Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ZVCbr3dQi2tZHpgS6Ok5xLdIgCI.roa
File:                     ZVCbr3dQi2tZHpgS6Ok5xLdIgCI.roa (raw, json)
Hash identifier:          bDHGd4611XX6goJlR/bVBwAiB4WgXxvYklkBX9csbTg=
Subject key identifier:   65:50:9B:AF:77:50:8B:6B:59:1E:98:12:E8:E9:39:C4:B7:48:80:22
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       01F8
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ZVCbr3dQi2tZHpgS6Ok5xLdIgCI.roa
Signing time:             Tue 30 May 2023 17:40:18 +0000
ROA not before:           Tue 30 May 2023 17:40:18 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:4400::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 13:40:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 504 (0x1f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:40:18 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=65509BAF77508B6B591E9812E8E939C4B7488022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e3:e4:6e:6e:0b:1d:8f:76:1c:59:37:75:34:
                    32:82:13:12:17:e8:e6:20:d7:6c:62:f2:03:81:28:
                    45:87:6b:f9:b8:e1:a5:08:d4:c9:f7:b3:18:a3:5b:
                    ed:5c:7a:62:bf:54:15:f1:41:bf:73:e8:b1:42:a9:
                    3a:ea:cb:ae:73:71:8c:27:54:b5:c1:b3:b0:cd:f3:
                    32:df:02:85:b0:12:37:a8:e2:9a:d8:18:49:17:49:
                    15:79:a3:4f:18:fa:5f:cc:6e:f4:08:52:01:80:97:
                    b7:01:5f:4c:53:5f:20:35:6a:0a:5a:99:b2:63:37:
                    cb:49:2e:7e:12:93:30:82:a3:70:9b:f9:5b:ab:6f:
                    04:03:76:ad:6e:96:27:f3:90:93:38:9f:6d:9c:a1:
                    31:1a:c5:03:43:d1:c1:13:b2:e0:a5:a9:d0:2e:e1:
                    45:03:32:e4:1e:70:2c:50:01:79:40:00:2b:18:ee:
                    d7:eb:aa:08:a2:ee:15:8d:52:87:06:96:2f:dd:bd:
                    9a:90:98:a1:8f:6e:5c:a0:78:91:74:52:10:89:bb:
                    49:53:82:b5:fb:63:61:a6:7e:80:e1:78:07:71:55:
                    3f:0e:9e:ad:d1:ab:cd:48:8f:36:39:bd:8a:b3:27:
                    2b:ac:e5:70:40:81:7c:94:7c:ad:c7:2e:f9:4d:89:
                    80:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:50:9B:AF:77:50:8B:6B:59:1E:98:12:E8:E9:39:C4:B7:48:80:22
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ZVCbr3dQi2tZHpgS6Ok5xLdIgCI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:4400::/40

    Signature Algorithm: sha256WithRSAEncryption
         2c:a3:22:af:b6:fa:04:19:74:06:c1:de:91:3b:a3:c1:c6:dc:
         4c:45:6b:00:7b:7c:df:06:df:c3:f3:85:c5:cc:de:60:02:bd:
         56:d0:45:a3:8a:d7:c4:95:f4:d4:aa:65:b3:22:e0:f6:2f:9d:
         a9:89:bc:43:7d:fa:b8:42:96:12:02:31:3c:a6:dd:31:f4:6b:
         b0:33:ec:04:36:a7:7c:85:c6:43:5b:e1:d9:98:9e:2d:46:80:
         3a:eb:ea:66:fc:aa:84:a1:11:1a:2b:a7:a4:fd:6d:b1:52:31:
         a5:13:3e:1e:2b:5c:b9:5b:60:f6:5d:9e:61:26:d1:2a:c0:50:
         b6:25:d8:4b:ea:57:28:cc:c6:a0:47:48:1b:90:bd:0e:86:5f:
         ca:6d:76:5c:49:87:f3:7d:5f:8f:2c:36:36:24:61:3c:b5:83:
         fc:2c:7f:97:0c:5e:c2:c6:0d:75:fd:16:7e:ee:ba:5b:85:c8:
         49:01:fc:b7:1e:6f:fe:40:bd:7e:be:52:4f:6d:5d:35:38:44:
         29:5a:27:d3:84:aa:17:b1:8b:bb:b9:d5:da:e5:9f:8e:02:99:
         05:76:d4:c7:a0:10:88:aa:8f:69:12:3e:13:10:12:76:52:af:
         ff:44:eb:f6:42:fd:91:8c:10:2e:0b:30:1f:9c:7d:13:76:14:
         87:de:53:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:15:52 2024 by rpki-client on console-ams.rpki-client.org