Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ppPsRBJKvEIcqL9M2CsaGPfQNAs.roa
File:                     ppPsRBJKvEIcqL9M2CsaGPfQNAs.roa (raw, json)
Hash identifier:          moh+ybA6xZ+T2mJG7mxFMRNxXYnPS3u1HQUCkOwkhbo=
Subject key identifier:   A6:93:EC:44:12:4A:BC:42:1C:A8:BF:4C:D8:2B:1A:18:F7:D0:34:0B
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       02D8
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ppPsRBJKvEIcqL9M2CsaGPfQNAs.roa
Signing time:             Tue 30 Apr 2024 01:44:54 +0000
ROA not before:           Tue 30 Apr 2024 01:44:54 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:d000::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 728 (0x2d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 01:44:54 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=A693EC44124ABC421CA8BF4CD82B1A18F7D0340B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a2:10:cd:db:91:cf:23:51:3a:c9:fc:80:db:
                    35:31:4d:74:e1:da:6f:bb:b4:3d:58:b8:6f:e2:a8:
                    14:64:80:29:ac:58:f3:ab:b6:f0:62:59:b9:90:66:
                    3b:d2:ab:ae:b6:ef:7f:ac:2f:3f:14:71:23:71:2c:
                    51:77:4e:fc:fd:9e:aa:de:49:b5:d8:b0:6f:5e:5f:
                    f9:08:4b:bb:10:25:dd:28:ed:33:17:1a:5c:49:1b:
                    76:87:5b:7b:a9:70:f5:21:a8:b0:eb:24:88:c2:aa:
                    17:f9:fd:ba:67:b9:51:8e:e6:fd:7d:77:62:3e:4f:
                    79:01:6d:b2:07:01:15:47:40:b9:3e:18:7e:ab:04:
                    81:fd:2e:29:3b:29:fc:d0:f7:43:92:b7:48:f4:36:
                    64:6f:87:b8:44:1d:15:64:53:dd:68:6f:f6:e4:3e:
                    8e:19:47:4d:bd:ea:6f:e7:ef:3e:43:50:f8:cf:91:
                    ab:ef:f4:44:f1:da:fd:18:02:92:4d:e3:6e:53:c5:
                    de:2a:ff:7b:74:96:3c:9f:7d:f0:a1:4a:d2:02:a1:
                    20:c1:ea:69:6a:cd:56:9c:b6:84:07:1b:3e:18:db:
                    d1:9c:0c:71:92:71:18:8d:97:f2:40:26:d6:73:ae:
                    f4:bd:8b:b1:30:d1:ba:5f:23:dd:c7:17:0a:67:c0:
                    f9:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:93:EC:44:12:4A:BC:42:1C:A8:BF:4C:D8:2B:1A:18:F7:D0:34:0B
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ppPsRBJKvEIcqL9M2CsaGPfQNAs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:d000::/40

    Signature Algorithm: sha256WithRSAEncryption
         3a:23:31:59:a5:ee:e7:3a:a5:6b:13:94:b4:a4:90:a3:7f:4b:
         b9:d7:fa:fc:57:ae:ae:5a:fa:ec:51:a0:24:19:2f:1d:d9:b4:
         a9:4f:b1:ad:f3:30:15:bd:40:48:6e:1e:dd:ea:d3:6d:ac:49:
         0c:b9:e6:db:eb:cc:6a:2c:3b:3a:8f:5d:e9:40:83:9f:55:b3:
         c5:92:f2:17:65:0e:e7:cc:c3:12:a8:fd:cb:ad:3d:27:50:49:
         23:c0:b8:d2:4f:da:e3:66:09:e8:bc:05:60:33:7a:67:ff:2b:
         9f:19:03:86:6b:a9:35:b3:e2:d5:02:c9:c2:6a:2f:e9:92:1e:
         6f:00:aa:42:63:3d:da:80:38:f0:fa:80:07:6c:98:44:e7:db:
         ca:c8:00:df:4a:98:cc:e5:40:cc:e6:0d:8c:fd:2c:7b:84:97:
         4d:a2:df:4c:e4:5a:ec:1e:09:aa:d2:4a:7d:34:f8:be:44:ea:
         fc:94:e5:d9:c8:f0:ce:0c:6b:33:70:6d:67:7b:e5:e6:06:29:
         38:c3:4f:1c:ff:bb:b6:51:59:ef:9c:92:46:b9:76:e7:2a:47:
         6f:2b:ce:4b:13:dd:a0:64:cd:c4:06:32:0c:bb:7c:bd:25:05:
         44:6b:84:db:8d:7f:70:bc:f4:35:9c:70:a0:37:81:d2:c3:a2:
         82:bc:7d:83
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICAtgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNDA0MzAw
MTQ0NTRaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEE2OTNFQzQ0MTI0QUJD
NDIxQ0E4QkY0Q0Q4MkIxQTE4RjdEMDM0MEIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCyohDN25HPI1E6yfyA2zUxTXTh2m+7tD1YuG/iqBRkgCmsWPOr
tvBiWbmQZjvSq66273+sLz8UcSNxLFF3Tvz9nqreSbXYsG9eX/kIS7sQJd0o7TMX
GlxJG3aHW3upcPUhqLDrJIjCqhf5/bpnuVGO5v19d2I+T3kBbbIHARVHQLk+GH6r
BIH9Lik7KfzQ90OSt0j0NmRvh7hEHRVkU91ob/bkPo4ZR0296m/n7z5DUPjPkavv
9ETx2v0YApJN425Txd4q/3t0ljyfffChStICoSDB6mlqzVactoQHGz4Y29GcDHGS
cRiNl/JAJtZzrvS9i7Ew0bpfI93HFwpnwPnzAgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQUppPsRBJKvEIcqL9M2CsaGPfQNAswHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS9wcFBzUkJKS3ZFSWNxTDlNMkNzYUdQZlFOQXMu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAa9AwDQYJKoZIhvcNAQELBQADggEBADojMVml7uc6pWsTlLSk
kKN/S7nX+vxXrq5a+uxRoCQZLx3ZtKlPsa3zMBW9QEhuHt3q022sSQy55tvrzGos
OzqPXelAg59Vs8WS8hdlDufMwxKo/cutPSdQSSPAuNJP2uNmCei8BWAzemf/K58Z
A4ZrqTWz4tUCycJqL+mSHm8AqkJjPdqAOPD6gAdsmETn28rIAN9KmMzlQMzmDYz9
LHuEl02i30zkWuweCarSSn00+L5E6vyU5dnI8M4MazNwbWd75eYGKTjDTxz/u7ZR
We+ckka5ducqR28rzksT3aBkzcQGMgy7fL0lBURrhNuNf3C89DWccKA3gdLDooK8
fYM=
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:31 2024 by rpki-client on console-ams.rpki-client.org