Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/pmEqHa2oOeh44xRZK46XCII24Ik.roa
File:                     pmEqHa2oOeh44xRZK46XCII24Ik.roa (raw, json)
Hash identifier:          uVJq6a8zIBEkcrSL98fY6wC6VjdX5HzqtkYDym3rqY0=
Subject key identifier:   A6:61:2A:1D:AD:A8:39:E8:78:E3:14:59:2B:8E:97:08:82:36:E0:89
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       03A5
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/pmEqHa2oOeh44xRZK46XCII24Ik.roa
Signing time:             Mon 17 Jun 2024 09:04:34 +0000
ROA not before:           Mon 17 Jun 2024 09:04:34 +0000
ROA not after:            Sun 15 Jun 2025 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:61:8e00::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 933 (0x3a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Jun 17 09:04:34 2024 GMT
            Not After : Jun 15 01:30:03 2025 GMT
        Subject: CN=A6612A1DADA839E878E314592B8E97088236E089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:63:69:98:32:8e:f3:29:48:03:d3:73:25:bb:
                    d1:b8:57:5f:d3:33:d9:7f:a7:82:c2:6e:1a:1d:6b:
                    26:6c:76:b5:f7:0c:20:4f:eb:91:0e:69:62:39:a0:
                    d9:f4:d9:e8:5d:67:7c:63:46:25:47:7b:79:0d:20:
                    97:8e:34:98:45:38:97:30:7b:a0:7e:69:c2:8b:44:
                    c4:fe:0f:d9:94:3d:18:54:22:a6:54:d7:60:11:85:
                    9d:5e:c4:e1:db:f4:e7:e4:14:d9:c3:80:cd:ba:38:
                    ab:7b:67:ef:ac:ee:e1:1c:97:c0:88:bc:36:c1:06:
                    78:84:0d:c5:bd:2b:67:a7:e9:ac:85:f1:ae:cc:d1:
                    23:6a:3f:a9:59:89:ff:46:ba:5a:1d:67:2f:10:01:
                    81:bd:81:5c:2a:f0:c1:0b:43:f9:9b:f5:c5:d8:b4:
                    18:24:f1:7c:d9:11:8f:13:a1:4e:f1:30:02:ec:0e:
                    d2:bb:0c:2b:92:ad:f7:80:72:2f:58:6f:28:8e:bf:
                    30:eb:35:c7:ce:a1:e4:eb:21:81:4a:e2:47:ae:00:
                    2c:6c:ab:83:4a:57:91:24:3c:88:89:36:0a:c7:7e:
                    87:9a:61:f4:0f:b1:5e:a9:31:d4:0d:b6:e8:a4:04:
                    40:b3:f3:5c:39:7f:62:44:ae:5c:4f:93:cc:29:03:
                    86:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:61:2A:1D:AD:A8:39:E8:78:E3:14:59:2B:8E:97:08:82:36:E0:89
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/pmEqHa2oOeh44xRZK46XCII24Ik.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:61:8e00::/48

    Signature Algorithm: sha256WithRSAEncryption
         72:a6:37:73:8d:ef:b5:91:27:01:d5:43:a0:81:e1:64:1d:7a:
         c0:ab:ce:55:5c:13:8a:02:c1:04:00:cd:c5:e2:9a:05:5b:2f:
         be:fe:06:b8:ea:d6:59:25:68:2a:b8:af:ef:d9:17:0a:18:6d:
         cc:63:26:05:54:1c:56:8f:48:6b:62:e0:54:89:2a:2d:e3:25:
         e9:06:02:9e:5e:10:35:57:4d:f9:23:6f:45:31:50:db:58:af:
         df:f0:cf:28:c7:ef:a1:1c:84:2d:20:84:1e:b1:b6:a9:6b:f4:
         4e:02:9f:ab:00:b7:23:fd:67:6c:89:7b:95:cf:ff:b2:0d:de:
         2c:ec:b1:73:ac:96:58:49:7f:dc:04:3d:18:85:3d:70:16:d2:
         b9:a7:4d:5c:6c:59:41:5e:2a:7d:9d:53:c7:d3:b9:d5:f4:91:
         e3:f6:5d:8f:bb:25:27:f2:65:a7:61:e7:2a:c9:00:25:8d:66:
         15:6d:3a:90:f3:2c:a1:5e:87:f9:4b:75:75:ec:65:45:30:8a:
         27:a0:f4:5b:05:7d:a8:f0:65:ac:cb:2e:0a:09:7b:54:66:36:
         61:72:15:b5:d7:49:11:df:cc:a4:6c:bc:1c:c5:3b:08:d1:bc:
         24:ee:38:b2:ad:d8:00:23:ab:a6:e0:bc:3d:74:f5:64:f1:24:
         a7:0f:e6:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:13 2024 by rpki-client on console-fra.rpki-client.org