Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/KBR3OU-z5YztlHSpjtSbzfWXv_w.roa
File:                     KBR3OU-z5YztlHSpjtSbzfWXv_w.roa (raw, json)
Hash identifier:          UD7AR1jiW/HF7ySoFKc/CBeGZjd3JHAad02AIIXcJ68=
Subject key identifier:   28:14:77:39:4F:B3:E5:8C:ED:94:74:A9:8E:D4:9B:CD:F5:97:BF:FC
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0359
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/KBR3OU-z5YztlHSpjtSbzfWXv_w.roa
Signing time:             Tue 30 Apr 2024 01:56:53 +0000
ROA not before:           Tue 30 Apr 2024 01:56:53 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:d600::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 857 (0x359)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 01:56:53 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=281477394FB3E58CED9474A98ED49BCDF597BFFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:33:ad:7a:a8:ef:7d:1f:d6:fd:e4:ef:bd:d2:
                    95:ba:00:d8:64:08:4d:05:41:87:ab:55:21:8c:c4:
                    0c:91:f9:ff:2b:f6:71:20:83:b7:72:df:8c:3b:37:
                    86:ca:9d:09:83:f3:58:37:2e:07:70:af:64:4e:dd:
                    4b:53:e3:d0:f7:34:de:18:71:5c:93:b3:1a:68:40:
                    23:72:cf:fd:42:7e:5d:22:36:51:e2:ce:ca:95:e6:
                    d7:7b:41:14:36:22:50:ec:d9:f1:f7:23:6e:bd:f6:
                    5b:89:ed:2b:8b:b9:ce:96:10:6a:9d:9e:9d:97:c5:
                    f3:99:b2:83:c7:65:70:35:23:8b:f1:26:4c:63:ca:
                    3a:3d:00:a4:09:e4:ee:92:51:45:eb:99:cc:5b:36:
                    96:89:02:52:e6:6c:52:c5:5e:78:5e:dc:16:09:31:
                    09:ba:17:d0:9b:9f:7f:2a:f4:00:47:25:99:a8:bd:
                    34:79:c9:fa:0b:3b:cd:96:92:50:b4:2b:4e:12:29:
                    f6:ed:b1:d6:fa:8e:91:b3:c5:c6:aa:54:0b:ae:b7:
                    52:32:5e:7d:a4:b0:c4:30:78:f7:a5:6e:70:27:4a:
                    25:38:6d:8b:6f:41:da:5e:0e:23:9d:ad:a9:32:68:
                    1e:9c:d3:64:05:ef:60:0f:fa:22:42:9e:53:a8:80:
                    4f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:14:77:39:4F:B3:E5:8C:ED:94:74:A9:8E:D4:9B:CD:F5:97:BF:FC
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/KBR3OU-z5YztlHSpjtSbzfWXv_w.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:d600::/40

    Signature Algorithm: sha256WithRSAEncryption
         22:06:fd:03:c6:a2:5d:d1:8e:6c:df:20:73:c6:75:d9:48:71:
         c5:9a:c7:5d:b1:cc:80:ba:cb:ab:ad:11:ea:f5:4a:62:0d:ff:
         fd:93:89:a5:e2:14:4d:b7:5f:6b:2e:23:a9:8f:ba:62:03:fc:
         0a:fa:f9:ec:70:e9:f8:dd:73:28:e8:80:dc:34:2d:ae:a7:4e:
         d2:36:57:b9:6c:fa:c6:10:5b:07:85:43:e5:09:2c:05:95:aa:
         37:9b:b5:32:9e:7e:06:f3:6b:a4:03:b1:5a:ac:e6:4e:86:f3:
         d9:d1:b7:13:45:ee:fc:f7:29:6e:8f:f1:b7:ac:d4:bc:41:b1:
         86:0c:42:c9:7d:c8:7c:ee:38:7e:fb:6a:86:38:48:36:a2:4d:
         fb:f7:33:81:29:dd:ff:f4:3f:e0:ca:40:5f:fe:df:4c:d1:7f:
         94:10:70:ff:85:76:05:32:99:b1:00:ee:a6:1a:26:54:52:f3:
         b6:4d:9f:5b:af:f2:29:b0:34:a9:c2:44:c8:a0:d5:75:74:e3:
         65:23:f0:5a:a9:b9:c5:79:b8:17:59:a9:ae:02:1d:ce:43:59:
         97:73:3a:87:6c:24:14:63:e9:23:79:3c:f4:27:67:ef:7b:e7:
         60:09:3c:07:e6:86:b2:94:db:a9:c0:cb:58:87:64:5c:f0:79:
         2b:af:79:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:33 2024 by rpki-client on console-ams.rpki-client.org