Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ZzVLogQUfc7YX1SuW42cmASgWeM.roa
File:                     ZzVLogQUfc7YX1SuW42cmASgWeM.roa (raw, json)
Hash identifier:          kCWgs8vAqA5y6dIi8Zir3mbJ8XFeZOvcCp6yQ5uNURo=
Subject key identifier:   67:35:4B:A2:04:14:7D:CE:D8:5F:54:AE:5B:8D:9C:98:04:A0:59:E3
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       02CC
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ZzVLogQUfc7YX1SuW42cmASgWeM.roa
Signing time:             Tue 30 Apr 2024 01:44:48 +0000
ROA not before:           Tue 30 Apr 2024 01:44:48 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:e000::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Dec 2024 00:11:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 716 (0x2cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 01:44:48 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=67354BA204147DCED85F54AE5B8D9C9804A059E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:91:04:ea:ee:9c:16:41:f0:4f:d9:69:85:b6:
                    f6:c6:97:e4:12:ad:de:82:9c:27:1d:b9:32:36:5c:
                    b5:1d:99:77:e3:57:26:cb:95:f9:2b:48:9f:3f:da:
                    77:38:5b:98:9f:aa:eb:2d:e2:80:21:4a:55:6e:56:
                    48:aa:9e:82:2c:20:9b:6f:47:6c:42:53:61:d8:4a:
                    d9:0c:37:7e:c7:1f:7c:39:1d:c7:4e:c1:33:8a:ea:
                    4d:ad:15:e4:c9:1d:0f:e6:0c:db:ba:34:6f:91:16:
                    19:67:9f:47:d4:42:d7:97:d3:8f:ed:b5:7b:b5:18:
                    d3:71:e2:1e:7b:20:50:12:6f:b8:da:51:53:ac:24:
                    ac:fe:50:7f:eb:41:59:4c:6f:c1:40:b3:77:3c:25:
                    e9:8f:71:ee:d4:16:fe:af:d7:07:48:af:16:b5:68:
                    4a:af:39:11:15:ed:7d:5f:59:28:a8:11:30:4f:d0:
                    ca:57:77:42:40:8d:ac:d5:13:92:22:95:3b:7d:ee:
                    24:ec:49:29:14:11:3d:f5:29:b4:7b:97:01:57:81:
                    30:0e:27:64:37:9b:22:2f:21:1d:33:ba:7e:89:cb:
                    a9:94:16:1a:b0:6c:86:b4:cf:d5:b9:ca:aa:2c:a8:
                    f0:8f:1f:49:5d:c1:4f:d1:82:6f:45:d8:26:e3:53:
                    ca:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:35:4B:A2:04:14:7D:CE:D8:5F:54:AE:5B:8D:9C:98:04:A0:59:E3
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ZzVLogQUfc7YX1SuW42cmASgWeM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:e000::/40

    Signature Algorithm: sha256WithRSAEncryption
         6a:85:02:fb:bb:76:b5:f6:c8:4e:17:b4:d3:fd:4d:14:ce:4b:
         2e:44:49:8d:a9:ca:03:32:1e:11:1a:b1:84:34:6d:6f:15:45:
         2e:38:67:d8:a8:da:dd:ee:49:76:d8:11:1c:7b:dd:78:f6:0f:
         11:e6:24:04:3b:f1:9b:4f:95:a1:2a:56:3d:7d:e7:45:88:6d:
         bc:82:86:34:24:5e:30:b5:37:0d:d9:dc:98:71:e8:16:53:b6:
         57:53:41:71:1b:fc:6e:25:81:6d:08:09:33:3a:be:d9:b4:ff:
         b8:f5:b0:82:2a:11:c0:99:27:cf:c0:68:10:34:c0:31:07:34:
         04:9f:54:43:73:84:1b:13:68:03:fe:4b:3e:57:40:13:82:36:
         03:f0:34:0e:ec:8b:7b:1a:68:54:ec:cb:55:9a:1c:c7:6e:36:
         0e:6a:fe:3f:59:8e:b1:f0:48:d8:60:b4:f8:b3:e9:a7:f4:05:
         c2:43:5d:54:08:5d:80:ca:8c:21:c5:b3:aa:2c:82:fe:29:85:
         3b:db:c5:cd:e2:b2:2b:39:4a:a9:a7:a5:a2:0b:1c:2f:25:17:
         73:ea:07:28:37:a1:4d:f4:47:3d:67:ae:f6:cf:88:12:b6:50:
         e0:bd:d2:43:f1:c2:3d:b7:6f:c9:06:ec:4b:db:ae:ee:b9:00:
         e4:99:5e:e9
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICAswwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNDA0MzAw
MTQ0NDhaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDY3MzU0QkEyMDQxNDdE
Q0VEODVGNTRBRTVCOEQ5Qzk4MDRBMDU5RTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDdkQTq7pwWQfBP2WmFtvbGl+QSrd6CnCcduTI2XLUdmXfjVybL
lfkrSJ8/2nc4W5ifqust4oAhSlVuVkiqnoIsIJtvR2xCU2HYStkMN37HH3w5HcdO
wTOK6k2tFeTJHQ/mDNu6NG+RFhlnn0fUQteX04/ttXu1GNNx4h57IFASb7jaUVOs
JKz+UH/rQVlMb8FAs3c8JemPce7UFv6v1wdIrxa1aEqvOREV7X1fWSioETBP0MpX
d0JAjazVE5IilTt97iTsSSkUET31KbR7lwFXgTAOJ2Q3myIvIR0zun6Jy6mUFhqw
bIa0z9W5yqosqPCPH0ldwU/Rgm9F2CbjU8q3AgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQUZzVLogQUfc7YX1SuW42cmASgWeMwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS9aelZMb2dRVWZjN1lYMVN1VzQyY21BU2dXZU0u
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAa+AwDQYJKoZIhvcNAQELBQADggEBAGqFAvu7drX2yE4XtNP9
TRTOSy5ESY2pygMyHhEasYQ0bW8VRS44Z9io2t3uSXbYERx73Xj2DxHmJAQ78ZtP
laEqVj1950WIbbyChjQkXjC1Nw3Z3Jhx6BZTtldTQXEb/G4lgW0ICTM6vtm0/7j1
sIIqEcCZJ8/AaBA0wDEHNASfVENzhBsTaAP+Sz5XQBOCNgPwNA7si3saaFTsy1Wa
HMduNg5q/j9ZjrHwSNhgtPiz6af0BcJDXVQIXYDKjCHFs6osgv4phTvbxc3isis5
SqmnpaILHC8lF3PqByg3oU30Rz1nrvbPiBK2UOC90kPxwj23b8kG7Evbru65AOSZ
Xuk=
-----END CERTIFICATE-----
Generated at Tue Nov 26 02:17:07 2024 by rpki-client on console-fra.rpki-client.org