Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/sMziHXYnMKSdX-Pr9Cnt2ibvCg4.roa
File:                     sMziHXYnMKSdX-Pr9Cnt2ibvCg4.roa (raw, json)
Hash identifier:          2DDFJRgX7yjdULpLEaD9ljVV5atScwrdUoSm9ZeXCG0=
Subject key identifier:   B0:CC:E2:1D:76:27:30:A4:9D:5F:E3:EB:F4:29:ED:DA:26:EF:0A:0E
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       03A0
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/sMziHXYnMKSdX-Pr9Cnt2ibvCg4.roa
Signing time:             Mon 17 Jun 2024 08:52:44 +0000
ROA not before:           Mon 17 Jun 2024 08:52:44 +0000
ROA not after:            Sun 15 Jun 2025 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:61:7c00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 928 (0x3a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Jun 17 08:52:44 2024 GMT
            Not After : Jun 15 01:30:03 2025 GMT
        Subject: CN=B0CCE21D762730A49D5FE3EBF429EDDA26EF0A0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4a:4f:d0:39:91:c6:cc:af:e5:47:0d:85:e7:
                    35:80:51:0d:d4:c0:8b:2a:34:4e:2c:fa:95:ec:8c:
                    08:e0:ed:0b:d8:c5:36:28:46:b6:71:5c:ad:a9:3a:
                    3a:4d:1c:29:80:c0:6d:e9:b9:d9:d5:d4:21:d7:7d:
                    c0:c3:87:31:97:33:b5:63:44:3f:3e:12:a4:f6:1e:
                    c9:07:cb:b2:12:08:12:c2:95:dd:a2:bd:f1:22:90:
                    eb:ff:86:7a:0c:5b:50:aa:3b:00:a7:e9:2a:bd:0c:
                    ee:49:b7:a3:21:ac:8c:dc:fd:9e:02:db:6a:d4:b8:
                    fa:7c:83:f6:4b:ee:25:fc:7c:95:2d:3a:cf:92:e2:
                    d5:04:47:31:0e:5f:1f:59:0b:f3:55:ad:02:5a:23:
                    22:1c:97:ff:8d:7b:36:33:c5:5f:9c:a0:53:8c:05:
                    9e:12:a0:05:c6:8d:4d:59:32:7c:57:28:c1:1d:13:
                    3d:e8:62:81:bf:da:55:00:fe:1d:ab:f2:98:e4:8f:
                    3f:c4:ba:6f:00:8e:b2:53:0c:f1:d1:77:22:1e:ea:
                    db:63:0c:3f:9e:c2:05:f2:db:82:95:a7:0a:a7:14:
                    5f:d0:25:76:ad:1f:93:cc:fc:34:fe:f1:bc:44:af:
                    a0:63:72:53:4c:82:0c:a3:97:5a:01:3b:0d:98:fc:
                    e2:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:CC:E2:1D:76:27:30:A4:9D:5F:E3:EB:F4:29:ED:DA:26:EF:0A:0E
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/sMziHXYnMKSdX-Pr9Cnt2ibvCg4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:61:7c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         7e:38:ba:d1:68:81:7b:20:5a:88:0c:5d:52:24:90:40:d1:6f:
         7a:d6:3f:ea:a0:9f:d7:03:ff:6b:9b:b9:1b:47:11:b8:0c:91:
         d9:64:05:30:ff:7a:af:78:b0:bb:ad:6e:5c:86:d0:46:7d:54:
         68:c5:63:6a:e8:43:c1:81:5a:71:3e:c0:4c:cf:e5:9e:42:a5:
         04:32:d2:75:a5:c5:35:20:26:35:1a:7e:a9:b8:0a:70:98:86:
         b6:b1:fb:b3:62:4b:68:15:3a:b7:a4:67:1b:4c:98:af:74:a1:
         ad:52:15:6c:d5:8e:6b:98:7c:02:2a:d9:c9:f9:99:db:e9:9f:
         01:d6:fb:d2:d0:a1:cf:73:2c:15:35:ac:37:65:ba:54:4d:b7:
         ba:67:9f:69:c4:5d:51:95:ff:a7:b4:01:bb:a9:9b:12:36:4e:
         2e:bf:41:80:26:d8:d2:c7:af:08:01:9d:66:69:88:ce:4d:f3:
         3f:8e:ad:d1:fe:a5:a6:9f:95:ba:9b:3d:16:ad:f6:2c:e0:67:
         96:b9:a4:f0:3e:b1:a4:ae:57:68:32:36:2f:c1:1c:22:49:74:
         f0:8e:29:98:a7:73:56:13:f7:2b:d6:21:ea:df:50:39:ea:d3:
         0f:d4:75:eb:69:94:4f:a0:68:c8:6c:e0:0e:06:89:e0:c1:b4:
         5c:36:f3:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:07 2024 by rpki-client on console-fra.rpki-client.org