Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/mKbBFWe5gCl-h6y0vlTLY7pkgGY.roa
File:                     mKbBFWe5gCl-h6y0vlTLY7pkgGY.roa (raw, json)
Hash identifier:          /q7psxi2NYcBrpZYSkB2LCpvWcPkj8NJbdZyrVwaDUM=
Subject key identifier:   98:A6:C1:15:67:B9:80:29:7E:87:AC:B4:BE:54:CB:63:BA:64:80:66
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       038D
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/mKbBFWe5gCl-h6y0vlTLY7pkgGY.roa
Signing time:             Tue 30 Apr 2024 02:02:43 +0000
ROA not before:           Tue 30 Apr 2024 02:02:43 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:14:ecc::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 909 (0x38d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 02:02:43 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=98A6C11567B980297E87ACB4BE54CB63BA648066
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:74:97:b3:8e:73:9e:56:40:be:7c:fb:22:f0:
                    70:2e:27:40:77:9c:9b:b7:3c:db:3c:93:45:16:5c:
                    55:64:6e:84:42:6f:e2:55:6c:86:a7:f4:e4:cc:2b:
                    11:04:53:ed:41:c6:39:b2:40:73:d7:70:6d:9d:36:
                    67:4c:f5:24:3e:1d:b7:e9:ad:cb:15:f2:7b:50:b1:
                    ea:a0:72:2a:3d:63:95:78:86:43:1d:39:9c:e7:9b:
                    f1:59:5a:fa:fc:3b:be:db:55:6a:fe:a3:d8:ac:a0:
                    09:73:28:24:71:b1:82:eb:aa:32:8a:eb:60:66:b8:
                    ba:ce:be:87:41:de:6e:e0:76:33:94:82:57:cd:f9:
                    c6:9f:5d:d8:68:75:d5:2b:fa:c9:af:c8:08:1e:60:
                    40:18:8f:91:44:ed:1f:ff:e4:43:7e:ed:55:ad:c5:
                    50:99:15:0a:02:6a:50:2e:c1:c4:6e:47:3c:a3:5c:
                    97:d2:59:93:fa:75:e9:20:17:a1:c4:9c:d5:e0:02:
                    8b:33:60:36:48:e4:8f:2e:16:9d:c9:a5:f5:36:7d:
                    cd:86:c4:ac:fd:a0:f2:bb:08:c1:bf:b4:80:a0:04:
                    84:80:c1:e2:cf:78:4f:5f:26:f3:ba:63:37:49:6b:
                    57:c8:26:af:f5:af:1a:23:a1:5d:d1:98:87:5d:3b:
                    56:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:A6:C1:15:67:B9:80:29:7E:87:AC:B4:BE:54:CB:63:BA:64:80:66
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/mKbBFWe5gCl-h6y0vlTLY7pkgGY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:14:ecc::/48

    Signature Algorithm: sha256WithRSAEncryption
         3d:4d:4c:94:bf:77:70:ce:d9:bc:9e:a3:f8:d9:e7:89:e0:5a:
         89:4d:5e:ca:4c:74:51:48:c9:42:a8:04:2a:3c:74:40:8a:8d:
         70:c0:5e:28:78:b4:97:b6:a4:2f:51:ad:0d:5c:de:4b:33:76:
         2a:47:59:f3:8e:70:da:0e:d2:77:8a:1a:f5:64:b8:d1:b1:5a:
         8e:a5:6d:1e:b9:b5:f9:6c:ec:db:27:66:58:db:19:cd:8f:f1:
         68:3c:ab:78:59:06:8c:f0:f4:26:a1:12:91:05:2b:de:4a:e4:
         5b:ec:c1:71:0b:49:5b:f0:84:97:f4:6b:d1:25:bd:fe:bc:83:
         a9:cb:11:4c:d2:26:72:a9:3f:ec:6e:f5:06:96:1c:1f:40:28:
         b2:89:60:9c:1e:65:be:12:b8:a8:35:55:da:3b:69:71:0a:d8:
         be:d3:59:ae:d2:82:3c:87:1a:3e:c6:39:19:06:1a:8a:0e:0b:
         53:f2:0b:7a:dd:94:ad:48:aa:78:41:ac:50:77:77:21:b6:e7:
         67:e5:08:46:64:f9:3a:36:b8:8f:31:83:7d:49:93:c9:db:8e:
         b0:2f:02:b2:d6:5e:26:bf:49:2f:c7:83:5b:d2:89:74:99:0a:
         62:5c:53:b4:ca:26:71:e1:06:97:f3:f4:2b:96:90:4b:5a:49:
         e5:5b:cc:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:20 2024 by rpki-client on console-ams.rpki-client.org