Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/fJvxBYYA8hLajQQsGLZTHW6-iFY.roa
File:                     fJvxBYYA8hLajQQsGLZTHW6-iFY.roa (raw, json)
Hash identifier:          uUnL3NHaXv38fLbW0yfVNXg4DNGZGUnl7mSURj7K8Co=
Subject key identifier:   7C:9B:F1:05:86:00:F2:12:DA:8D:04:2C:18:B6:53:1D:6E:BE:88:56
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       02E7
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/fJvxBYYA8hLajQQsGLZTHW6-iFY.roa
Signing time:             Tue 30 Apr 2024 01:45:01 +0000
ROA not before:           Tue 30 Apr 2024 01:45:01 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:fd00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 743 (0x2e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 01:45:01 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=7C9BF1058600F212DA8D042C18B6531D6EBE8856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ca:e5:ef:54:e3:ab:b0:da:de:67:45:c1:4a:
                    a9:21:c8:fc:a2:f7:9e:f9:95:47:38:ee:68:3d:81:
                    08:b7:c2:d3:cd:a0:96:34:5d:e2:a8:69:b1:bc:c2:
                    76:06:5b:82:04:c9:c6:5c:ea:db:80:3e:8b:d1:0a:
                    58:f8:13:4e:cc:6a:fd:e7:0c:d9:5b:a8:2b:27:67:
                    88:78:42:84:32:3d:47:a4:d9:16:d6:6a:54:41:f9:
                    56:66:4f:5b:12:9a:fe:b8:9b:0b:2f:ff:c9:bc:13:
                    2b:ae:68:23:2e:3b:92:e3:d1:d4:11:50:fe:a9:28:
                    fc:37:be:69:2a:02:c8:92:52:5f:e5:5d:9b:6c:1f:
                    ab:03:29:54:c0:52:28:3d:06:ea:24:38:47:8b:97:
                    4e:c0:ee:03:35:13:66:a3:f2:39:65:37:9b:5a:ff:
                    9f:e7:46:61:46:f5:28:4a:2e:34:6b:90:60:32:2c:
                    ca:9b:27:0d:79:7e:dc:97:8a:11:5a:30:35:0c:eb:
                    bc:95:f0:01:6f:44:1c:d9:57:d5:2c:85:35:d8:d1:
                    42:9b:79:53:3c:52:8d:e1:18:d6:38:da:7d:c6:52:
                    e4:c1:a6:7c:49:e7:45:2f:14:90:17:53:2f:bb:82:
                    67:99:39:da:ab:b6:b5:0d:14:e5:e2:cb:ca:25:c8:
                    5e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:9B:F1:05:86:00:F2:12:DA:8D:04:2C:18:B6:53:1D:6E:BE:88:56
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/fJvxBYYA8hLajQQsGLZTHW6-iFY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:fd00::/40

    Signature Algorithm: sha256WithRSAEncryption
         06:29:b0:79:7d:57:7d:9a:fa:aa:fc:4a:53:39:9e:af:b1:bc:
         0c:eb:ec:74:58:a0:0d:cd:98:40:43:04:64:f8:ea:ad:9b:39:
         60:83:09:be:7c:51:a1:ce:fa:a6:0b:46:09:1c:bc:0b:8c:01:
         22:0c:2d:8f:59:6d:73:ef:32:3d:0b:e0:e9:d8:73:2a:8a:0c:
         cc:3f:61:3c:df:19:cc:b7:01:c7:15:cb:92:a1:a4:fb:83:d2:
         cd:28:a2:96:ad:30:7d:2f:db:61:c5:09:2f:09:9e:10:7b:6e:
         57:39:75:51:40:7a:78:01:74:4a:89:42:8d:e4:91:aa:07:6d:
         e1:53:f5:88:0a:ea:a7:00:26:bd:fc:77:c0:d0:a6:67:09:f6:
         00:dd:5e:5a:2f:c4:99:7e:f2:ae:c7:86:24:09:70:59:e4:b2:
         47:94:7b:ad:23:ed:0a:64:09:e6:e7:13:ca:50:6b:e2:ea:3d:
         6e:a1:e6:fe:3e:a4:af:06:4f:61:f3:5b:5b:06:16:82:12:9b:
         09:87:18:bc:10:5b:6c:7a:78:01:5e:b6:ea:24:aa:a0:82:b5:
         bc:26:6b:39:2a:6e:50:e2:ba:27:e6:aa:ee:16:4a:6d:eb:55:
         56:85:ee:96:48:7d:4e:b5:c1:29:03:ab:80:af:4c:bd:e5:eb:
         73:2f:a4:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:20 2024 by rpki-client on console-ams.rpki-client.org