Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ZdYoGh0OSbDNPQgebQTMFzhbZt0.roa
File:                     ZdYoGh0OSbDNPQgebQTMFzhbZt0.roa (raw, json)
Hash identifier:          QNIF5bLal3gtqTDJGECvN9G0soTQwPCj94Wt5LVKK54=
Subject key identifier:   65:D6:28:1A:1D:0E:49:B0:CD:3D:08:1E:6D:04:CC:17:38:5B:66:DD
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0283
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ZdYoGh0OSbDNPQgebQTMFzhbZt0.roa
Signing time:             Tue 30 Apr 2024 01:32:18 +0000
ROA not before:           Tue 30 Apr 2024 01:32:18 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:6000::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 22:26:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 643 (0x283)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 01:32:18 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=65D6281A1D0E49B0CD3D081E6D04CC17385B66DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:62:77:47:99:50:61:3b:f2:38:3f:bb:4a:03:
                    37:c0:c3:41:41:57:8b:85:1d:a0:f4:03:f6:38:de:
                    bd:a3:ab:46:f0:85:36:16:65:00:3b:ff:98:9e:20:
                    f5:9f:25:16:75:65:00:4e:1b:6c:32:a8:3f:ae:9e:
                    b6:a9:fd:1a:a2:26:57:70:3e:e5:78:f0:ac:19:16:
                    a7:01:49:da:fd:62:d8:a8:7f:f9:30:65:0d:0a:54:
                    6e:67:81:5c:49:d8:ef:4d:7a:96:fb:0c:03:47:c2:
                    b0:b4:26:14:e2:27:9f:b5:6d:28:27:1b:ed:8c:fd:
                    f3:3c:df:23:92:b0:b8:71:dd:1c:10:d8:ae:b1:20:
                    ab:00:8b:53:4d:bf:af:31:61:0b:39:09:26:8d:ce:
                    73:54:96:0d:a6:6e:cd:ab:4f:fe:ff:57:3f:8a:f6:
                    13:1c:df:c6:95:71:b8:c5:ab:eb:d7:6e:64:65:79:
                    a6:fc:91:7c:e0:de:72:c6:7e:e7:71:18:3d:e6:bc:
                    19:c3:db:11:5d:6e:97:e9:1e:22:9c:22:15:7a:98:
                    63:4b:b2:ab:27:50:43:7e:b1:35:2d:3b:e2:3b:26:
                    c5:46:0d:13:55:cb:4e:5b:b6:fa:26:3a:2d:a1:60:
                    93:1a:6b:69:99:83:2b:54:64:40:44:25:20:b8:df:
                    15:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:D6:28:1A:1D:0E:49:B0:CD:3D:08:1E:6D:04:CC:17:38:5B:66:DD
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ZdYoGh0OSbDNPQgebQTMFzhbZt0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:6000::/40

    Signature Algorithm: sha256WithRSAEncryption
         3a:cb:ad:f0:24:f8:b9:6b:c7:93:c6:3e:a1:f3:2d:60:fb:0a:
         b3:e8:4b:67:cd:af:51:25:fa:0c:c8:0f:39:e0:54:cc:d8:09:
         3c:3e:ef:3c:1d:66:c5:6f:ef:65:fb:b3:e3:4e:ae:b8:f0:c4:
         44:14:de:bb:ea:2f:61:86:99:5b:ea:9d:1e:ef:04:e2:92:5f:
         ce:3c:e5:b9:09:8f:50:54:6d:87:b0:8f:bd:ca:19:1c:ee:62:
         2c:8b:dc:11:86:db:09:6a:57:4a:c2:4f:08:4e:44:83:97:2b:
         7e:4a:fc:07:07:99:6a:67:cb:7d:d0:8f:f4:60:79:1d:4c:0c:
         86:98:e6:ac:5a:1f:c9:c7:b3:89:f7:92:ce:74:e2:a7:63:13:
         78:f8:9a:50:48:f3:7d:f0:b6:8b:e6:82:ad:a1:e3:22:aa:33:
         09:05:10:80:d8:70:cb:cb:ff:00:2b:78:bd:6c:d8:53:c4:3d:
         f0:e0:68:5a:23:c3:b1:aa:ef:27:32:3b:95:1d:df:5b:97:c3:
         69:7f:85:c7:fd:9e:fb:9a:ab:93:80:9d:da:ab:cc:e3:bb:7f:
         8e:df:40:d9:3a:97:3e:97:45:72:a9:2f:01:3b:2d:d0:a6:3c:
         be:3a:0c:36:bd:2c:b1:bd:82:c7:bb:13:f7:e8:d1:a0:ef:99:
         8a:94:e0:ac
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICAoMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNDA0MzAw
MTMyMThaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDY1RDYyODFBMUQwRTQ5
QjBDRDNEMDgxRTZEMDRDQzE3Mzg1QjY2REQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDXYndHmVBhO/I4P7tKAzfAw0FBV4uFHaD0A/Y43r2jq0bwhTYW
ZQA7/5ieIPWfJRZ1ZQBOG2wyqD+unrap/RqiJldwPuV48KwZFqcBSdr9Ytiof/kw
ZQ0KVG5ngVxJ2O9Nepb7DANHwrC0JhTiJ5+1bSgnG+2M/fM83yOSsLhx3RwQ2K6x
IKsAi1NNv68xYQs5CSaNznNUlg2mbs2rT/7/Vz+K9hMc38aVcbjFq+vXbmRleab8
kXzg3nLGfudxGD3mvBnD2xFdbpfpHiKcIhV6mGNLsqsnUEN+sTUtO+I7JsVGDRNV
y05btvomOi2hYJMaa2mZgytUZEBEJSC43xUZAgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQUZdYoGh0OSbDNPQgebQTMFzhbZt0wHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS9aZFlvR2gwT1NiRE5QUWdlYlFUTUZ6aGJadDAu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAa2AwDQYJKoZIhvcNAQELBQADggEBADrLrfAk+Llrx5PGPqHz
LWD7CrPoS2fNr1El+gzIDzngVMzYCTw+7zwdZsVv72X7s+NOrrjwxEQU3rvqL2GG
mVvqnR7vBOKSX8485bkJj1BUbYewj73KGRzuYiyL3BGG2wlqV0rCTwhORIOXK35K
/AcHmWpny33Qj/RgeR1MDIaY5qxaH8nHs4n3ks504qdjE3j4mlBI833wtovmgq2h
4yKqMwkFEIDYcMvL/wAreL1s2FPEPfDgaFojw7Gq7ycyO5Ud31uXw2l/hcf9nvua
q5OAndqrzOO7f47fQNk6lz6XRXKpLwE7LdCmPL46DDa9LLG9gse7E/fo0aDvmYqU
4Kw=
-----END CERTIFICATE-----
Generated at Fri Jun 7 00:11:43 2024 by rpki-client on console-ams.rpki-client.org