Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/K_NDOQI6h2oL2fyJrcRkb6E5DZU.roa
File:                     K_NDOQI6h2oL2fyJrcRkb6E5DZU.roa (raw, json)
Hash identifier:          rDlHHgqKyNO+wHOMCs/6LS121rBSOUO91L5X+fDyGmk=
Subject key identifier:   2B:F3:43:39:02:3A:87:6A:0B:D9:FC:89:AD:C4:64:6F:A1:39:0D:95
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0285
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/K_NDOQI6h2oL2fyJrcRkb6E5DZU.roa
Signing time:             Tue 30 Apr 2024 01:32:19 +0000
ROA not before:           Tue 30 Apr 2024 01:32:19 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:8600::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 20:52:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 645 (0x285)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 01:32:19 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=2BF34339023A876A0BD9FC89ADC4646FA1390D95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e8:a4:50:83:1b:05:c1:49:30:30:29:cf:16:
                    88:de:22:67:ba:fa:39:eb:d5:9b:66:ec:9f:b7:7f:
                    5b:f7:b4:53:08:ad:ae:b9:f5:bd:14:79:97:de:d7:
                    19:69:de:38:9c:93:9f:33:e8:ba:c4:c6:f7:e3:dc:
                    5c:22:63:31:b0:78:81:4e:3f:e1:52:fd:d9:5b:ac:
                    26:20:3b:d7:45:d0:ed:24:ef:80:18:41:10:48:f3:
                    9b:9c:34:d3:6b:6e:2a:9e:ff:34:1d:52:56:77:45:
                    90:b2:bc:19:22:42:9e:61:9d:ca:da:3d:77:f0:34:
                    1d:09:47:be:88:d8:89:77:bb:ed:fb:a8:bb:ab:70:
                    95:53:19:70:d6:e2:ae:d8:3a:12:e3:11:20:f7:8b:
                    e4:46:41:af:6d:f5:86:0d:7b:ce:3d:55:92:9e:b0:
                    13:01:91:69:37:4c:f3:1a:bc:e3:56:f9:b6:ca:da:
                    ac:ab:a9:ee:6d:c1:75:16:35:c9:e2:1b:cf:ef:33:
                    6f:d2:7c:28:89:ae:32:9c:fb:99:cf:73:9a:cb:e0:
                    2a:79:bf:6c:ae:de:9e:b4:3e:5a:61:1f:1f:b5:30:
                    a2:9c:78:55:05:0c:0a:a8:98:5f:de:f0:61:54:83:
                    4d:94:e8:ce:a1:37:a8:5b:33:35:8d:7a:2c:37:1e:
                    3d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:F3:43:39:02:3A:87:6A:0B:D9:FC:89:AD:C4:64:6F:A1:39:0D:95
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/K_NDOQI6h2oL2fyJrcRkb6E5DZU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:8600::/40

    Signature Algorithm: sha256WithRSAEncryption
         18:ef:0f:17:92:5b:c2:c6:08:80:b9:d3:6f:70:e9:68:aa:74:
         7a:0d:a6:d0:03:59:99:26:a1:3d:fc:3d:3c:d9:d2:68:60:34:
         e5:7e:5a:f4:ba:c8:10:5d:94:9d:83:6c:78:e7:50:93:8a:e5:
         4b:6b:c4:10:fc:ee:95:41:87:ca:b4:0a:57:93:3f:5d:e7:0b:
         dd:1d:c7:42:db:18:89:52:d2:5b:de:6b:b0:d1:29:18:5d:d8:
         79:7c:38:c3:5b:fc:d2:33:a3:56:2f:4b:3f:21:2a:7d:26:0b:
         39:39:4a:90:d1:d8:24:cd:80:a6:dd:da:75:ec:cd:e0:3c:23:
         83:76:83:9f:d1:fa:6c:9c:df:9e:79:4f:d9:e2:98:97:02:95:
         69:9a:7a:63:5c:c8:8d:ff:b6:eb:5c:23:a3:11:d2:d0:6b:bb:
         e4:91:52:d8:f1:31:e2:0a:6b:d7:c6:74:67:1d:18:90:64:1a:
         57:d4:f8:42:1f:68:4f:6f:6c:de:94:cd:c1:e6:08:8a:52:b3:
         a5:18:08:30:01:f6:8e:51:ee:07:c9:f6:5b:7a:27:96:34:fb:
         fc:0f:01:a6:43:bb:b1:30:20:94:47:9b:36:d2:e7:8e:4f:be:
         e5:dc:c7:e5:db:43:c6:05:f7:82:89:73:30:2d:be:04:78:b3:
         a7:b0:94:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 21:52:33 2024 by rpki-client on console-fra.rpki-client.org