Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/rU7ZIeNB11FBe5ZyZsdjdJcSkjU.roa
File:                     rU7ZIeNB11FBe5ZyZsdjdJcSkjU.roa (raw, json)
Hash identifier:          2VRNUG1Dr+0DYurOYf3GLEPGK7j+u3oCuNJP7lT6oqA=
Subject key identifier:   AD:4E:D9:21:E3:41:D7:51:41:7B:96:72:66:C7:63:74:97:12:92:35
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       02C6
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/rU7ZIeNB11FBe5ZyZsdjdJcSkjU.roa
Signing time:             Tue 30 Apr 2024 01:39:37 +0000
ROA not before:           Tue 30 Apr 2024 01:39:37 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:700::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 22:26:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 710 (0x2c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 01:39:37 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=AD4ED921E341D751417B967266C7637497129235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:77:03:c2:a4:7c:52:2f:0f:48:99:01:cb:ea:
                    0b:c5:ae:35:b8:39:13:21:69:4d:60:96:17:5b:9a:
                    ce:fc:5f:e6:54:76:fa:de:a4:c3:f4:09:16:c6:90:
                    d0:b7:d5:c5:dd:11:07:f5:6a:9f:d8:38:15:a6:eb:
                    4e:1e:c1:2c:12:7f:60:dd:67:c3:29:6e:9b:bf:6c:
                    08:ff:7e:8c:b8:26:6f:f0:1b:c3:33:3f:ac:4a:03:
                    7a:79:9b:14:d6:d7:e1:e5:b0:f7:a6:26:58:05:2a:
                    6b:05:9b:9c:c0:2f:dd:3f:78:bd:44:5d:1c:ff:ef:
                    2a:66:b1:52:98:b4:3e:8d:92:f0:fd:6c:19:6f:9a:
                    86:4c:9b:76:ef:0f:ba:42:f1:1f:66:8f:56:ff:2b:
                    3b:8e:95:1f:69:77:52:58:09:d5:c7:b7:8f:d7:d2:
                    52:51:49:6f:2d:b0:4a:a5:98:fa:7a:7b:ce:01:b5:
                    a6:83:11:31:ed:6d:af:cf:f4:34:ec:e0:cc:97:fa:
                    62:86:d5:23:4f:e5:b2:85:ab:f7:f2:ac:ab:52:b6:
                    1e:54:01:03:5c:a7:8e:f4:46:a1:d1:74:8a:96:52:
                    e7:be:d4:12:c7:cb:14:56:bd:2d:13:b7:67:3d:ce:
                    f7:73:13:fb:dc:1f:75:0f:35:83:14:2a:3e:fb:f0:
                    32:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:4E:D9:21:E3:41:D7:51:41:7B:96:72:66:C7:63:74:97:12:92:35
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/rU7ZIeNB11FBe5ZyZsdjdJcSkjU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:700::/40

    Signature Algorithm: sha256WithRSAEncryption
         48:3f:cb:1d:31:9e:db:a3:79:b7:46:0a:e8:23:81:21:80:5e:
         b2:17:40:b5:d6:de:6d:4b:72:51:2f:e8:14:38:2a:4d:e2:1a:
         53:11:38:e0:58:04:53:2d:87:59:ed:1e:65:65:94:79:5e:26:
         4d:42:93:bd:cf:a8:f5:e9:6a:08:cf:78:60:ec:6c:88:e5:64:
         6a:89:78:e2:38:9d:9e:1c:b3:97:a0:ef:ec:2d:d8:54:1d:ef:
         95:91:d9:55:88:c9:00:71:07:41:51:82:af:ab:6b:b3:97:76:
         0c:f8:ac:46:36:eb:5a:19:28:9e:5e:13:76:87:57:75:4d:ab:
         5c:d1:f9:78:29:dd:3a:60:2b:05:3d:85:65:1b:b0:96:31:04:
         61:82:95:fc:12:00:2e:9f:32:a2:f2:be:ba:d7:fc:c6:ca:f8:
         27:fe:ab:a6:b5:cb:44:4e:a8:e6:64:fe:bf:1b:b1:59:89:1b:
         9e:f7:42:6d:81:62:d1:dd:6b:fd:58:18:4a:f5:df:f3:b5:66:
         59:50:3e:0f:25:92:db:9e:f6:5a:79:53:6d:99:97:ba:cf:0b:
         7b:73:cf:da:e9:d6:71:74:bf:4c:87:db:19:51:ae:5e:d8:89:
         46:6a:c3:b6:79:23:bd:e8:51:1c:38:47:28:a5:e2:bc:47:29:
         78:65:d6:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 00:11:43 2024 by rpki-client on console-ams.rpki-client.org