Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/UbTGpjz3m6onbyel0lZiZh5sLTQ.roa
File:                     UbTGpjz3m6onbyel0lZiZh5sLTQ.roa (raw, json)
Hash identifier:          pQm1eVYw2PUqJOzR679oYq4qX4HqJYGIvPWLGciYaxA=
Subject key identifier:   51:B4:C6:A6:3C:F7:9B:AA:27:6F:27:A5:D2:56:62:66:1E:6C:2D:34
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       036C
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/UbTGpjz3m6onbyel0lZiZh5sLTQ.roa
Signing time:             Tue 30 Apr 2024 01:57:00 +0000
ROA not before:           Tue 30 Apr 2024 01:57:00 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:60:f018::/46 maxlen: 46

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 22:26:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 876 (0x36c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 01:57:00 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=51B4C6A63CF79BAA276F27A5D25662661E6C2D34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:58:1a:c4:7a:1a:21:92:f6:89:ee:8a:c2:37:
                    ee:c3:8d:5b:0f:46:e8:50:89:ca:9e:55:3f:60:99:
                    b0:0f:08:8e:11:f4:93:d9:ff:0d:96:9b:df:d5:15:
                    52:75:76:02:33:b4:0b:e4:cf:ce:d0:0f:76:02:24:
                    3f:a5:47:29:8e:50:02:7f:d4:16:c1:17:99:dc:14:
                    26:48:67:ee:ba:6c:c2:e6:26:78:e0:48:c2:e8:1e:
                    06:f3:7b:44:14:9d:eb:f4:64:5c:93:95:e0:09:ee:
                    2c:29:c2:ea:cc:f1:d7:5a:ab:8b:6e:f8:73:dd:18:
                    11:ba:b7:cc:e9:84:c0:68:07:28:99:e2:99:57:ae:
                    cb:49:e1:48:0b:1c:c2:1f:ce:38:f4:25:65:07:57:
                    39:23:92:59:15:a9:86:78:f1:d8:86:44:6f:fe:2b:
                    3c:6a:ed:d6:4a:30:3c:8b:c6:5a:cf:1b:46:59:e0:
                    b9:44:3a:e0:42:7f:9f:a8:b8:36:d0:dc:2f:0e:2b:
                    6d:69:80:6f:9a:23:8f:b2:fb:87:8e:b8:aa:a5:60:
                    b6:7f:59:10:88:bf:2e:c6:18:82:0b:30:bc:85:89:
                    b8:a9:ec:87:1e:d3:c6:1a:89:d6:72:3f:47:7c:81:
                    b1:da:7c:ec:2a:2a:c1:2e:5d:7c:d4:4e:9e:7c:88:
                    d3:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:B4:C6:A6:3C:F7:9B:AA:27:6F:27:A5:D2:56:62:66:1E:6C:2D:34
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/UbTGpjz3m6onbyel0lZiZh5sLTQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:60:f018::/46

    Signature Algorithm: sha256WithRSAEncryption
         42:76:59:89:fe:c5:c8:93:d5:43:06:56:7e:d7:30:a0:c8:12:
         ad:d2:7e:91:bd:29:62:0f:cb:4b:b6:68:81:07:21:b2:93:3d:
         0c:ed:c8:c3:77:1a:8c:6c:dd:71:9b:85:c6:4e:3a:2d:82:a4:
         fe:9f:4c:0e:b1:d3:da:4e:60:64:21:2a:9a:f5:f3:54:e3:a7:
         3d:ef:19:61:5f:75:31:4a:e6:eb:9d:d2:2a:86:9c:6c:17:42:
         5d:89:7f:61:4d:c1:58:b8:64:93:04:ef:cd:01:f2:b2:38:f8:
         4b:70:59:4d:96:51:8e:4d:49:5b:ca:2d:4a:cc:64:0e:c4:69:
         b0:40:10:d8:cf:a8:7b:68:a3:af:a2:16:d9:b1:ee:11:18:e2:
         85:60:fe:42:ce:05:31:76:d5:e7:88:64:8b:a4:83:97:f9:13:
         ad:41:11:18:af:b5:71:45:06:87:d2:ed:8e:93:ab:a5:01:e3:
         d2:f6:6f:fc:b5:f4:bb:cf:00:df:59:8f:02:11:dc:1f:12:9e:
         df:c0:dd:dd:1c:f7:7a:2e:49:ea:c6:68:e2:7c:92:59:67:be:
         90:31:47:0f:56:3d:dd:f0:ef:f1:51:f2:26:36:a5:ed:5e:6d:
         9b:21:8f:af:4a:e8:10:71:d2:d8:ee:f1:c3:56:3f:34:39:5f:
         fb:78:e5:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 00:11:43 2024 by rpki-client on console-ams.rpki-client.org