Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/eIZFKOdTLRRAq2piHeSwiakE_iQ.roa
File:                     eIZFKOdTLRRAq2piHeSwiakE_iQ.roa (raw, json)
Hash identifier:          be35ZKD/wzKL+CXvp55ZoAs7lcjvU+TeKCuVxgSxcDA=
Subject key identifier:   78:86:45:28:E7:53:2D:14:40:AB:6A:62:1D:E4:B0:89:A9:04:FE:24
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       02B7
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/eIZFKOdTLRRAq2piHeSwiakE_iQ.roa
Signing time:             Tue 30 Apr 2024 01:39:30 +0000
ROA not before:           Tue 30 Apr 2024 01:39:30 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:5f00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 695 (0x2b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 01:39:30 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=78864528E7532D1440AB6A621DE4B089A904FE24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:3d:20:1c:b4:55:b2:be:c5:a2:39:38:c5:f5:
                    9e:67:99:2f:1c:02:65:ed:20:14:ce:88:78:db:da:
                    77:5e:58:37:e3:6f:f5:4f:21:e1:56:1f:6c:2e:45:
                    fd:f5:d6:23:d5:30:c1:26:8f:ba:47:91:75:18:6f:
                    62:2e:aa:8b:8e:fa:03:b0:6c:d9:cb:34:a6:70:7a:
                    a0:3c:77:b9:e0:d0:eb:5d:d5:a7:77:ec:1e:45:a5:
                    c6:bf:07:91:cf:bf:4b:2f:64:e7:48:97:b5:53:17:
                    3a:98:56:ea:55:e2:a5:fe:28:06:40:b3:4e:37:55:
                    6c:42:c5:1b:1b:30:1e:7e:a6:09:41:c1:8f:76:57:
                    2c:4d:f7:20:cd:d0:42:5d:b7:39:83:11:cd:82:a5:
                    dd:01:67:db:e2:d5:92:88:3d:db:ac:6a:2d:5e:b1:
                    1b:4b:8b:8d:1a:4a:5d:1a:7c:55:8e:f0:f7:ea:af:
                    a6:7b:03:55:eb:21:31:65:a8:42:21:1b:92:44:a5:
                    14:4e:d9:7e:4e:a6:f4:5c:75:21:f6:b7:1a:84:85:
                    ba:14:56:ea:13:ea:33:94:87:70:dd:f7:31:9c:d9:
                    e4:ec:34:5f:aa:20:e9:00:d3:66:eb:54:8d:cb:c3:
                    bc:2e:07:fa:a7:f3:0d:1a:69:18:37:9a:b2:6c:b1:
                    be:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:86:45:28:E7:53:2D:14:40:AB:6A:62:1D:E4:B0:89:A9:04:FE:24
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/eIZFKOdTLRRAq2piHeSwiakE_iQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:5f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         36:7a:69:34:83:e8:ea:fa:72:c5:59:be:f1:40:b0:62:03:e2:
         2b:1f:80:68:07:f6:37:1b:fd:8e:6c:5e:ed:06:eb:a3:bb:ae:
         46:41:a0:3f:8c:99:ee:0f:3f:be:45:3a:32:29:ac:5f:34:13:
         6f:53:cb:a3:6f:d8:c6:6a:b3:1b:6b:86:99:db:c4:90:34:fc:
         c6:2d:d8:07:dd:93:4b:62:08:86:c7:1e:bd:62:f2:88:ae:05:
         76:d4:8a:2a:e2:2f:af:31:e2:e9:b1:3f:77:73:77:f1:e6:82:
         ec:e4:a1:50:f8:fb:bc:c5:65:bf:56:9b:78:34:70:56:8d:5b:
         24:02:ae:83:91:88:9b:cd:1a:57:b8:ff:3b:3d:86:be:54:79:
         34:cd:80:8a:d2:0f:8e:03:39:b4:8a:ba:c2:13:60:6b:97:eb:
         23:e5:e1:ef:c0:32:01:28:b4:30:fc:14:e9:54:8c:5e:f0:13:
         61:a7:02:27:f4:4a:0c:4d:c7:54:9d:37:54:c8:de:bd:bd:67:
         2e:d1:71:0b:62:c2:cb:a8:c6:39:a8:c1:2b:bd:39:4b:9e:32:
         7c:d2:de:1a:28:cd:c7:3a:22:f4:c2:41:a1:e3:75:72:2c:62:
         4b:ff:4c:1f:51:38:03:b5:83:7f:5f:8d:1e:2e:f1:45:16:27:
         92:28:fe:78
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICArcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNDA0MzAw
MTM5MzBaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDc4ODY0NTI4RTc1MzJE
MTQ0MEFCNkE2MjFERTRCMDg5QTkwNEZFMjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDsPSActFWyvsWiOTjF9Z5nmS8cAmXtIBTOiHjb2ndeWDfjb/VP
IeFWH2wuRf311iPVMMEmj7pHkXUYb2IuqouO+gOwbNnLNKZweqA8d7ng0Otd1ad3
7B5Fpca/B5HPv0svZOdIl7VTFzqYVupV4qX+KAZAs043VWxCxRsbMB5+pglBwY92
VyxN9yDN0EJdtzmDEc2Cpd0BZ9vi1ZKIPdusai1esRtLi40aSl0afFWO8Pfqr6Z7
A1XrITFlqEIhG5JEpRRO2X5OpvRcdSH2txqEhboUVuoT6jOUh3Dd9zGc2eTsNF+q
IOkA02brVI3Lw7wuB/qn8w0aaRg3mrJssb6PAgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQUeIZFKOdTLRRAq2piHeSwiakE/iQwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS9lSVpGS09kVExSUkFxMnBpSGVTd2lha0VfaVEu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAa18wDQYJKoZIhvcNAQELBQADggEBADZ6aTSD6Or6csVZvvFA
sGID4isfgGgH9jcb/Y5sXu0G66O7rkZBoD+Mme4PP75FOjIprF80E29Ty6Nv2MZq
sxtrhpnbxJA0/MYt2Afdk0tiCIbHHr1i8oiuBXbUiiriL68x4umxP3dzd/Hmguzk
oVD4+7zFZb9Wm3g0cFaNWyQCroORiJvNGle4/zs9hr5UeTTNgIrSD44DObSKusIT
YGuX6yPl4e/AMgEotDD8FOlUjF7wE2GnAif0SgxNx1SdN1TI3r29Zy7RcQtiwsuo
xjmowSu9OUueMnzS3hoozcc6IvTCQaHjdXIsYkv/TB9ROAO1g39fjR4u8UUWJ5Io
/ng=
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:31 2024 by rpki-client on console-ams.rpki-client.org