Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/iA9_WLxvXBDGQXOAQOyZbcwk_k0.roa
File:                     iA9_WLxvXBDGQXOAQOyZbcwk_k0.roa (raw, json)
Hash identifier:          2U+VkQt6j7cC34lg4fMJtqLa9yAKjrxvPL9zK+pakgc=
Subject key identifier:   88:0F:7F:58:BC:6F:5C:10:C6:41:73:80:40:EC:99:6D:CC:24:FE:4D
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       034B
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/iA9_WLxvXBDGQXOAQOyZbcwk_k0.roa
Signing time:             Tue 30 Apr 2024 01:56:47 +0000
ROA not before:           Tue 30 Apr 2024 01:56:47 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:4900::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 20:52:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 843 (0x34b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 01:56:47 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=880F7F58BC6F5C10C641738040EC996DCC24FE4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1b:f1:84:83:86:10:a7:ff:b5:0d:fe:bb:cf:
                    4f:0f:20:da:68:a1:f5:fc:25:2e:bf:a2:4b:f1:b9:
                    b1:53:69:ef:89:f0:35:83:63:c5:af:28:a0:35:0a:
                    a2:19:8b:39:49:14:d8:9b:88:44:dc:0e:cd:9d:62:
                    db:b9:23:f5:b8:46:4d:59:89:5b:88:dd:db:df:36:
                    18:a5:77:f2:ed:12:ab:a9:dc:43:9d:bd:6e:88:83:
                    6d:81:95:3d:d0:9c:17:56:ef:6e:27:b6:4d:0e:19:
                    43:9d:86:b0:82:87:e8:99:dc:3c:4e:2e:74:01:15:
                    54:93:c2:bb:e2:df:c4:34:07:14:44:35:85:0a:5b:
                    8b:3f:da:df:9b:88:d7:85:6e:68:12:94:34:d0:2c:
                    cf:b7:2a:45:23:a3:fb:42:85:b0:16:24:a9:a1:3e:
                    db:91:c6:22:fc:4e:77:29:70:3b:8c:b8:ae:fb:a0:
                    ca:28:58:3d:ed:d1:8b:02:da:67:a9:f0:f3:c1:20:
                    d0:5f:9c:98:58:53:74:c6:e3:a4:01:52:1e:ff:39:
                    62:c4:57:97:17:f2:08:97:0b:0a:fc:09:b2:7d:09:
                    bf:4f:5b:b7:24:6d:9d:3a:c9:6f:1b:9c:c6:e4:63:
                    07:3f:5d:1f:22:d9:85:2d:84:b8:3d:4e:bf:b9:73:
                    ce:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:0F:7F:58:BC:6F:5C:10:C6:41:73:80:40:EC:99:6D:CC:24:FE:4D
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/iA9_WLxvXBDGQXOAQOyZbcwk_k0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:4900::/40

    Signature Algorithm: sha256WithRSAEncryption
         16:b3:53:7d:05:18:e8:98:7d:60:d0:65:37:15:26:9b:80:9b:
         f6:01:03:89:e0:6e:21:2d:9c:b5:49:03:60:24:75:62:39:fe:
         d8:e4:63:19:f4:68:b0:6f:e1:07:2f:1b:f8:85:e2:01:e8:ff:
         a3:7a:40:bf:76:b9:96:69:ea:bf:6f:fc:93:ae:ed:e8:fe:f3:
         cf:5c:1f:66:91:8f:26:f7:e6:04:ab:6d:9e:d8:6c:ce:1c:10:
         e2:7c:c2:77:ae:17:1d:ab:4e:2e:2e:fb:86:d4:80:67:43:b5:
         3f:d2:7f:bb:ff:a4:eb:4d:10:54:9e:93:2b:f5:d8:6c:50:cf:
         34:25:7c:88:f4:ca:1b:bb:53:7f:a5:fc:80:06:c5:8a:34:71:
         1d:24:54:30:56:c7:73:67:dd:9c:d5:0e:b9:1d:c7:40:ad:b8:
         ca:4f:54:75:48:ab:36:b5:3c:ad:1d:71:83:f1:c9:a6:85:51:
         e3:67:7f:94:bf:64:b8:fd:b5:4e:a5:c8:f4:b1:2d:9f:4a:58:
         c6:3c:56:48:af:c6:dc:ae:cc:22:e2:cb:91:bb:81:ca:55:b9:
         34:76:a9:4b:3a:09:2c:36:37:58:83:e5:e4:f0:4f:8c:eb:47:
         1b:2e:d3:96:b2:89:d9:08:d9:08:5e:73:19:71:2a:af:9c:ca:
         eb:bd:4e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 21:52:34 2024 by rpki-client on console-fra.rpki-client.org