:96
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       037A
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/K1YEub9gh-MEmGcGQ-MbQDi1mJY.roa
Signing time:             Tue 30 Apr 2024 02:00:01 +0000
ROA not before:           Tue 30 Apr 2024 02:00:01 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:3300::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 22 Jun 2024 01:32:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 890 (0x37a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 02:00:01 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=2B5604B9BF6087E30498670643E31B4038B59896
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ef:ec:1b:54:7a:8f:ad:38:fe:31:d2:44:2f:
                    4e:42:c6:58:3d:7b:a9:90:6d:ec:e9:21:57:af:47:
                    fb:4f:94:3c:c0:f8:c1:62:fb:e7:bf:ca:31:6c:f9:
                    1d:2a:0f:53:66:40:ef:a1:fd:23:e2:d6:58:98:5b:
                    8a:3e:33:dc:44:d7:e4:25:6a:ba:0e:6c:24:07:90:
                    51:e6:1b:52:47:bc:09:0e:be:2b:b4:76:4a:2c:5d:
                    ad:45:b4:ee:73:8a:38:71:c9:08:c9:6a:eb:2c:51:
                    a5:64:76:49:02:27:89:61:af:e0:06:2c:a6:33:91:
                    a2:0f:fe:49:af:ed:69:6c:3e:14:d0:b0:1d:f7:61:
                    05:2d:80:9c:22:45:dd:e9:5d:3a:a3:1f:de:50:df:
                    c6:53:26:62:08:dc:a4:01:cb:7c:d9:1e:a6:c4:38:
                    37:60:d1:2b:eb:c6:be:48:5c:1d:6f:76:6b:b3:e0:
                    69:99:61:23:b5:b0:06:24:e9:fd:34:d5:9b:96:c5:
                    b9:a2:d6:0e:1a:c5:42:3a:10:55:3b:b4:7b:07:21:
                    aa:e5:0c:e7:66:78:f5:a0:ab:a4:d6:cf:26:1f:5b:
                    ea:27:69:e8:a3:24:17:65:34:e7:ba:16:8c:48:2c:
                    00:1d:48:c5:73:f5:53:7a:9b:e7:52:ee:2c:a6:9c:
                    4c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:56:04:B9:BF:60:87:E3:04:98:67:06:43:E3:1B:40:38:B5:98:96
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/K1YEub9gh-MEmGcGQ-MbQDi1mJY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:3300::/40

    Signature Algorithm: sha256WithRSAEncryption
         53:58:41:e0:5f:c7:df:0a:16:70:aa:2c:3f:3b:b1:9c:f0:2e:
         f1:a9:c1:cf:71:31:73:d8:ea:81:26:00:54:24:8c:cd:e1:fd:
         ef:06:54:91:18:a3:ad:04:d8:f2:09:30:97:74:49:6e:8e:6c:
         91:e4:06:a9:7b:98:a0:f8:e7:c5:40:2f:18:18:e5:7a:bf:48:
         2a:16:c1:05:30:39:53:b1:aa:8d:8d:33:b8:53:79:e5:12:02:
         43:f9:c0:ec:45:35:9a:9d:b2:37:28:f3:c7:08:e2:f8:ae:0a:
         f4:28:79:d7:70:37:cc:e8:f3:e9:28:06:1f:ee:ca:3d:26:c2:
         7b:89:7d:68:01:bc:fa:f6:6e:41:d5:57:1c:75:d2:63:52:e9:
         ad:19:75:d3:66:23:2d:53:04:c9:5d:c7:33:52:64:e9:4e:fe:
         0f:21:fd:58:02:ed:fe:b1:f6:c6:23:95:8a:83:12:98:62:5d:
         66:f4:90:58:a1:de:99:ea:59:09:ea:15:ec:3f:8e:0f:07:0b:
         85:f1:96:3a:90:d9:0d:76:12:f1:fa:e9:f6:f1:ef:f0:e9:47:
         d5:2c:0b:ee:c3:18:d4:3c:67:5e:47:f5:e2:45:bc:16:56:77:
         c6:60:84:2c:85:12:ca:18:fc:b2:db:1c:6e:4d:04:ba:e6:45:
         68:2a:15:26
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICA3owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNDA0MzAw
MjAwMDFaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDJCNTYwNEI5QkY2MDg3
RTMwNDk4NjcwNjQzRTMxQjQwMzhCNTk4OTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDK7+wbVHqPrTj+MdJEL05Cxlg9e6mQbezpIVevR/tPlDzA+MFi
++e/yjFs+R0qD1NmQO+h/SPi1liYW4o+M9xE1+QlaroObCQHkFHmG1JHvAkOviu0
dkosXa1FtO5zijhxyQjJaussUaVkdkkCJ4lhr+AGLKYzkaIP/kmv7WlsPhTQsB33
YQUtgJwiRd3pXTqjH95Q38ZTJmII3KQBy3zZHqbEODdg0Svrxr5IXB1vdmuz4GmZ
YSO1sAYk6f001ZuWxbmi1g4axUI6EFU7tHsHIarlDOdmePWgq6TWzyYfW+onaeij
JBdlNOe6FoxILAAdSMVz9VN6m+dS7iymnEx/AgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQUK1YEub9gh+MEmGcGQ+MbQDi1mJYwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS9LMVlFdWI5Z2gtTUVtR2NHUS1NYlFEaTFtSlku
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAazMwDQYJKoZIhvcNAQELBQADggEBAFNYQeBfx98KFnCqLD87
sZzwLvGpwc9xMXPY6oEmAFQkjM3h/e8GVJEYo60E2PIJMJd0SW6ObJHkBql7mKD4
58VALxgY5Xq/SCoWwQUwOVOxqo2NM7hTeeUSAkP5wOxFNZqdsjco88cI4viuCvQo
eddwN8zo8+koBh/uyj0mwnuJfWgBvPr2bkHVVxx10mNS6a0ZddNmIy1TBMldxzNS
ZOlO/g8h/VgC7f6x9sYjlYqDEphiXWb0kFih3pnqWQnqFew/jg8HC4XxljqQ2Q12
EvH66fbx7/DpR9UsC+7DGNQ8Z15H9eJFvBZWd8ZghCyFEsoY/LLbHG5NBLrmRWgq
FSY=
-----END CERTIFICATE-----
Generated at Sat Jun 15 02:41:50 2024 by rpki-client on console-ams.rpki-client.org