Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/P_iTROWnyLRFcVpGhyitbgTsQXA.roa
File:                     P_iTROWnyLRFcVpGhyitbgTsQXA.roa (raw, json)
Hash identifier:          iX9OpjM5bG06MkdCgz4ytqouzpci6AI96WlVdaWWA4A=
Subject key identifier:   3F:F8:93:44:E5:A7:C8:B4:45:71:5A:46:87:28:AD:6E:04:EC:41:70
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0319
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/P_iTROWnyLRFcVpGhyitbgTsQXA.roa
Signing time:             Tue 30 Apr 2024 01:50:51 +0000
ROA not before:           Tue 30 Apr 2024 01:50:51 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:7800::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 20:52:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 793 (0x319)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 01:50:51 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=3FF89344E5A7C8B445715A468728AD6E04EC4170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ef:3b:0f:76:e4:e9:b7:19:80:3a:4c:f9:44:
                    83:28:65:39:f5:13:66:90:5b:20:21:da:87:ec:21:
                    39:6c:c5:1d:c2:e1:ee:72:b7:f6:8f:86:9c:8f:71:
                    6e:26:2f:87:f2:c1:52:af:11:a1:79:73:a3:d5:2e:
                    c1:1f:65:b5:8a:4f:08:ee:cc:10:73:6c:7d:db:8c:
                    b2:20:7a:e2:4e:36:8a:54:ff:63:54:47:fe:90:a5:
                    53:53:6a:14:78:da:fe:03:2c:e9:ec:04:a4:b4:63:
                    3d:60:5d:e3:bb:e5:c4:0d:67:1f:ae:c7:7d:b1:6d:
                    d4:bb:13:ac:ae:1a:28:67:21:e0:11:5f:1e:5a:d1:
                    6d:22:59:00:5d:0b:d6:40:e2:83:92:f6:6b:61:2a:
                    eb:a0:98:f9:8c:d6:80:7d:a1:4c:a4:80:1c:75:2e:
                    a6:09:c6:64:d8:ab:01:56:a9:2d:c8:d0:8a:26:b5:
                    c2:ee:b7:be:a5:1a:b7:ae:33:9e:11:7e:52:19:14:
                    2a:3a:4e:15:19:f3:60:92:65:c4:d8:ee:37:54:a4:
                    95:c2:58:fc:ed:04:43:49:03:f7:14:9f:68:70:0d:
                    20:4a:9b:dc:90:77:89:cf:5b:61:59:d1:12:87:16:
                    75:a6:ea:1a:33:d8:aa:e8:ad:e7:9d:0b:37:0e:57:
                    00:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:F8:93:44:E5:A7:C8:B4:45:71:5A:46:87:28:AD:6E:04:EC:41:70
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/P_iTROWnyLRFcVpGhyitbgTsQXA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:7800::/40

    Signature Algorithm: sha256WithRSAEncryption
         79:19:d2:58:9c:9d:88:76:4a:cd:30:17:d3:93:92:e1:a3:13:
         8c:d6:20:06:8b:2f:02:d2:06:f8:9e:24:d0:0c:8b:61:9f:bb:
         13:ea:fc:84:ad:4a:dc:91:f3:69:03:98:3c:80:de:2e:18:b1:
         b9:69:99:d4:d9:b7:f3:53:17:db:90:77:47:da:67:10:2e:f2:
         a9:43:4e:1c:93:19:26:5f:34:63:64:81:33:d4:56:3e:0c:46:
         ba:52:98:c7:c1:4c:89:79:4a:ac:64:51:20:6d:9f:97:9c:09:
         6a:33:94:0d:d6:44:dd:0b:be:21:ee:d7:ad:9f:20:2d:08:d7:
         88:bf:dc:f6:1f:bd:42:27:c5:c5:89:8c:dd:29:26:c6:57:a7:
         f8:03:6f:02:e4:b3:8d:cd:57:d7:97:a0:d0:e3:4e:42:79:3d:
         85:51:f7:19:2c:4e:d6:bb:71:7a:5b:8c:b1:89:82:20:58:03:
         95:90:68:54:d5:ae:6a:8b:c4:88:5b:c3:e9:7b:ca:6f:db:a5:
         10:3c:e2:a4:6a:53:bb:c1:5b:72:56:17:38:20:ed:3c:ed:8e:
         d4:c1:b7:e5:dd:10:12:e4:c7:b7:bc:48:bd:ab:9d:86:a3:2a:
         c7:5d:da:f9:ae:d0:76:a6:2d:fb:1a:b1:d0:5e:23:55:4c:11:
         70:f7:fd:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 21:52:33 2024 by rpki-client on console-fra.rpki-client.org