Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Uw-p3tvOuKXSyGpsKDRaWlmwze8.roa
File:                     Uw-p3tvOuKXSyGpsKDRaWlmwze8.roa (raw, json)
Hash identifier:          Ny9lLm5613aVpQ/6TQJCYAoUrH6TUAWk5DlHdtYs7UY=
Subject key identifier:   53:0F:A9:DE:DB:CE:B8:A5:D2:C8:6A:6C:28:34:5A:5A:59:B0:CD:EF
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0331
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Uw-p3tvOuKXSyGpsKDRaWlmwze8.roa
Signing time:             Tue 30 Apr 2024 01:53:55 +0000
ROA not before:           Tue 30 Apr 2024 01:53:55 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:2a00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 817 (0x331)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 01:53:55 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=530FA9DEDBCEB8A5D2C86A6C28345A5A59B0CDEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d1:34:f7:cd:8f:7a:e7:78:62:15:3e:e6:25:
                    c5:6f:99:8f:f7:3b:84:cb:1e:83:82:56:58:ae:56:
                    71:01:aa:da:45:2b:06:f1:92:bc:85:d8:f2:8c:9b:
                    a0:3a:c2:63:a1:4c:4c:1a:88:ff:b2:ff:c6:bb:f6:
                    20:10:d6:1a:c7:95:0f:c6:91:b5:64:c7:b5:9f:59:
                    69:26:14:a6:23:49:ff:c8:e6:7c:a5:e4:6a:80:c7:
                    8a:5e:91:ed:f0:4d:6d:21:68:ad:e8:c3:4d:04:02:
                    59:aa:24:5a:ac:b3:fb:31:6c:86:bb:90:e5:3d:98:
                    3a:08:52:16:0a:95:31:c1:2a:47:4a:23:52:4c:a3:
                    6a:f9:c0:5b:16:b9:7e:05:a4:50:e6:37:25:f9:21:
                    d6:8c:66:bf:07:98:64:16:00:a6:0f:9e:74:59:e3:
                    ca:a4:fe:19:dc:b3:8f:23:b6:5d:92:51:e9:17:b6:
                    24:20:02:40:49:4a:f3:46:b1:87:f3:00:86:81:af:
                    8c:3d:73:72:04:28:32:fb:d7:d5:04:e2:2f:be:4e:
                    3d:1d:86:8d:85:01:6c:d3:13:24:db:b4:a1:e4:2a:
                    dc:d3:ee:56:43:58:29:75:43:7c:d7:52:7f:c0:85:
                    a6:0f:fd:0f:fb:24:2b:27:d0:8c:ca:38:5f:2c:28:
                    76:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:0F:A9:DE:DB:CE:B8:A5:D2:C8:6A:6C:28:34:5A:5A:59:B0:CD:EF
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Uw-p3tvOuKXSyGpsKDRaWlmwze8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:2a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         0f:4d:48:f5:a0:fb:c0:1c:e1:11:19:2b:2a:5e:da:f1:e0:3e:
         0d:5f:f9:bc:f8:cf:95:ab:56:ff:cb:53:05:83:04:43:59:7b:
         99:0e:98:33:52:1a:14:e1:b0:ce:a9:64:12:5c:7e:50:b1:93:
         cc:4b:01:82:e1:f3:10:7f:48:47:a7:dc:61:2c:b1:01:3d:7c:
         93:9d:51:8c:ee:21:40:a8:ca:0b:76:60:fb:f1:df:ec:55:4d:
         15:76:5a:f0:b4:a7:70:90:8e:9e:a0:d3:5c:2f:81:a2:fd:26:
         b1:4f:20:52:90:b1:02:70:f4:09:ba:a3:c7:cf:aa:27:2c:c9:
         d6:27:87:38:b9:70:dc:55:ff:82:1a:7a:84:9e:d1:ff:13:7c:
         24:2a:ab:39:2e:cc:c6:70:e6:71:99:10:6b:4d:b8:4c:fd:4d:
         9a:bb:4b:12:13:45:ab:3e:4a:bc:4e:67:05:77:e4:0c:b6:04:
         05:56:32:83:53:03:7b:ba:c5:37:0d:37:22:81:a3:50:93:aa:
         f7:c7:ed:5e:e2:b7:75:e6:0d:c5:e3:20:81:a4:89:bf:07:78:
         dc:50:b2:98:91:52:12:70:c6:81:c3:61:b6:92:8a:ee:24:2f:
         a5:2e:c3:13:b3:94:90:f5:72:8e:6c:6f:4e:e4:b1:67:55:5f:
         ab:c7:f6:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:20 2024 by rpki-client on console-ams.rpki-client.org