Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/dxD8ebmPYpm_rOhp0hvPBLoRqeY.roa
File:                     dxD8ebmPYpm_rOhp0hvPBLoRqeY.roa (raw, json)
Hash identifier:          1tAgvnLE8OuLFhsK0qqgt9gRtuwcCj5zqgrroxyaAQg=
Subject key identifier:   77:10:FC:79:B9:8F:62:99:BF:AC:E8:69:D2:1B:CF:04:BA:11:A9:E6
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0399
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/dxD8ebmPYpm_rOhp0hvPBLoRqeY.roa
Signing time:             Wed 15 May 2024 08:40:20 +0000
ROA not before:           Wed 15 May 2024 08:40:20 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:61:6000::/37 maxlen: 37

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 921 (0x399)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 15 08:40:20 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=7710FC79B98F6299BFACE869D21BCF04BA11A9E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:46:8c:88:96:78:1c:f1:43:7c:fa:d3:f1:74:
                    8b:7e:d4:48:b7:3d:60:77:dc:17:1c:22:ff:ef:b3:
                    72:9f:82:75:6e:ce:ba:8f:be:9d:88:a2:c3:a5:f1:
                    73:f1:e1:ee:54:c5:2e:05:02:05:8e:0e:2b:75:93:
                    5a:38:19:84:79:3e:8f:dc:3f:71:2c:2e:11:b8:79:
                    b9:dd:73:de:95:3c:2e:64:0f:50:3c:f6:7d:35:44:
                    5f:7a:00:3b:31:94:3a:ca:7e:85:1d:cb:e4:1d:86:
                    07:c1:3f:42:ac:33:da:f6:29:a7:94:55:1e:51:43:
                    95:6e:54:c3:c0:c0:37:ce:62:27:23:f3:ca:c5:24:
                    73:29:81:12:74:cb:2e:3b:56:a8:9b:e1:d8:07:13:
                    0c:0b:88:c1:09:c4:71:9c:51:c9:ab:29:b2:63:43:
                    41:b2:16:a6:de:b4:c6:ca:a5:33:ef:d5:37:d8:62:
                    9e:62:f2:d7:84:34:f3:09:d6:18:e3:9f:33:7c:a1:
                    13:ff:78:19:1b:9b:d6:a4:a8:cd:75:58:54:4d:05:
                    18:fc:d6:e8:5e:60:4c:97:99:af:f5:1b:38:e0:f3:
                    df:5f:76:ed:3f:94:e5:74:47:40:69:f1:2f:8c:d0:
                    27:9c:ca:23:ff:c0:aa:5f:26:e0:48:f1:7b:6d:8b:
                    9e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:10:FC:79:B9:8F:62:99:BF:AC:E8:69:D2:1B:CF:04:BA:11:A9:E6
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/dxD8ebmPYpm_rOhp0hvPBLoRqeY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:61:6000::/37

    Signature Algorithm: sha256WithRSAEncryption
         9b:70:7b:44:52:a8:37:39:3a:81:07:e9:2c:6b:2d:49:eb:ce:
         03:2c:2a:8f:ad:d3:59:87:8c:59:4a:9c:52:16:68:97:3a:60:
         54:41:e9:f7:f2:dc:3b:83:b9:db:49:00:fe:cd:a4:78:b5:ba:
         dd:e1:16:15:43:fd:08:30:a3:ea:67:0f:18:5a:4b:e2:c4:b3:
         2a:05:87:79:92:fa:35:f2:18:16:a1:29:40:e5:12:74:0d:86:
         aa:f2:6f:9d:30:7b:31:c9:a3:1d:a4:12:e9:e4:0a:2a:fa:a2:
         6b:14:2a:6f:94:e1:9a:e0:9e:7b:50:21:d9:a5:69:cd:ca:54:
         bc:21:ad:ec:7f:97:62:ee:48:97:29:8f:34:98:c3:c1:f4:59:
         06:cd:e6:25:c6:a1:7e:8f:cd:81:e6:06:f8:07:36:ec:49:22:
         7c:53:3e:d3:55:7f:66:2b:fd:a3:a0:ab:a3:5f:11:5e:0d:0f:
         3a:00:96:8e:6d:dd:8a:a2:e0:80:11:60:dc:07:40:cd:8d:23:
         ac:77:f6:d8:3c:7e:92:9e:d9:f1:8d:0f:97:ca:0b:95:bd:ae:
         2c:ca:8c:f3:f2:d8:ce:6c:b1:19:ca:df:87:f3:dd:d1:11:fd:
         4d:f7:2d:36:d5:d0:b6:bc:6a:db:5a:57:b0:6e:9d:93:fe:05:
         fd:1e:bd:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:20 2024 by rpki-client on console-ams.rpki-client.org