Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Sd9pN_lPyDcmqOBPS2fJfRu5m3I.roa
File:                     Sd9pN_lPyDcmqOBPS2fJfRu5m3I.roa (raw, json)
Hash identifier:          a9TMwWqPtfopFAVbZS9dKWjHSFv558h8twuIy2/WOoA=
Subject key identifier:   49:DF:69:37:F9:4F:C8:37:26:A8:E0:4F:4B:67:C9:7D:1B:B9:9B:72
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0379
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Sd9pN_lPyDcmqOBPS2fJfRu5m3I.roa
Signing time:             Tue 30 Apr 2024 02:00:00 +0000
ROA not before:           Tue 30 Apr 2024 02:00:00 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:9200::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 22:26:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 889 (0x379)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 02:00:00 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=49DF6937F94FC83726A8E04F4B67C97D1BB99B72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:50:15:85:07:ce:f1:07:98:da:b5:ff:59:94:
                    c2:57:4e:2b:8f:2f:46:cc:92:ad:7e:a5:8a:d1:2a:
                    b4:11:f9:a4:27:e4:eb:50:96:66:82:3c:a5:78:14:
                    15:19:99:bc:78:86:f9:bb:5f:bf:e6:22:06:6f:4d:
                    41:cc:e3:fe:83:e0:77:d0:87:43:f6:16:c2:a8:17:
                    26:98:b0:93:42:2f:9b:05:c5:9b:9f:f8:36:d0:db:
                    07:bc:1e:a3:4e:fa:64:d3:0f:d9:45:f2:1d:ec:64:
                    ab:83:50:6f:92:1c:a6:6a:f5:7e:19:ec:67:92:96:
                    1b:bc:1e:a7:1e:ae:eb:4e:c4:fc:31:37:15:73:cb:
                    13:53:27:c4:a8:19:bd:5c:11:42:83:eb:5e:c5:87:
                    28:f3:02:36:a8:1a:3a:e0:0a:b1:fb:54:99:f6:5d:
                    d1:0f:9b:86:75:73:33:d3:d1:0d:c3:82:39:3d:1d:
                    68:cc:60:de:41:d8:e5:30:5b:4d:3a:d1:7b:2f:78:
                    77:8e:0b:eb:f9:ee:df:15:76:a0:6b:e0:d4:04:5c:
                    cc:bd:41:40:ca:fc:ea:c3:32:20:90:d8:a9:cf:5e:
                    fa:c1:4f:f0:5c:70:97:da:4d:9d:0c:b8:18:f3:76:
                    78:ec:52:67:66:8b:2b:63:62:bd:da:f9:84:e8:e1:
                    c7:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:DF:69:37:F9:4F:C8:37:26:A8:E0:4F:4B:67:C9:7D:1B:B9:9B:72
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Sd9pN_lPyDcmqOBPS2fJfRu5m3I.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:9200::/40

    Signature Algorithm: sha256WithRSAEncryption
         24:fe:5c:73:b1:ac:39:62:a9:16:cf:ab:18:97:aa:9c:ec:1f:
         62:ca:d1:aa:70:80:c5:1f:16:fd:93:bd:23:34:8e:69:9d:16:
         b3:33:8e:3e:da:46:1d:99:74:3d:3e:92:26:ce:7d:7e:0b:54:
         da:05:06:41:0c:44:5a:b9:82:1b:ba:cf:0c:46:73:2e:06:86:
         e1:c3:c6:02:13:c9:73:4d:7a:8a:d7:c9:c0:c5:ff:97:c8:c1:
         cc:c0:13:58:d7:34:35:2c:49:12:5b:c9:be:31:b7:6a:34:a8:
         f8:2a:94:fc:7e:75:17:f4:bf:2a:4f:be:4c:fe:81:75:d2:95:
         a2:31:d8:2e:fb:91:47:63:b8:22:e2:3b:20:c4:60:54:aa:9b:
         94:ca:36:24:5b:af:b6:af:12:e2:a8:34:3c:19:00:1b:63:b6:
         38:d3:53:16:a0:20:f9:95:59:0f:2a:da:5b:42:48:bb:e8:6a:
         bd:61:e9:ec:58:8a:da:2c:9d:9c:9c:8a:0f:99:e8:6f:d0:7a:
         00:f2:da:75:7b:ec:26:81:f2:c8:05:0a:f1:b4:19:ee:dd:5b:
         10:03:af:88:43:24:a3:be:72:b0:e6:b4:50:b2:1b:30:6d:61:
         8f:d8:fc:7a:f7:b8:01:a4:2e:1d:af:27:9b:37:28:d2:2d:40:
         91:f0:da:e6
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICA3kwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNDA0MzAw
MjAwMDBaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDQ5REY2OTM3Rjk0RkM4
MzcyNkE4RTA0RjRCNjdDOTdEMUJCOTlCNzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQChUBWFB87xB5jatf9ZlMJXTiuPL0bMkq1+pYrRKrQR+aQn5OtQ
lmaCPKV4FBUZmbx4hvm7X7/mIgZvTUHM4/6D4HfQh0P2FsKoFyaYsJNCL5sFxZuf
+DbQ2we8HqNO+mTTD9lF8h3sZKuDUG+SHKZq9X4Z7GeSlhu8HqcerutOxPwxNxVz
yxNTJ8SoGb1cEUKD617FhyjzAjaoGjrgCrH7VJn2XdEPm4Z1czPT0Q3Dgjk9HWjM
YN5B2OUwW0060XsveHeOC+v57t8VdqBr4NQEXMy9QUDK/OrDMiCQ2KnPXvrBT/Bc
cJfaTZ0MuBjzdnjsUmdmiytjYr3a+YTo4cfzAgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQUSd9pN/lPyDcmqOBPS2fJfRu5m3IwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS9TZDlwTl9sUHlEY21xT0JQUzJmSmZSdTVtM0ku
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAa5IwDQYJKoZIhvcNAQELBQADggEBACT+XHOxrDliqRbPqxiX
qpzsH2LK0apwgMUfFv2TvSM0jmmdFrMzjj7aRh2ZdD0+kibOfX4LVNoFBkEMRFq5
ghu6zwxGcy4GhuHDxgITyXNNeorXycDF/5fIwczAE1jXNDUsSRJbyb4xt2o0qPgq
lPx+dRf0vypPvkz+gXXSlaIx2C77kUdjuCLiOyDEYFSqm5TKNiRbr7avEuKoNDwZ
ABtjtjjTUxagIPmVWQ8q2ltCSLvoar1h6exYitosnZycig+Z6G/QegDy2nV77CaB
8sgFCvG0Ge7dWxADr4hDJKO+crDmtFCyGzBtYY/Y/Hr3uAGkLh2vJ5s3KNItQJHw
2uY=
-----END CERTIFICATE-----
Generated at Fri Jun 7 00:11:43 2024 by rpki-client on console-ams.rpki-client.org