Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/hs0DdpEc3JNu1zHbwrd_ZB5eDxw.roa
File:                     hs0DdpEc3JNu1zHbwrd_ZB5eDxw.roa (raw, json)
Hash identifier:          uWHpn3TTQg5LgNkyNTQrTsw/imvo/X5yLjMptBh5tMs=
Subject key identifier:   86:CD:03:76:91:1C:DC:93:6E:D7:31:DB:C2:B7:7F:64:1E:5E:0F:1C
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0382
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/hs0DdpEc3JNu1zHbwrd_ZB5eDxw.roa
Signing time:             Tue 30 Apr 2024 02:00:06 +0000
ROA not before:           Tue 30 Apr 2024 02:00:06 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:60:f00e::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 898 (0x382)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 02:00:06 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=86CD0376911CDC936ED731DBC2B77F641E5E0F1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:58:d5:32:5c:ad:92:39:38:9f:e5:4e:e9:c0:
                    55:65:ce:f9:28:d2:ba:b0:b8:0d:de:ca:c8:e9:d3:
                    5a:87:54:7e:3e:45:c3:36:42:6d:8f:e6:ad:63:21:
                    ce:f7:91:a5:f4:95:7b:95:a6:52:d1:a5:6d:6f:46:
                    c8:3c:71:52:89:08:8d:0b:b4:04:57:99:9c:89:d1:
                    60:c1:fc:fd:04:76:a0:1b:78:b1:b2:4b:8b:e6:73:
                    25:79:c6:20:02:bc:ed:a7:e2:eb:99:dc:08:4a:88:
                    e7:0d:05:53:19:d0:77:48:c7:94:a2:1d:66:82:e2:
                    9b:ff:36:c7:04:a8:f6:61:5c:99:03:04:1a:d2:d5:
                    26:dd:64:c5:4f:43:ce:83:bf:1d:9c:e8:50:bb:95:
                    60:91:5d:c6:bf:5c:da:c0:a9:c2:87:46:d7:66:1b:
                    a4:18:16:9d:56:4b:27:9d:4a:62:b5:cd:90:9b:17:
                    bb:e0:8a:93:40:51:78:ea:ff:67:0e:51:e0:07:c4:
                    ca:e7:1f:4e:01:c8:50:f2:ae:7d:d4:6c:c5:c4:24:
                    7b:33:fd:5c:3d:6b:82:0e:0d:84:ce:69:aa:70:2d:
                    23:c8:fc:cc:f3:b5:c7:88:c9:c8:bc:8b:f8:19:97:
                    4b:87:bf:ca:b4:c9:81:b5:8b:4b:ae:0f:f3:3a:0c:
                    a4:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:CD:03:76:91:1C:DC:93:6E:D7:31:DB:C2:B7:7F:64:1E:5E:0F:1C
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/hs0DdpEc3JNu1zHbwrd_ZB5eDxw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:60:f00e::/48

    Signature Algorithm: sha256WithRSAEncryption
         61:5d:ba:e1:b4:88:2a:51:e8:b4:30:be:30:9e:64:68:7e:e8:
         4b:2c:3d:4e:0c:95:9c:ce:c3:0f:d5:1d:2c:fa:7c:96:5d:2b:
         7f:27:5f:e6:82:62:f2:e7:64:01:07:94:96:fb:a8:49:43:a3:
         56:df:97:81:53:af:11:fd:1f:a7:85:b5:d3:37:ea:dc:e3:7e:
         97:3e:2b:e0:15:c1:25:94:44:7a:20:b3:9d:f7:35:a1:88:64:
         e7:a8:8c:d2:27:1b:0a:19:85:41:2d:cc:cc:09:67:8b:00:dc:
         c9:61:b8:22:8e:ea:fa:e8:c7:fc:52:ae:17:10:c6:b5:9e:10:
         88:e1:63:16:3a:c7:3b:e4:5d:34:61:92:f4:a8:28:de:a1:1e:
         4c:9c:f5:59:3b:f9:ff:fd:b9:05:0b:03:2a:d2:30:91:aa:34:
         8e:79:02:1f:9a:61:94:3b:45:a9:7b:06:d6:d4:ba:16:fb:55:
         69:8e:4d:0c:d8:03:82:a1:59:5b:c4:d8:7b:0e:28:8d:23:98:
         ed:97:f4:1a:a3:f1:14:27:00:4d:53:81:66:ff:9c:3a:f8:49:
         ef:f5:45:77:30:d7:06:c1:7b:5b:fb:1f:31:11:2a:b0:39:89:
         8d:00:2c:c4:f9:b9:12:f5:30:0d:f0:c6:5c:cf:84:47:48:5a:
         2a:a1:7b:08
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgICA4IwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNDA0MzAw
MjAwMDZaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDg2Q0QwMzc2OTExQ0RD
OTM2RUQ3MzFEQkMyQjc3RjY0MUU1RTBGMUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDFWNUyXK2SOTif5U7pwFVlzvko0rqwuA3eysjp01qHVH4+RcM2
Qm2P5q1jIc73kaX0lXuVplLRpW1vRsg8cVKJCI0LtARXmZyJ0WDB/P0EdqAbeLGy
S4vmcyV5xiACvO2n4uuZ3AhKiOcNBVMZ0HdIx5SiHWaC4pv/NscEqPZhXJkDBBrS
1SbdZMVPQ86Dvx2c6FC7lWCRXca/XNrAqcKHRtdmG6QYFp1WSyedSmK1zZCbF7vg
ipNAUXjq/2cOUeAHxMrnH04ByFDyrn3UbMXEJHsz/Vw9a4IODYTOaapwLSPI/Mzz
tceIyci8i/gZl0uHv8q0yYG1i0uuD/M6DKRXAgMBAAGjggIrMIICJzAdBgNVHQ4E
FgQUhs0DdpEc3JNu1zHbwrd/ZB5eDxwwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS9oczBEZHBFYzNKTnUxekhid3JkX1pCNWVEeHcu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAJAoAYPAOMA0GCSqGSIb3DQEBCwUAA4IBAQBhXbrhtIgqUei0ML4w
nmRofuhLLD1ODJWczsMP1R0s+nyWXSt/J1/mgmLy52QBB5SW+6hJQ6NW35eBU68R
/R+nhbXTN+rc436XPivgFcEllER6ILOd9zWhiGTnqIzSJxsKGYVBLczMCWeLANzJ
Ybgijur66Mf8Uq4XEMa1nhCI4WMWOsc75F00YZL0qCjeoR5MnPVZO/n//bkFCwMq
0jCRqjSOeQIfmmGUO0WpewbW1LoW+1Vpjk0M2AOCoVlbxNh7DiiNI5jtl/Qao/EU
JwBNU4Fm/5w6+Env9UV3MNcGwXtb+x8xESqwOYmNACzE+bkS9TAN8MZcz4RHSFoq
oXsI
-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:07 2024 by rpki-client on console-fra.rpki-client.org