Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/gNJ19JueEHUu5s0hYxCdBga_sZs.roa
File:                     gNJ19JueEHUu5s0hYxCdBga_sZs.roa (raw, json)
Hash identifier:          a7OJpMUeezTy3tNZvJF9J4CrmDnKNaJmR4ZraaQwO1I=
Subject key identifier:   80:D2:75:F4:9B:9E:10:75:2E:E6:CD:21:63:10:9D:06:06:BF:B1:9B
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0352
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/gNJ19JueEHUu5s0hYxCdBga_sZs.roa
Signing time:             Tue 30 Apr 2024 01:56:50 +0000
ROA not before:           Tue 30 Apr 2024 01:56:50 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:ce00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 22:26:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 850 (0x352)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 01:56:50 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=80D275F49B9E10752EE6CD2163109D0606BFB19B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:8b:5f:0a:2f:b6:c2:31:1f:1e:3e:b1:6d:e9:
                    d9:55:d5:68:d4:c9:28:48:c5:61:50:a8:62:d7:1d:
                    c5:b8:d4:a7:74:eb:28:7c:65:cc:95:b0:93:f0:a7:
                    6d:b4:29:ad:09:f8:68:2c:30:30:62:8c:28:16:2c:
                    8a:10:ce:f0:7a:38:5a:5c:96:90:30:25:ea:8a:06:
                    4e:ad:cc:e4:f7:f8:ff:76:74:46:cb:7b:aa:c0:f5:
                    d4:d7:e8:1d:c6:bb:b1:f8:a0:78:ef:e2:82:fa:b6:
                    88:04:57:0e:fe:ab:9e:f7:8f:40:84:62:46:2c:ab:
                    dd:b9:6f:99:a5:3e:c9:7e:9f:f6:d4:e9:f9:ab:67:
                    63:7f:f8:1b:8a:81:98:99:65:f5:0e:d2:b9:6d:19:
                    69:32:de:9f:b2:c2:ba:7b:bb:c9:8a:6c:5f:e5:ac:
                    7c:76:57:64:19:fd:b5:b0:0c:92:cf:bf:8b:71:84:
                    a0:07:6e:60:3b:dc:0b:58:51:8e:49:3a:3c:fa:60:
                    e2:f6:44:0e:14:b3:f5:0a:b1:28:91:53:f4:da:10:
                    1f:48:80:b9:b4:b3:07:37:98:5b:4f:fe:84:11:c4:
                    7d:fe:ea:a0:d1:ca:4e:08:2c:cd:0b:ad:e6:78:f4:
                    4b:46:07:fe:b2:57:af:25:e1:32:65:38:e6:aa:1f:
                    7b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:D2:75:F4:9B:9E:10:75:2E:E6:CD:21:63:10:9D:06:06:BF:B1:9B
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/gNJ19JueEHUu5s0hYxCdBga_sZs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:ce00::/40

    Signature Algorithm: sha256WithRSAEncryption
         63:97:0e:fc:41:3c:f9:83:12:c0:e5:9e:8f:4d:2b:e3:3c:4f:
         4f:9b:a2:06:e4:7b:8b:80:a2:04:a7:dc:a2:90:e9:ea:ce:fa:
         04:f7:d4:d6:09:a6:94:c7:37:1d:bf:10:37:40:63:ce:a6:b8:
         da:8c:35:e9:87:c5:ef:2d:92:05:9c:64:a3:c4:e4:7c:1b:0f:
         38:bd:8b:a1:87:a7:f2:51:10:f1:d2:7e:5e:e9:19:33:c1:3a:
         ee:eb:85:28:15:a8:01:12:ff:12:8f:5b:8d:2e:5e:c1:9a:f4:
         1c:17:af:2e:0e:78:4e:61:fa:21:86:65:fd:16:ee:f6:2e:a6:
         71:21:6b:69:ba:02:f2:ae:27:f6:b6:e8:32:79:f9:91:45:80:
         8f:48:c1:bb:85:dd:8d:b2:3b:8b:56:5e:85:66:fa:79:bc:2c:
         30:df:a8:2c:08:44:b5:3e:e1:1d:98:8d:e1:27:39:a2:c4:bb:
         0f:ca:07:dc:4e:be:10:61:9f:93:4f:bc:aa:77:5e:51:8c:75:
         41:93:64:43:b7:f4:9e:ad:c1:98:86:fd:c7:08:ac:db:39:50:
         ed:23:e4:52:77:37:24:56:2a:2d:2a:68:03:0f:a6:2a:17:34:
         f2:6d:ee:55:9e:31:b3:58:c3:ec:4b:fb:29:52:b4:67:1c:33:
         4d:ba:6e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 00:11:43 2024 by rpki-client on console-ams.rpki-client.org