Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/X2fUEDdkyL87fXtOlNNXW9yNPsE.roa
File:                     X2fUEDdkyL87fXtOlNNXW9yNPsE.roa (raw, json)
Hash identifier:          oXZNgYKl9fvd3AOMTfaWOCcu/1gz4dgKqR3ztielfJM=
Subject key identifier:   5F:67:D4:10:37:64:C8:BF:3B:7D:7B:4E:94:D3:57:5B:DC:8D:3E:C1
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0230
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/X2fUEDdkyL87fXtOlNNXW9yNPsE.roa
Signing time:             Tue 30 May 2023 17:42:25 +0000
ROA not before:           Tue 30 May 2023 17:42:25 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:60:f00e::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 13:40:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 560 (0x230)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:42:25 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=5F67D4103764C8BF3B7D7B4E94D3575BDC8D3EC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:34:9d:08:1a:3c:9a:72:2c:f3:94:90:c6:0f:
                    16:a1:af:00:46:2d:a2:2f:4c:fc:e2:e5:8e:14:df:
                    1c:a8:ae:19:46:15:1a:33:ea:70:36:84:ff:d3:d8:
                    c5:95:10:2b:b6:3a:88:65:8e:fd:2b:3e:ab:4a:56:
                    90:6d:dd:f2:83:da:17:e9:ee:35:2b:cd:b9:6b:3f:
                    d6:2d:32:69:13:85:c3:a8:fa:cf:3d:97:89:e2:be:
                    b0:fc:3a:b4:ab:f2:e4:f9:b8:aa:83:d6:46:56:bd:
                    18:ce:06:32:e3:76:45:c5:95:3e:a3:a4:52:bf:f7:
                    ac:27:be:c8:5f:ed:ac:a6:3b:4c:ca:ac:5c:da:9e:
                    e9:ef:a9:bb:f8:bc:66:66:06:24:12:72:59:96:d5:
                    66:1d:b9:2b:8c:c7:7a:d0:b7:23:9d:2a:e4:91:75:
                    4a:b2:d2:23:14:9f:da:fc:dd:d6:2a:a0:42:e8:c7:
                    aa:b3:c3:ba:be:0e:de:7d:3e:82:6f:1d:df:20:0a:
                    99:2f:6d:75:d3:89:b9:a2:80:a3:9d:31:05:21:60:
                    f2:c7:b8:93:6d:30:12:bd:77:f0:d0:61:3d:e8:aa:
                    48:49:a1:49:77:40:05:6f:42:b3:10:b0:97:e5:f5:
                    5f:82:ed:e2:e5:79:15:3e:52:23:49:54:bd:d6:fe:
                    4d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:67:D4:10:37:64:C8:BF:3B:7D:7B:4E:94:D3:57:5B:DC:8D:3E:C1
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/X2fUEDdkyL87fXtOlNNXW9yNPsE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:60:f00e::/48

    Signature Algorithm: sha256WithRSAEncryption
         ac:ab:d4:89:62:7e:16:ba:d3:35:d7:97:89:ec:bd:ad:30:4b:
         0d:2c:69:2e:da:e1:54:d1:ce:76:ad:03:f6:85:dc:9c:81:84:
         63:4c:03:24:1d:b0:2d:46:e2:1c:a6:ef:de:a1:9d:d1:5a:fc:
         1a:ae:76:be:14:35:be:79:8f:af:54:f0:55:ae:a0:a8:15:12:
         8a:64:51:ca:68:56:90:fa:21:66:88:2a:1f:2c:73:b0:66:7e:
         8e:0e:a7:d1:e4:69:7e:57:bb:52:6d:d5:0b:93:c6:0f:78:25:
         01:5f:11:19:a2:d7:f6:32:04:32:fa:c7:cf:af:c8:22:be:63:
         3d:1a:5a:47:7f:53:d7:c5:f5:79:2f:5f:a5:2c:63:e1:e8:c6:
         51:8b:fd:bf:52:53:ae:3d:ef:7a:f9:7a:96:f1:07:d9:fa:f3:
         6d:ba:ad:0f:29:07:e8:2c:d1:dc:b9:87:98:2d:be:4c:d7:3b:
         7b:f7:e8:e3:b8:27:54:f6:08:b6:15:33:56:e9:36:ba:76:43:
         6e:5a:55:86:c3:89:83:2c:10:bd:14:e0:35:95:c1:72:b8:56:
         0c:5f:99:63:74:22:f4:1b:09:57:5a:d5:8d:50:47:b9:3a:db:
         24:ae:59:e5:02:ce:f5:3c:7a:19:7f:71:71:d9:b4:7a:c7:40:
         9e:15:79:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:15:52 2024 by rpki-client on console-ams.rpki-client.org