Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/e2VWex2K3JWtdiZzDaurQtnhWyc.roa
File:                     e2VWex2K3JWtdiZzDaurQtnhWyc.roa (raw, json)
Hash identifier:          uW5g+kZQSBPx/baEr7bFnPDSnzNt52ctE4AfYZGn8kU=
Subject key identifier:   7B:65:56:7B:1D:8A:DC:95:AD:76:26:73:0D:AB:AB:42:D9:E1:5B:27
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       02F0
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/e2VWex2K3JWtdiZzDaurQtnhWyc.roa
Signing time:             Tue 30 Apr 2024 01:48:02 +0000
ROA not before:           Tue 30 Apr 2024 01:48:02 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:2b00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 20:52:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 752 (0x2f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 01:48:02 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=7B65567B1D8ADC95AD7626730DABAB42D9E15B27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:51:b7:09:a6:f5:7c:fd:3f:d7:1a:7a:c7:fe:
                    e5:9a:55:35:b4:53:39:fb:cc:71:81:e5:cb:4f:20:
                    56:16:06:a5:c9:86:e0:3b:c0:c8:5a:64:cd:88:7f:
                    1c:c5:f6:a1:03:23:01:dd:3d:8f:0e:60:3f:ee:dc:
                    fa:40:86:a8:cc:0d:af:06:72:85:95:23:17:af:5c:
                    5d:07:43:0b:81:9f:44:bb:06:d7:2a:e0:5c:2a:84:
                    9a:15:78:c3:d9:cd:9d:88:5d:14:cf:e1:f8:56:fd:
                    6b:a9:f9:15:e3:df:43:dc:49:44:c1:18:ac:8e:77:
                    90:61:b2:19:93:e8:d9:55:0d:cf:de:a1:79:e1:6c:
                    b1:38:31:bc:12:3f:35:c9:f4:5f:48:22:11:cb:26:
                    01:df:7a:5c:6b:df:00:8e:26:c2:5b:2e:02:69:ac:
                    3d:0e:a2:b6:d9:9a:9e:41:1d:29:57:0e:2e:7b:2e:
                    7a:f7:ec:54:ed:00:98:c7:7b:12:d4:69:9a:c7:1c:
                    1b:7a:3c:b9:2d:b9:2d:a7:80:81:43:1a:ba:cc:37:
                    39:c0:4d:da:40:06:cb:f5:99:26:6d:6a:b0:b6:89:
                    ef:97:a5:89:11:01:09:dd:d1:ac:b7:b8:68:7a:4f:
                    89:9c:38:db:82:b9:27:27:35:01:81:ae:86:48:60:
                    e9:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:65:56:7B:1D:8A:DC:95:AD:76:26:73:0D:AB:AB:42:D9:E1:5B:27
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/e2VWex2K3JWtdiZzDaurQtnhWyc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:2b00::/40

    Signature Algorithm: sha256WithRSAEncryption
         4a:88:d6:5b:82:dc:39:3c:9d:9b:03:8d:00:96:fe:60:2d:bc:
         49:31:04:22:f0:99:f6:0b:6e:e9:2f:ae:48:18:be:7d:64:77:
         fe:9c:b9:c6:ca:6a:e0:12:76:cc:bb:fd:8b:36:7f:c6:b2:76:
         c2:31:93:71:21:8b:9f:5a:f3:12:57:50:d0:45:c5:25:ab:d7:
         e8:21:e5:e8:37:4f:5c:fa:2f:88:a5:25:eb:6f:91:92:c9:fb:
         55:52:7f:33:7d:5f:4d:1a:3d:a2:d8:2b:ad:5c:ca:9a:a4:71:
         25:b5:c8:88:2d:30:d0:5b:4e:0d:19:c7:c2:12:ae:a4:dd:7e:
         8c:cb:b5:77:35:2f:a0:4d:a9:1d:8d:7a:7f:95:de:69:5a:64:
         36:fa:58:c9:91:d8:e9:f3:10:69:13:c4:db:d1:03:c6:26:0f:
         07:bc:d4:f6:e4:37:46:df:dc:52:68:52:31:b8:2c:b3:40:3e:
         11:c1:af:3c:7a:d4:4c:ff:08:2e:a0:9c:2f:3c:a8:c0:53:93:
         b3:4c:14:15:92:e7:51:56:f1:fe:1c:e2:11:3f:1a:63:10:0f:
         b8:ff:82:6f:60:9e:46:db:af:6b:fe:a3:d3:4d:82:36:09:e4:
         f6:74:d0:00:2a:45:6c:f7:92:5c:c8:56:d2:92:03:d2:11:44:
         75:cd:f0:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 21:52:34 2024 by rpki-client on console-fra.rpki-client.org