Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/bGD1TumKYhxUvWYTnvF-ojO6CWY.roa
File:                     bGD1TumKYhxUvWYTnvF-ojO6CWY.roa (raw, json)
Hash identifier:          YKZT+uzkgXtMUNQ1nxmLEnErODtqvE9bt7Wv3SAtI6o=
Subject key identifier:   6C:60:F5:4E:E9:8A:62:1C:54:BD:66:13:9E:F1:7E:A2:33:BA:09:66
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       02AC
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/bGD1TumKYhxUvWYTnvF-ojO6CWY.roa
Signing time:             Tue 30 Apr 2024 01:39:25 +0000
ROA not before:           Tue 30 Apr 2024 01:39:25 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:2200::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 684 (0x2ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 01:39:25 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=6C60F54EE98A621C54BD66139EF17EA233BA0966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:22:98:54:9c:4b:fd:e1:27:d0:56:37:a5:93:
                    66:66:3e:61:37:ff:bb:bd:03:75:40:d9:3f:23:e6:
                    c2:14:3a:3e:fc:eb:e9:e5:f2:c5:ef:01:38:3b:cf:
                    7a:35:d9:e4:08:70:96:4e:ed:b4:db:a5:e1:97:62:
                    9b:1d:ea:ab:96:e1:bf:83:be:76:4d:c7:17:33:f0:
                    b0:97:41:d9:85:25:cb:85:c6:5c:73:f2:8b:8f:4d:
                    07:4e:9c:e7:4a:b3:39:9d:bd:ca:16:18:a9:de:4a:
                    2a:00:92:53:3f:d0:f5:30:67:ff:96:00:89:3e:15:
                    6a:3f:7e:32:e7:66:d5:a1:16:81:13:5c:8f:c3:0d:
                    84:31:98:d1:f6:ba:ec:38:a4:f6:11:d0:63:8c:ee:
                    7b:5f:cd:82:7a:a8:e8:92:9c:39:ce:eb:71:cc:8f:
                    62:77:8a:75:6c:53:99:9a:4b:98:96:de:fc:95:8a:
                    f7:89:78:4e:63:9d:a0:ab:52:76:32:29:45:8a:d7:
                    b7:3b:32:4e:0a:88:4d:32:1c:83:71:62:e7:f2:a3:
                    63:13:43:4b:f6:74:12:94:d6:a9:9f:ca:50:de:65:
                    e0:6e:a0:38:b7:07:50:60:b5:21:43:01:30:50:e9:
                    5f:0f:a9:61:05:86:fd:1b:ed:66:19:2a:d2:be:1a:
                    f8:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:60:F5:4E:E9:8A:62:1C:54:BD:66:13:9E:F1:7E:A2:33:BA:09:66
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/bGD1TumKYhxUvWYTnvF-ojO6CWY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:2200::/40

    Signature Algorithm: sha256WithRSAEncryption
         02:9f:60:a3:c0:97:a5:69:35:74:2d:5e:40:42:b5:19:bf:2a:
         8c:5f:f5:69:7f:ca:db:38:d9:23:f7:d8:c0:ce:d2:bb:be:71:
         47:88:87:f6:54:f7:41:db:18:55:aa:1a:bd:b5:7a:d2:2a:45:
         1c:f3:c7:e2:7b:bb:76:e3:eb:cb:e2:92:b2:09:de:39:e0:24:
         57:4a:cb:10:61:7d:bf:3c:4e:de:50:f5:8f:83:3e:5f:5b:7f:
         36:36:ef:b4:a1:a6:1c:69:4b:c7:14:7d:94:3a:03:27:6b:bb:
         59:1c:9e:da:a4:a4:bd:ec:bf:4c:fd:e6:aa:04:3a:dc:76:38:
         4c:5e:1b:30:25:87:d6:69:42:c0:32:b5:eb:32:dc:bd:05:06:
         cb:73:2c:03:43:ff:34:fe:94:d5:6d:56:54:c6:09:59:3d:7c:
         25:b0:a5:2c:c9:5f:7c:cf:08:92:dd:a1:9a:d4:90:a9:7c:65:
         3d:35:ab:22:25:95:af:0f:67:1d:e2:0b:35:d0:ab:ad:e1:2d:
         58:fb:b6:16:2f:3f:59:7c:0f:62:e1:98:ba:18:6e:5c:f0:b0:
         99:f7:43:89:be:3e:6a:98:3d:13:fb:0c:86:8f:c0:72:3e:df:
         67:85:4f:4c:0e:1e:11:fd:3d:34:7f:9e:bd:05:f5:d3:f8:2d:
         e8:96:61:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:45 2024 by rpki-client on console-fra.rpki-client.org