Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/YIRKARsqjpdEwmgg2-xl2kb_OkA.roa
File:                     YIRKARsqjpdEwmgg2-xl2kb_OkA.roa (raw, json)
Hash identifier:          1cNEwr7bhCd/CPCmGT3VPbsU1eZAeQxFyUR6aKfFtXY=
Subject key identifier:   60:84:4A:01:1B:2A:8E:97:44:C2:68:20:DB:EC:65:DA:46:FF:3A:40
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0195
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/YIRKARsqjpdEwmgg2-xl2kb_OkA.roa
Signing time:             Tue 30 May 2023 17:34:31 +0000
ROA not before:           Tue 30 May 2023 17:34:31 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:5800::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 13:40:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 405 (0x195)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:34:31 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=60844A011B2A8E9744C26820DBEC65DA46FF3A40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:24:ad:2b:c1:12:a1:ea:97:ee:63:f1:0c:db:
                    15:48:b8:b1:5d:10:e4:7c:e6:ca:f5:aa:34:bc:64:
                    6a:c8:fc:dd:49:f0:6c:26:d0:e7:09:cd:66:8f:a9:
                    09:ed:ad:af:d3:81:26:30:95:97:2c:74:d8:04:eb:
                    a8:26:0f:b0:0e:7f:d9:de:1b:0f:84:33:56:64:8e:
                    70:57:66:36:74:2c:b5:f5:98:24:21:5f:61:38:6c:
                    31:98:a1:f6:e8:0a:11:13:a2:19:70:da:2f:96:88:
                    8b:3b:de:e5:40:71:56:b7:17:90:23:91:24:a9:eb:
                    d7:2d:51:eb:d6:2d:6a:93:da:55:52:ad:db:6d:22:
                    33:f0:78:0b:d1:a1:69:cd:90:8e:c7:c6:88:ef:5f:
                    b8:a3:5b:8b:dd:9b:06:3b:85:13:19:29:7a:18:51:
                    71:f8:e5:13:21:ed:8f:ba:d3:dc:88:87:6e:9a:1c:
                    21:08:af:cd:cb:c7:6f:44:ff:46:aa:57:c7:ba:03:
                    6a:31:2b:ff:af:31:38:cb:25:42:18:3d:1d:8b:1c:
                    04:a3:fa:7f:1e:49:8d:fc:b7:66:3f:4c:8e:90:16:
                    11:7f:36:a6:f9:08:0b:04:1e:57:08:fb:f7:0b:cb:
                    a2:72:0b:9f:92:47:80:ae:1c:2f:57:f9:a5:88:73:
                    28:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:84:4A:01:1B:2A:8E:97:44:C2:68:20:DB:EC:65:DA:46:FF:3A:40
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/YIRKARsqjpdEwmgg2-xl2kb_OkA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:5800::/40

    Signature Algorithm: sha256WithRSAEncryption
         72:b9:12:f9:6f:4e:da:99:6e:8b:b9:03:0e:7c:58:fa:fe:21:
         96:2b:b4:75:7a:fe:ff:d0:a4:dc:bf:ed:0a:ee:fd:63:7c:01:
         eb:01:f7:2b:76:23:5b:0a:26:52:27:24:9f:a2:90:75:29:c4:
         2b:42:35:19:18:ea:f5:c0:ca:c7:a9:bf:df:2b:a7:39:a7:a3:
         a5:bc:e0:d0:c7:9e:09:7d:46:55:05:41:13:2d:5f:90:2d:c6:
         1b:7d:0a:43:91:7c:0e:5a:93:8a:a6:c9:ed:84:b7:a3:8e:5e:
         db:55:9e:10:f3:a8:5e:82:e2:76:f6:77:b9:5a:b9:4b:36:1f:
         d3:39:a9:1e:8a:aa:f3:c5:2f:5c:d1:04:6b:5c:52:0b:d6:b2:
         7d:d5:82:65:ae:50:81:a4:37:18:e1:e4:23:cf:14:6f:7c:76:
         68:7d:43:79:64:28:4b:56:42:07:df:23:11:cc:ee:63:9d:94:
         27:14:70:8e:bc:3f:b0:01:c6:26:49:c7:6e:4c:e9:51:77:c8:
         0c:82:18:bc:f8:ea:2f:4b:87:5b:28:c2:81:bb:7e:32:f7:da:
         9e:06:f6:35:ec:75:78:18:7f:11:3a:b3:ba:34:f9:9a:33:1c:
         22:b6:3d:dc:0a:e5:c8:03:11:7d:eb:6e:15:61:2c:4f:71:e6:
         aa:62:b1:26
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICAZUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yMzA1MzAx
NzM0MzFaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDYwODQ0QTAxMUIyQThF
OTc0NEMyNjgyMERCRUM2NURBNDZGRjNBNDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC5JK0rwRKh6pfuY/EM2xVIuLFdEOR85sr1qjS8ZGrI/N1J8Gwm
0OcJzWaPqQntra/TgSYwlZcsdNgE66gmD7AOf9neGw+EM1ZkjnBXZjZ0LLX1mCQh
X2E4bDGYofboChETohlw2i+WiIs73uVAcVa3F5AjkSSp69ctUevWLWqT2lVSrdtt
IjPweAvRoWnNkI7HxojvX7ijW4vdmwY7hRMZKXoYUXH45RMh7Y+609yIh26aHCEI
r83Lx29E/0aqV8e6A2oxK/+vMTjLJUIYPR2LHASj+n8eSY38t2Y/TI6QFhF/Nqb5
CAsEHlcI+/cLy6JyC5+SR4CuHC9X+aWIcyi1AgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQUYIRKARsqjpdEwmgg2+xl2kb/OkAwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS9ZSVJLQVJzcWpwZEV3bWdnMi14bDJrYl9Pa0Eu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAa1gwDQYJKoZIhvcNAQELBQADggEBAHK5EvlvTtqZbou5Aw58
WPr+IZYrtHV6/v/QpNy/7Qru/WN8AesB9yt2I1sKJlInJJ+ikHUpxCtCNRkY6vXA
ysepv98rpzmno6W84NDHngl9RlUFQRMtX5Atxht9CkORfA5ak4qmye2Et6OOXttV
nhDzqF6C4nb2d7lauUs2H9M5qR6KqvPFL1zRBGtcUgvWsn3VgmWuUIGkNxjh5CPP
FG98dmh9Q3lkKEtWQgffIxHM7mOdlCcUcI68P7ABxiZJx25M6VF3yAyCGLz46i9L
h1sowoG7fjL32p4G9jXsdXgYfxE6s7o0+ZozHCK2PdwK5cgDEX3rbhVhLE9x5qpi
sSY=
-----END CERTIFICATE-----
Generated at Sat Apr 27 10:15:52 2024 by rpki-client on console-ams.rpki-client.org