Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/XInZwibgUuVcfytgrdR0drlfEcs.roa
File:                     XInZwibgUuVcfytgrdR0drlfEcs.roa (raw, json)
Hash identifier:          linJv9CTzm1N+3tWa/fYxn3qQ75dizTgyUS+cW07868=
Subject key identifier:   5C:89:D9:C2:26:E0:52:E5:5C:7F:2B:60:AD:D4:74:76:B9:5F:11:CB
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0151
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/XInZwibgUuVcfytgrdR0drlfEcs.roa
Signing time:             Tue 30 May 2023 17:32:26 +0000
ROA not before:           Tue 30 May 2023 17:32:26 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:1300::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 13:40:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 337 (0x151)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:32:26 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=5C89D9C226E052E55C7F2B60ADD47476B95F11CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:23:99:85:74:f8:3e:c7:a7:4c:44:c9:fc:89:
                    b5:77:fc:1e:fa:e1:50:8b:a4:ae:8d:19:15:aa:e9:
                    1d:be:ef:c6:d8:2a:f5:77:8c:23:4a:a2:b9:06:f2:
                    54:cb:ae:8f:30:03:07:b2:2a:24:3c:72:fa:fd:0d:
                    6f:3f:8b:52:36:96:80:31:d1:a0:cf:c9:10:05:f8:
                    64:48:0f:4d:7f:53:b3:10:6a:72:e8:eb:78:f8:5c:
                    be:7e:67:01:ae:1f:af:97:12:65:64:d4:21:8c:5e:
                    e1:73:89:19:e8:6b:de:b4:13:a4:0d:5c:32:5a:61:
                    36:26:8d:45:a3:96:a7:4c:2d:5e:7e:5e:d0:6e:50:
                    c0:7a:2f:77:eb:d4:f2:9e:3c:9f:cd:64:c1:8b:fa:
                    2b:15:c6:ff:da:82:93:36:52:44:96:b5:3a:64:80:
                    61:10:6a:ad:1b:d1:1b:53:8f:3c:46:22:01:7b:43:
                    a7:ea:bc:84:5e:16:51:d6:5c:ef:b8:96:ab:62:96:
                    33:9c:37:8f:79:ce:41:94:ee:fd:ec:a8:f0:0a:37:
                    4f:80:88:98:a9:92:30:2a:0d:18:ed:0b:42:bc:e3:
                    03:ab:3f:f1:24:67:77:2a:e8:d1:98:36:25:16:9e:
                    d1:06:4e:7f:64:ba:22:07:30:2b:cf:fb:2a:55:8a:
                    52:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:89:D9:C2:26:E0:52:E5:5C:7F:2B:60:AD:D4:74:76:B9:5F:11:CB
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/XInZwibgUuVcfytgrdR0drlfEcs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:1300::/40

    Signature Algorithm: sha256WithRSAEncryption
         8c:09:d9:31:f9:c9:59:ef:03:1c:e2:02:98:59:86:03:ac:02:
         f4:c1:c6:03:d3:2e:d8:0a:a6:76:57:c0:88:64:28:5e:56:3e:
         a3:a8:ea:58:f6:c1:dd:0a:73:73:59:5c:02:0d:9c:26:b7:d7:
         99:7c:06:97:ba:0a:5a:76:b8:d6:ad:16:bf:c6:19:12:9b:04:
         9c:1a:d3:c4:de:2a:1a:45:c2:ef:de:5b:b8:8d:1f:08:c8:52:
         54:1e:19:ec:d7:e2:4f:6f:0c:02:5f:85:af:f0:8f:59:ad:7b:
         7e:a9:6a:07:93:0d:76:3d:d4:ac:7f:10:62:77:b2:dd:cf:d3:
         ff:81:32:ef:0e:a9:13:57:76:e1:cb:30:5b:53:98:c1:00:e1:
         4a:b9:3b:67:d1:33:ae:93:96:9d:db:d9:7c:06:b6:28:90:cd:
         0b:4d:ae:28:9c:05:db:b3:03:e7:1f:56:81:42:1e:13:9d:36:
         ee:23:de:57:90:a5:ba:8c:2f:5c:ca:81:82:04:6c:bb:79:ce:
         af:8b:13:13:b2:7c:07:f3:bc:31:a8:2e:94:7b:b9:63:07:4c:
         40:d2:99:6d:3f:fd:26:2e:65:a1:ea:d5:ce:c9:8b:50:85:f8:
         af:ce:24:cd:8d:99:bb:9f:c6:a4:89:54:b7:14:2f:d9:0e:2e:
         95:20:83:ff
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICAVEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yMzA1MzAx
NzMyMjZaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDVDODlEOUMyMjZFMDUy
RTU1QzdGMkI2MEFERDQ3NDc2Qjk1RjExQ0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCwI5mFdPg+x6dMRMn8ibV3/B764VCLpK6NGRWq6R2+78bYKvV3
jCNKorkG8lTLro8wAweyKiQ8cvr9DW8/i1I2loAx0aDPyRAF+GRID01/U7MQanLo
63j4XL5+ZwGuH6+XEmVk1CGMXuFziRnoa960E6QNXDJaYTYmjUWjlqdMLV5+XtBu
UMB6L3fr1PKePJ/NZMGL+isVxv/agpM2UkSWtTpkgGEQaq0b0RtTjzxGIgF7Q6fq
vIReFlHWXO+4lqtiljOcN495zkGU7v3sqPAKN0+AiJipkjAqDRjtC0K84wOrP/Ek
Z3cq6NGYNiUWntEGTn9kuiIHMCvP+ypVilJdAgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQUXInZwibgUuVcfytgrdR0drlfEcswHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS9YSW5ad2liZ1V1VmNmeXRncmRSMGRybGZFY3Mu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAaxMwDQYJKoZIhvcNAQELBQADggEBAIwJ2TH5yVnvAxziAphZ
hgOsAvTBxgPTLtgKpnZXwIhkKF5WPqOo6lj2wd0Kc3NZXAINnCa315l8Bpe6Clp2
uNatFr/GGRKbBJwa08TeKhpFwu/eW7iNHwjIUlQeGezX4k9vDAJfha/wj1mte36p
ageTDXY91Kx/EGJ3st3P0/+BMu8OqRNXduHLMFtTmMEA4Uq5O2fRM66Tlp3b2XwG
tiiQzQtNriicBduzA+cfVoFCHhOdNu4j3leQpbqML1zKgYIEbLt5zq+LExOyfAfz
vDGoLpR7uWMHTEDSmW0//SYuZaHq1c7Ji1CF+K/OJM2NmbufxqSJVLcUL9kOLpUg
g/8=
-----END CERTIFICATE-----
Generated at Sat Apr 27 10:15:52 2024 by rpki-client on console-ams.rpki-client.org