Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/incdmZmh6u-JyoHhOpEeKrq8LH4.roa
File:                     incdmZmh6u-JyoHhOpEeKrq8LH4.roa (raw, json)
Hash identifier:          UMaHs2f6KHv4gb4ygUxHJHAjMZLFZYIoOp7ZzYud958=
Subject key identifier:   8A:77:1D:99:99:A1:EA:EF:89:CA:81:E1:3A:91:1E:2A:BA:BC:2C:7E
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0355
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/incdmZmh6u-JyoHhOpEeKrq8LH4.roa
Signing time:             Tue 30 Apr 2024 01:56:51 +0000
ROA not before:           Tue 30 Apr 2024 01:56:51 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:3:bcc::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 22 Jun 2024 01:32:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 853 (0x355)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 01:56:51 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=8A771D9999A1EAEF89CA81E13A911E2ABABC2C7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6c:77:5a:28:c6:4d:15:a4:ef:2a:e1:7c:39:
                    82:4b:90:bf:8c:6e:0f:36:46:60:3e:c0:ea:85:e9:
                    19:4a:90:f3:3b:aa:bd:11:a2:2e:70:de:41:54:ac:
                    e0:24:35:ea:c0:e8:51:67:25:06:a6:0f:e7:78:7e:
                    a6:cb:81:48:56:76:5a:91:56:d7:37:33:62:35:09:
                    de:73:c8:35:01:dd:60:09:2e:f8:a5:0e:20:cc:16:
                    53:b1:fa:f7:59:03:19:19:7a:59:b3:2f:69:08:30:
                    c4:63:b7:7f:a3:64:4a:b0:e5:a4:46:43:92:ad:a6:
                    f7:94:bd:77:8e:78:aa:2c:ba:dd:57:77:01:92:14:
                    e3:00:38:c3:62:53:98:3a:50:01:f8:0d:e5:d0:0b:
                    83:79:ef:9b:a5:99:1c:15:17:36:c1:89:24:44:d2:
                    15:57:6c:ac:77:eb:f6:5b:7b:34:33:fc:cb:48:26:
                    a7:b6:87:e4:58:3a:af:45:46:05:50:2e:ea:eb:54:
                    72:d2:07:d8:4c:0b:d7:c4:6a:73:9c:89:49:4a:79:
                    e5:53:6d:70:aa:e7:db:c1:62:ec:b9:a8:72:d3:95:
                    46:63:b0:ad:ae:c5:28:19:c3:fd:f8:5a:d5:b9:6b:
                    1e:1c:81:aa:0d:b0:34:ab:3b:8c:87:27:f1:ed:3b:
                    3c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:77:1D:99:99:A1:EA:EF:89:CA:81:E1:3A:91:1E:2A:BA:BC:2C:7E
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/incdmZmh6u-JyoHhOpEeKrq8LH4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:3:bcc::/48

    Signature Algorithm: sha256WithRSAEncryption
         2b:aa:29:44:bd:20:9f:5c:b5:b3:8a:01:76:0b:a2:f1:d1:26:
         f3:c6:e3:5b:d2:a0:98:10:80:f4:c8:8b:e7:d0:4f:e6:8b:9c:
         77:37:38:ab:5f:a8:99:09:c4:5e:e8:b8:e6:6d:60:8b:b6:2c:
         d1:77:f8:71:19:cf:d6:0b:4e:37:cd:b4:0c:42:e2:03:59:88:
         80:a6:d2:6e:be:54:f0:1c:ca:f8:78:d2:f9:c2:cf:26:05:3b:
         02:c8:94:0a:b3:7c:83:6c:59:35:1f:2d:b4:6d:39:4f:30:0b:
         90:a9:42:42:af:e1:01:db:70:d2:a7:79:41:90:1d:28:2c:fe:
         60:66:7f:fd:02:8c:1d:9e:e8:44:5f:c9:f3:38:17:03:d8:80:
         23:8e:43:81:28:f1:11:39:cd:2c:0b:8c:67:5f:ac:e8:b9:75:
         43:32:cd:06:c8:19:8a:22:a1:8c:68:b5:1e:95:77:df:ae:e2:
         f1:ab:4c:df:7f:13:ce:88:6b:8b:15:2e:71:be:be:20:3f:ee:
         a8:3b:84:c9:a5:7b:46:7a:9e:89:86:b3:f4:ce:fd:6b:46:88:
         16:42:d8:7c:ce:80:39:26:1d:9c:b0:eb:09:0e:c7:83:33:05:
         68:43:16:5c:23:44:6b:48:d2:02:c1:b3:7c:f4:8b:83:88:2a:
         1f:69:e3:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 02:41:51 2024 by rpki-client on console-ams.rpki-client.org