Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/hwMQb8_Av2ccPy87cHdF33ec6fU.roa
File:                     hwMQb8_Av2ccPy87cHdF33ec6fU.roa (raw, json)
Hash identifier:          jxem47B2NnTRI3zByQpo+XPJVQA887BaK+53PadWiWk=
Subject key identifier:   87:03:10:6F:CF:C0:BF:67:1C:3F:2F:3B:70:77:45:DF:77:9C:E9:F5
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       02E1
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/hwMQb8_Av2ccPy87cHdF33ec6fU.roa
Signing time:             Tue 30 Apr 2024 01:44:59 +0000
ROA not before:           Tue 30 Apr 2024 01:44:59 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:70:9::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 20:52:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 737 (0x2e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 01:44:59 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=8703106FCFC0BF671C3F2F3B707745DF779CE9F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3e:76:a1:9b:d9:90:1f:65:76:3d:91:9b:6b:
                    44:47:63:ec:c5:d0:ca:10:5b:3e:53:bc:5d:8e:21:
                    d3:63:9b:2b:4a:72:09:92:c1:31:f6:a0:a6:3c:cc:
                    09:8a:c5:fc:9d:87:b8:b2:98:4b:5f:56:bf:cf:c3:
                    9c:c0:c1:16:f5:b1:d0:83:6e:64:54:57:31:3d:91:
                    db:3a:51:4d:f6:3b:ac:cc:c7:e8:0c:eb:e9:07:2a:
                    c1:77:e3:2b:6e:4d:a3:63:35:4a:a9:56:ef:41:db:
                    f0:d0:9a:1f:37:69:af:8e:11:f6:04:5a:a4:21:7c:
                    be:3e:65:10:3b:07:ad:a1:8f:c8:5b:3c:ac:c0:07:
                    2f:f2:8d:fc:8d:38:54:61:69:51:03:a3:26:8b:a3:
                    ea:d3:82:85:bc:3d:35:8b:49:db:14:b8:f5:a9:80:
                    2c:86:de:a4:a9:b1:0d:d8:62:4c:0e:e0:f1:86:90:
                    05:85:97:af:e1:4e:27:a8:23:b5:8e:96:dc:56:2e:
                    c7:40:ec:12:22:d5:36:3e:73:bc:de:9f:60:06:94:
                    79:bf:54:f6:63:fd:8a:af:9a:77:a1:07:7d:a3:ab:
                    35:32:1a:da:48:c3:75:bd:24:95:96:f2:37:c7:e4:
                    49:c8:3a:2b:af:30:1e:64:36:8c:ee:e4:f0:2e:2b:
                    3a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:03:10:6F:CF:C0:BF:67:1C:3F:2F:3B:70:77:45:DF:77:9C:E9:F5
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/hwMQb8_Av2ccPy87cHdF33ec6fU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:70:9::/48

    Signature Algorithm: sha256WithRSAEncryption
         95:11:9b:11:9b:42:1a:05:e6:f6:fd:94:50:48:a7:16:17:c1:
         95:2a:f4:7a:32:2b:ff:90:4c:33:a8:76:dd:35:cb:6a:17:52:
         3f:89:10:c9:a6:36:64:ff:85:f4:63:3d:03:06:97:c7:05:1a:
         28:bd:b4:86:39:25:61:9b:b7:c3:89:61:be:1f:21:e2:4e:41:
         56:99:32:1a:49:f1:6b:11:ec:36:a8:c8:7c:64:9f:ea:51:12:
         b0:49:f0:98:c5:1c:31:0f:3a:72:40:77:7f:c2:96:d3:cb:07:
         4f:45:18:87:a2:ef:d2:e8:ac:34:cc:95:c3:d6:ca:83:c9:2a:
         5c:e5:aa:70:04:bb:8a:f8:c9:dc:9c:a7:bd:cd:62:55:cc:f8:
         2c:d6:79:c4:5c:94:cd:0f:cb:bc:6e:00:be:12:30:59:e9:5b:
         6f:64:e5:10:65:ab:57:36:b3:69:87:b9:53:82:5c:0b:6e:78:
         0e:b5:63:86:9b:47:a2:9c:eb:88:b8:9c:d8:99:a0:0d:fd:21:
         1b:98:06:24:bb:26:0d:12:a5:63:43:d3:8f:93:65:b9:b3:cf:
         0d:bb:84:5e:51:74:ce:81:82:e8:74:71:75:31:1a:c9:9e:da:
         57:e2:a5:ba:92:06:45:37:2b:5f:9b:dc:d1:f9:2d:a1:f6:f0:
         45:2b:57:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 21:52:34 2024 by rpki-client on console-fra.rpki-client.org