Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/g1-VaM7KfdPEEKLEMovYwt7QX40.roa
File:                     g1-VaM7KfdPEEKLEMovYwt7QX40.roa (raw, json)
Hash identifier:          eMUZjNvwh3FDRmmXRqHZ2gYlaWxylpgiIjIL+hOfAyQ=
Subject key identifier:   83:5F:95:68:CE:CA:7D:D3:C4:10:A2:C4:32:8B:D8:C2:DE:D0:5F:8D
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       02C2
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/g1-VaM7KfdPEEKLEMovYwt7QX40.roa
Signing time:             Tue 30 Apr 2024 01:39:34 +0000
ROA not before:           Tue 30 Apr 2024 01:39:34 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:f800::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 706 (0x2c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 01:39:34 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=835F9568CECA7DD3C410A2C4328BD8C2DED05F8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:b5:80:b2:cc:fa:8f:86:c6:43:09:c1:1d:53:
                    3d:46:de:2a:a5:57:4e:40:26:b7:69:c2:77:f0:0c:
                    c1:c3:c2:c5:a2:7f:fe:c8:2a:8a:67:69:1c:e2:8b:
                    6d:1c:7e:6f:d0:78:ba:fb:bb:9d:96:ea:7c:c8:1d:
                    46:f0:c0:bd:70:84:b2:31:f2:de:9b:07:9b:3e:9e:
                    9f:50:b9:16:9b:90:2e:52:4e:2d:99:14:3f:fd:a1:
                    55:2f:48:1a:0a:4a:fd:1d:69:8d:21:e6:5f:d2:7a:
                    a7:49:78:07:0a:b6:46:e0:4f:5d:4a:0d:90:a8:b3:
                    eb:94:25:54:8b:4b:7e:4e:70:8c:15:cc:34:6e:ab:
                    d4:aa:eb:ea:a9:7d:72:fb:2f:5f:13:6a:a8:d0:73:
                    f9:9e:05:de:91:8e:52:54:ea:80:ea:b3:29:dc:b1:
                    f1:1c:8d:09:e7:a7:8b:90:19:4b:5c:07:cc:0f:cc:
                    be:b4:68:92:9d:4a:0c:e6:7f:08:5c:52:a4:6d:ac:
                    22:96:8f:58:f9:05:e3:fd:63:98:a2:01:16:79:57:
                    98:03:0f:c4:a4:14:ea:48:6b:c9:33:43:88:3b:e0:
                    eb:41:06:30:0d:a4:43:82:6b:b4:04:bf:43:60:fc:
                    e4:4e:c2:7e:bc:ae:61:33:e3:9a:b4:4b:fa:5b:6f:
                    c2:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:5F:95:68:CE:CA:7D:D3:C4:10:A2:C4:32:8B:D8:C2:DE:D0:5F:8D
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/g1-VaM7KfdPEEKLEMovYwt7QX40.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:f800::/40

    Signature Algorithm: sha256WithRSAEncryption
         13:0e:0a:b8:de:f7:84:1c:46:93:f8:b4:8e:21:b7:ab:7c:eb:
         d3:5b:fe:6f:4f:5f:29:9f:30:91:fe:26:6b:2c:21:97:50:fb:
         56:7f:fe:eb:6d:7e:16:ec:ee:e0:b8:2a:b1:0f:6f:1d:bd:ed:
         e7:97:79:4c:68:99:64:55:5b:23:23:57:65:93:b0:2f:71:10:
         13:97:98:ba:49:6b:cf:85:18:c1:de:17:13:2b:e6:b0:d3:c4:
         b9:fb:9f:c8:b7:3d:32:60:e9:de:44:26:63:6f:92:77:0a:30:
         73:51:3f:22:bc:7a:8e:06:5e:e7:ab:83:6a:b6:30:35:10:73:
         bd:87:1f:6e:d3:a5:47:ec:b2:68:da:86:0b:87:ea:ee:28:5a:
         6e:24:3c:60:0a:7d:56:4d:2f:ce:58:fd:bc:1c:fd:3f:38:e8:
         e7:7f:d0:72:bc:98:91:dd:eb:59:6e:89:da:5d:9f:90:aa:13:
         70:bb:0c:b3:a9:46:27:83:bc:96:40:e6:87:46:ec:e8:2d:6d:
         6d:e4:4b:1b:2c:c2:74:4b:1a:86:36:e1:28:f9:82:61:25:d2:
         a4:4a:19:3e:bb:07:46:c2:64:45:a1:1f:cf:84:c7:19:6a:1a:
         e0:8d:31:ab:fa:e5:1b:de:19:46:e7:a3:3a:03:a4:10:d7:62:
         2a:96:c0:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:13 2024 by rpki-client on console-fra.rpki-client.org