Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Pdc-a1bItWMdqffQIUZg0WfMKs0.roa
File:                     Pdc-a1bItWMdqffQIUZg0WfMKs0.roa (raw, json)
Hash identifier:          CcDxBsa1Qg9mBcKEYg+vqEuARPvPoKRA4OjZLxqDnfo=
Subject key identifier:   3D:D7:3E:6B:56:C8:B5:63:1D:A9:F7:D0:21:46:60:D1:67:CC:2A:CD
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       02A3
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Pdc-a1bItWMdqffQIUZg0WfMKs0.roa
Signing time:             Tue 30 Apr 2024 01:35:17 +0000
ROA not before:           Tue 30 Apr 2024 01:35:17 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:7b00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 20:52:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 675 (0x2a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 01:35:17 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=3DD73E6B56C8B5631DA9F7D0214660D167CC2ACD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3c:40:22:67:86:05:a0:df:a6:ac:90:ed:24:
                    12:82:a8:09:51:91:7e:36:dd:78:07:cb:09:d8:8c:
                    07:71:6b:ad:d8:4e:0a:f5:47:f3:69:df:6a:4f:19:
                    ae:66:3c:ee:27:a8:2f:52:cb:86:ee:40:d4:1c:c8:
                    83:25:d0:cf:f0:13:7a:eb:0a:5c:df:56:58:bf:3c:
                    c2:ac:e2:0d:9a:bd:cf:77:c4:d7:fb:81:cc:22:29:
                    ae:1b:89:c0:fe:25:c4:d8:60:cf:a8:85:8e:8b:e3:
                    f1:f0:36:4e:18:f1:0f:41:69:3d:3e:d1:e4:80:e6:
                    a5:aa:07:24:52:1d:c8:37:aa:5a:de:51:4e:5a:97:
                    ff:d6:5d:44:8f:e2:77:f0:1f:66:5a:a7:29:d2:c8:
                    9d:6d:7a:24:50:f1:3f:d3:95:64:b3:36:1a:03:8c:
                    f9:54:7e:be:62:f8:e6:69:8b:95:1d:b6:6a:00:62:
                    06:7c:dc:88:81:a2:68:c8:54:a9:24:0b:75:1c:23:
                    f1:b3:3d:cb:72:bc:aa:b9:34:27:a9:7d:a4:c1:35:
                    9a:d1:c3:de:9d:4c:f3:71:15:82:42:7a:18:95:4a:
                    e8:b2:13:03:6a:8a:11:c4:3a:d6:99:51:f1:c5:ea:
                    90:79:77:0d:f7:cf:b3:49:19:c2:f5:3b:64:9f:82:
                    eb:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:D7:3E:6B:56:C8:B5:63:1D:A9:F7:D0:21:46:60:D1:67:CC:2A:CD
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Pdc-a1bItWMdqffQIUZg0WfMKs0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:7b00::/40

    Signature Algorithm: sha256WithRSAEncryption
         63:43:05:e8:be:ad:4a:29:08:3a:1d:67:63:50:30:df:be:33:
         59:f4:06:54:e2:70:8b:de:10:5e:b2:fb:83:b0:ce:e4:fc:c6:
         69:9c:60:11:be:ea:a0:40:c9:de:de:16:e3:22:9f:90:87:48:
         82:23:4f:54:c1:fb:15:7e:44:a8:71:2e:dc:dc:b6:e7:f5:39:
         10:0c:55:96:0e:cd:77:0a:77:c2:27:ab:30:a5:71:ec:d5:48:
         db:9a:a1:ce:6e:34:25:15:a4:f5:66:0a:2f:4f:e3:ce:65:35:
         2b:2b:26:af:00:82:ee:7c:cd:fa:2c:a2:85:99:a7:27:d1:09:
         92:81:52:73:ba:9b:0c:4b:06:d3:6e:fd:b9:f9:e8:e0:2a:b4:
         95:60:80:7f:58:3d:f7:8b:9c:10:8e:1a:f8:df:f4:a7:f0:a4:
         18:27:e1:aa:22:66:52:83:24:5b:fd:32:41:af:a6:be:a7:90:
         a6:fb:30:b7:80:d4:5f:14:69:5b:d8:26:b7:31:f6:d5:fc:34:
         bb:0e:66:43:5c:b3:e9:7f:80:a0:f3:02:81:9c:36:39:8f:3a:
         96:18:9f:3f:08:00:9b:84:47:74:84:81:84:0e:d1:aa:31:80:
         fe:c6:68:c5:28:4c:e0:72:5d:59:18:52:9f:e8:1c:21:c2:ba:
         c3:00:72:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 21:52:33 2024 by rpki-client on console-fra.rpki-client.org