Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/QhXG4aeUscFZ0SiZoe_gpdKVIok.roa
File:                     QhXG4aeUscFZ0SiZoe_gpdKVIok.roa (raw, json)
Hash identifier:          +TcopLBEw92rqGSOldTlSahxWL7an5GQd2/pBQyJmo0=
Subject key identifier:   42:15:C6:E1:A7:94:B1:C1:59:D1:28:99:A1:EF:E0:A5:D2:95:22:89
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       03A4
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/QhXG4aeUscFZ0SiZoe_gpdKVIok.roa
Signing time:             Mon 17 Jun 2024 09:00:39 +0000
ROA not before:           Mon 17 Jun 2024 09:00:39 +0000
ROA not after:            Sun 15 Jun 2025 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:61:8c00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 932 (0x3a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Jun 17 09:00:39 2024 GMT
            Not After : Jun 15 01:30:03 2025 GMT
        Subject: CN=4215C6E1A794B1C159D12899A1EFE0A5D2952289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:17:38:10:e9:62:cb:2f:1e:b9:97:d9:7b:9c:
                    d1:3e:81:59:e1:60:65:ae:d5:70:d3:41:4f:38:b1:
                    d2:5c:fb:c8:95:94:2b:3f:6e:3e:91:64:f4:8b:36:
                    23:31:c7:ba:1e:8f:25:e5:db:ed:1a:c1:51:35:13:
                    06:88:ad:09:27:f4:39:20:f8:8a:f5:ba:26:cc:62:
                    ba:d8:7a:3c:f6:c7:af:cc:bf:d5:a8:67:dd:5d:8a:
                    ce:92:8a:5c:2c:e0:e8:b8:d9:88:3d:4a:67:87:4e:
                    27:16:90:91:20:63:4d:b1:d7:69:6a:23:d7:71:9f:
                    eb:84:55:0d:d7:c9:de:1c:51:47:b3:d1:c0:b0:3a:
                    37:45:ac:66:c5:78:3b:24:8c:a9:8f:6a:e0:98:39:
                    af:77:38:8c:2e:76:7b:cc:db:8f:1f:00:35:44:d0:
                    d6:f7:08:8c:b3:eb:52:dd:a1:14:44:2b:f9:55:b9:
                    5b:b0:10:93:5f:99:9e:5d:d1:d8:82:65:61:60:f0:
                    57:7b:51:31:f6:53:ac:55:7d:9b:9d:6a:6e:4d:49:
                    97:ea:b4:01:5d:51:dc:6e:fa:60:04:43:7d:d6:a8:
                    75:5c:6a:22:2f:1c:96:86:95:de:9a:7b:6e:c3:37:
                    71:f3:c3:0e:78:8f:29:08:53:af:dd:2f:20:a8:dd:
                    16:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:15:C6:E1:A7:94:B1:C1:59:D1:28:99:A1:EF:E0:A5:D2:95:22:89
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/QhXG4aeUscFZ0SiZoe_gpdKVIok.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:61:8c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         c0:7c:72:ae:5b:ee:12:4a:e3:39:e8:e6:35:97:87:25:e6:f4:
         9b:c8:a9:52:86:22:8f:d7:50:d6:d4:6e:1f:5f:6c:c3:23:76:
         e0:3a:bb:e1:fa:83:92:59:22:35:fc:f2:b7:58:c0:25:27:44:
         89:fa:b3:68:8a:d4:7e:de:16:d2:21:71:90:9e:00:69:0b:90:
         d9:8b:5f:03:3e:4f:28:50:88:60:87:7e:74:7b:27:3b:da:f4:
         92:97:4b:a7:fd:7f:93:3a:48:14:e6:2a:d8:d7:a7:9b:f2:ad:
         16:9d:9c:3c:ba:e4:e3:11:24:6f:a5:1a:4b:96:f3:5c:b5:01:
         5c:44:c7:1b:12:10:a6:4b:28:60:96:81:77:b3:48:85:05:15:
         36:49:d2:54:fb:b0:0e:27:58:59:03:00:07:f1:a5:28:9d:f4:
         39:3e:e1:ff:5c:fe:c8:26:54:05:59:bf:7a:ea:2a:3c:e5:92:
         f0:18:a2:c0:9f:c6:6b:c6:18:42:12:88:50:8b:2e:80:de:b0:
         ab:96:00:7b:4b:44:ef:f0:50:ab:94:41:32:95:5f:2d:63:91:
         39:06:75:d7:12:26:13:e7:30:4b:c9:a6:e8:1c:5a:65:6a:64:
         c6:9b:7c:52:60:56:f6:66:aa:2c:a5:c4:c0:cb:30:ec:e3:84:
         a3:18:1c:06
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICA6QwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNDA2MTcw
OTAwMzlaFw0yNTA2MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDQyMTVDNkUxQTc5NEIx
QzE1OUQxMjg5OUExRUZFMEE1RDI5NTIyODkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCtFzgQ6WLLLx65l9l7nNE+gVnhYGWu1XDTQU84sdJc+8iVlCs/
bj6RZPSLNiMxx7oejyXl2+0awVE1EwaIrQkn9Dkg+Ir1uibMYrrYejz2x6/Mv9Wo
Z91dis6Silws4Oi42Yg9SmeHTicWkJEgY02x12lqI9dxn+uEVQ3Xyd4cUUez0cCw
OjdFrGbFeDskjKmPauCYOa93OIwudnvM248fADVE0Nb3CIyz61LdoRREK/lVuVuw
EJNfmZ5d0diCZWFg8Fd7UTH2U6xVfZudam5NSZfqtAFdUdxu+mAEQ33WqHVcaiIv
HJaGld6ae27DN3Hzww54jykIU6/dLyCo3RZhAgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQUQhXG4aeUscFZ0SiZoe/gpdKVIokwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS9RaFhHNGFlVXNjRlowU2lab2VfZ3BkS1ZJb2su
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAYYwwDQYJKoZIhvcNAQELBQADggEBAMB8cq5b7hJK4zno5jWX
hyXm9JvIqVKGIo/XUNbUbh9fbMMjduA6u+H6g5JZIjX88rdYwCUnRIn6s2iK1H7e
FtIhcZCeAGkLkNmLXwM+TyhQiGCHfnR7Jzva9JKXS6f9f5M6SBTmKtjXp5vyrRad
nDy65OMRJG+lGkuW81y1AVxExxsSEKZLKGCWgXezSIUFFTZJ0lT7sA4nWFkDAAfx
pSid9Dk+4f9c/sgmVAVZv3rqKjzlkvAYosCfxmvGGEISiFCLLoDesKuWAHtLRO/w
UKuUQTKVXy1jkTkGddcSJhPnMEvJpugcWmVqZMabfFJgVvZmqiylxMDLMOzjhKMY
HAY=
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:13 2024 by rpki-client on console-fra.rpki-client.org