Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/SIMVnm-db6OB4Hdl0XH4qd2s1jI.roa
File:                     SIMVnm-db6OB4Hdl0XH4qd2s1jI.roa (raw, json)
Hash identifier:          9aTo4E+IeRaSkDOUPnIR71XCHPIIhjsDbafW0rZ7crk=
Subject key identifier:   48:83:15:9E:6F:9D:6F:A3:81:E0:77:65:D1:71:F8:A9:DD:AC:D6:32
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0377
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/SIMVnm-db6OB4Hdl0XH4qd2s1jI.roa
Signing time:             Tue 30 Apr 2024 01:59:59 +0000
ROA not before:           Tue 30 Apr 2024 01:59:59 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:e800::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 887 (0x377)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 01:59:59 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=4883159E6F9D6FA381E07765D171F8A9DDACD632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:48:e5:9f:5b:d8:8b:46:61:7a:d6:c6:34:07:
                    c6:b1:6c:ef:30:84:e3:3c:f2:09:6f:e7:e5:0f:f1:
                    ce:8f:7d:d8:f3:c5:d6:29:27:d7:ea:16:64:d0:c5:
                    42:3d:8e:c7:46:91:27:37:a2:b1:aa:c9:1e:2d:f1:
                    df:8b:e1:84:29:77:44:98:31:a0:bc:2d:1c:ff:ae:
                    c9:46:17:4d:57:cf:09:8e:20:e1:2c:c8:c3:d3:9a:
                    d5:34:63:3e:68:c2:97:cf:2a:5e:cc:9f:f1:8d:f8:
                    80:f7:0a:14:5a:8d:c7:15:3d:e0:2a:05:d5:6b:54:
                    8a:88:27:ce:04:94:84:20:13:23:6e:75:af:3a:91:
                    ce:8c:9b:de:5f:71:c2:12:2e:f4:89:8a:99:b9:c2:
                    37:20:72:00:4b:0b:e3:4a:41:82:a8:41:2c:dd:5d:
                    5d:07:f7:77:8d:77:7c:f3:de:91:66:36:fb:42:6b:
                    59:2d:14:05:75:3c:73:df:b3:df:45:52:33:d7:d1:
                    00:8f:c8:4e:52:62:6c:bc:6d:78:7a:b6:57:df:99:
                    8e:eb:4d:7a:24:dc:2e:e3:49:f0:ac:a0:83:c6:c0:
                    30:dc:d1:65:62:c7:76:cc:e3:25:45:bb:74:64:80:
                    bc:d3:e7:12:91:81:b4:4b:d8:e6:70:e0:12:18:69:
                    3b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:83:15:9E:6F:9D:6F:A3:81:E0:77:65:D1:71:F8:A9:DD:AC:D6:32
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/SIMVnm-db6OB4Hdl0XH4qd2s1jI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:e800::/40

    Signature Algorithm: sha256WithRSAEncryption
         a4:50:7b:3c:29:59:77:e3:89:18:1c:9b:2c:cf:d3:87:32:8b:
         6c:a8:75:d8:5d:5c:c8:0e:5c:62:41:9c:71:9c:9c:f4:bd:6b:
         08:c4:34:bb:48:69:30:b9:1e:2f:f7:a1:c7:b7:32:26:d8:60:
         6c:c8:c6:27:17:15:83:06:85:e8:a9:88:48:5e:de:1b:df:30:
         02:d7:ee:6c:5a:e9:aa:f2:f9:e6:df:37:4a:46:1c:70:3d:13:
         69:7a:dd:31:99:b7:36:8e:44:31:f7:af:0f:18:91:ff:a1:97:
         3c:9f:8b:7f:71:2a:06:51:43:ca:49:f5:f7:d7:6e:9d:4b:bf:
         a7:b6:52:2f:28:6c:13:1d:5e:d2:a2:e4:28:cf:32:52:6b:94:
         b5:3b:c2:7e:5a:05:12:0e:a6:1f:9a:15:9d:5a:94:fa:ec:e4:
         e5:e3:e9:8a:7f:3e:7d:93:75:1d:59:79:f7:79:12:45:a6:ae:
         71:cd:44:7d:8a:d7:e0:38:96:f0:53:83:74:96:d4:a7:e5:e4:
         d8:54:fc:85:9e:bc:ce:69:01:11:d0:c7:c4:92:27:46:48:41:
         10:97:30:ef:d1:84:49:49:32:60:8e:40:8b:83:13:38:d8:5d:
         b8:bd:c0:c5:91:70:81:3a:33:84:24:4a:cd:08:13:38:60:0c:
         f3:90:b7:1b
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICA3cwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNDA0MzAw
MTU5NTlaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDQ4ODMxNTlFNkY5RDZG
QTM4MUUwNzc2NUQxNzFGOEE5RERBQ0Q2MzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC/SOWfW9iLRmF61sY0B8axbO8whOM88glv5+UP8c6PfdjzxdYp
J9fqFmTQxUI9jsdGkSc3orGqyR4t8d+L4YQpd0SYMaC8LRz/rslGF01XzwmOIOEs
yMPTmtU0Yz5owpfPKl7Mn/GN+ID3ChRajccVPeAqBdVrVIqIJ84ElIQgEyNuda86
kc6Mm95fccISLvSJipm5wjcgcgBLC+NKQYKoQSzdXV0H93eNd3zz3pFmNvtCa1kt
FAV1PHPfs99FUjPX0QCPyE5SYmy8bXh6tlffmY7rTXok3C7jSfCsoIPGwDDc0WVi
x3bM4yVFu3RkgLzT5xKRgbRL2OZw4BIYaTu/AgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQUSIMVnm+db6OB4Hdl0XH4qd2s1jIwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS9TSU1Wbm0tZGI2T0I0SGRsMFhINHFkMnMxakku
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAa+gwDQYJKoZIhvcNAQELBQADggEBAKRQezwpWXfjiRgcmyzP
04cyi2yoddhdXMgOXGJBnHGcnPS9awjENLtIaTC5Hi/3oce3MibYYGzIxicXFYMG
heipiEhe3hvfMALX7mxa6ary+ebfN0pGHHA9E2l63TGZtzaORDH3rw8Ykf+hlzyf
i39xKgZRQ8pJ9ffXbp1Lv6e2Ui8obBMdXtKi5CjPMlJrlLU7wn5aBRIOph+aFZ1a
lPrs5OXj6Yp/Pn2TdR1Zefd5EkWmrnHNRH2K1+A4lvBTg3SW1Kfl5NhU/IWevM5p
ARHQx8SSJ0ZIQRCXMO/RhElJMmCOQIuDEzjYXbi9wMWRcIE6M4QkSs0IEzhgDPOQ
txs=
-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:20 2024 by rpki-client on console-ams.rpki-client.org