Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/hEg4izqKmn5aFdn9S08lOPKfVUE.roa
File:                     hEg4izqKmn5aFdn9S08lOPKfVUE.roa (raw, json)
Hash identifier:          QD3RIhDDDyuhA269fWxh0K03TUNwR9TucOyytjUE6xU=
Subject key identifier:   84:48:38:8B:3A:8A:9A:7E:5A:15:D9:FD:4B:4F:25:38:F2:9F:55:41
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       025F
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/hEg4izqKmn5aFdn9S08lOPKfVUE.roa
Signing time:             Tue 22 Aug 2023 05:42:27 +0000
ROA not before:           Tue 22 Aug 2023 05:42:27 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:61:4e00::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 22:26:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 607 (0x25f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Aug 22 05:42:27 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=8448388B3A8A9A7E5A15D9FD4B4F2538F29F5541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:72:3b:3e:64:27:cf:81:88:5c:cd:9f:c6:29:
                    56:01:fb:25:5f:a6:5a:65:f4:1d:b0:82:05:05:bf:
                    cb:8c:69:ff:a7:6e:a4:fb:a4:a2:84:f5:6c:4d:68:
                    a4:79:5e:e1:61:1d:41:ae:78:4b:7c:6f:3d:85:6a:
                    58:da:21:48:a2:32:00:e9:6d:dc:31:ff:1c:98:17:
                    cb:61:74:c2:2b:1b:db:10:42:3d:e4:e6:77:b9:03:
                    f4:29:be:10:59:63:95:10:d1:f9:13:f3:94:21:a8:
                    d0:e8:dc:06:97:b4:6d:04:fa:11:0c:e5:4d:8e:16:
                    c4:c7:3c:e0:b1:b1:29:fa:47:4c:85:2a:e7:06:6f:
                    17:e4:d1:59:5b:60:6f:c1:6a:ce:8f:07:b6:37:f3:
                    4d:53:bb:f6:9e:47:7f:18:3a:f6:f9:62:96:45:b3:
                    b3:82:7b:c4:76:20:ac:96:4d:90:1c:9f:b9:1b:d4:
                    c6:84:06:5c:b1:31:9b:d0:7e:53:ea:d9:cd:82:cb:
                    eb:14:d0:fc:ae:e2:84:76:57:42:9b:d9:82:46:3f:
                    72:f9:29:c8:c9:1d:e7:77:90:98:73:d1:05:51:fa:
                    cc:d6:92:75:06:6d:9a:3a:29:a8:e9:bf:1b:31:69:
                    84:a7:e0:65:6a:4d:42:b5:78:a9:f4:08:f3:cf:ef:
                    0d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:48:38:8B:3A:8A:9A:7E:5A:15:D9:FD:4B:4F:25:38:F2:9F:55:41
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/hEg4izqKmn5aFdn9S08lOPKfVUE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:61:4e00::/48

    Signature Algorithm: sha256WithRSAEncryption
         4b:0f:fb:d4:97:10:b8:e7:a3:6a:a1:d0:c3:78:e7:5a:8e:22:
         bb:f1:b9:0d:d7:a0:34:1f:76:68:bf:6b:8f:1a:67:55:21:e7:
         8d:68:4e:96:d0:16:1c:79:c4:80:59:06:b4:e2:90:ba:7a:7f:
         9d:4d:b5:e6:84:1a:6a:ca:93:91:2f:0c:0d:8b:9d:5a:d6:9f:
         6b:f0:1f:30:cb:15:e8:04:1d:1c:83:b7:d5:c3:32:c5:95:b4:
         5b:63:0d:0c:d3:ed:f0:fc:a0:47:7c:c3:c6:43:77:8a:9e:d9:
         9e:a4:d1:2a:47:7e:e9:f3:e7:ce:7d:4d:c6:dc:3e:ba:6f:07:
         de:fb:be:89:fd:f3:ab:c0:5a:f6:53:55:9b:7b:a2:60:bc:1b:
         f3:86:5b:e8:f1:98:54:e5:1b:33:fd:8e:f8:79:43:ed:ba:e5:
         8d:87:af:f5:00:69:9b:2a:49:77:e0:0a:75:f3:fe:51:d8:19:
         a2:a7:b0:b6:f9:f1:e4:34:b9:a6:cc:a2:66:1f:1d:20:a1:a0:
         d7:62:a1:28:aa:f4:7e:9f:85:f4:d2:c2:fa:de:a9:8b:e5:b2:
         70:c8:fb:9c:c4:12:af:c0:d5:f1:23:fd:e1:85:a6:d1:79:13:
         04:ad:19:d2:a0:f7:1d:59:25:7e:b6:af:99:31:57:3b:84:99:
         4e:a5:b1:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 00:11:43 2024 by rpki-client on console-ams.rpki-client.org