Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/t1lUOsTdDBbPEb9IBTOpwPws7FQ.roa
File:                     t1lUOsTdDBbPEb9IBTOpwPws7FQ.roa (raw, json)
Hash identifier:          PmREz47m5zupi/XeD78M+jmjwmN/Z/8Q3HVrsDyLQ4k=
Subject key identifier:   B7:59:54:3A:C4:DD:0C:16:CF:11:BF:48:05:33:A9:C0:FC:2C:EC:54
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       038E
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/t1lUOsTdDBbPEb9IBTOpwPws7FQ.roa
Signing time:             Tue 30 Apr 2024 02:02:44 +0000
ROA not before:           Tue 30 Apr 2024 02:02:44 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:fc00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 910 (0x38e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 02:02:44 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=B759543AC4DD0C16CF11BF480533A9C0FC2CEC54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:77:76:f4:fa:2b:ca:0e:73:81:2c:61:60:90:
                    07:35:b9:32:84:4d:72:52:dd:64:ee:66:36:b6:2e:
                    67:59:10:02:a5:56:05:a7:7d:f5:2b:6d:ca:c9:2f:
                    32:3f:ec:c7:93:6f:96:e1:3a:4c:bd:f8:7f:63:64:
                    9a:47:2f:fd:08:c7:57:47:da:04:e5:68:2a:cf:53:
                    18:ac:5e:64:c4:7d:62:1e:92:ca:fa:9a:92:9a:65:
                    82:1a:82:68:fd:c3:0a:d5:8c:a2:8c:2d:36:6b:c7:
                    d7:a1:7d:ce:31:01:37:ed:1e:31:37:04:4d:32:09:
                    7d:05:cd:8c:16:ba:23:5c:7a:29:44:db:61:05:6c:
                    64:26:fe:e7:10:f6:35:88:98:75:6b:c7:66:5e:eb:
                    51:4c:fa:a7:bf:32:a3:7c:cc:10:20:bb:95:20:5b:
                    e5:5e:c8:49:83:34:ed:35:99:94:85:2e:d9:d0:7e:
                    56:65:b3:9f:92:bc:de:7a:09:1c:33:24:34:8f:f0:
                    cc:28:07:cf:4a:59:80:cb:2d:94:93:e5:a3:5d:46:
                    7b:e0:4c:fc:d9:6e:7c:68:7d:e9:96:4f:f3:3d:7c:
                    62:ca:04:13:45:1a:75:65:74:c8:d9:d8:21:8a:d3:
                    78:78:de:e6:2e:68:51:2f:e7:ee:fa:1a:ad:fe:75:
                    6d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:59:54:3A:C4:DD:0C:16:CF:11:BF:48:05:33:A9:C0:FC:2C:EC:54
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/t1lUOsTdDBbPEb9IBTOpwPws7FQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:fc00::/40

    Signature Algorithm: sha256WithRSAEncryption
         1d:bd:17:4a:c5:9a:85:9f:40:8d:72:ae:82:8d:95:0f:a4:67:
         ff:a0:a1:25:4f:f4:a2:17:2d:24:f9:46:ba:e1:90:00:fc:59:
         2c:12:cb:2c:bc:13:79:5c:af:00:2b:39:5a:0b:53:dc:60:3c:
         75:2b:8f:0b:c1:cf:c1:fa:e3:d5:ed:de:ce:ff:a7:be:03:0f:
         52:d8:2b:99:bc:37:e8:37:89:2b:2f:ba:a8:0d:0c:6e:fb:ec:
         71:f5:2e:68:a2:d1:23:03:8b:e3:45:26:7e:cd:5d:b0:e9:6a:
         36:ff:ae:4d:36:71:80:41:2d:e0:c6:8b:fe:89:9e:da:e8:c7:
         c6:e8:77:10:10:d0:33:f6:18:e0:b2:3d:97:09:30:b4:cb:33:
         9d:4c:45:85:5d:ca:7e:87:9f:a4:29:34:fe:bc:16:99:4c:43:
         70:28:b2:13:b0:28:c3:34:ba:b1:11:13:ba:f3:cd:5a:9f:96:
         7e:94:3f:5d:b6:4b:36:b9:7d:2f:32:ed:ae:71:8d:18:ae:d0:
         d9:47:20:b8:f0:1f:04:0a:76:ea:e8:58:f8:fb:4d:c0:fa:47:
         86:f0:af:f1:10:5c:ac:82:96:ea:46:70:58:5d:09:9e:37:48:
         3b:66:e6:12:15:8e:ec:64:35:03:c3:25:47:cb:26:97:0f:3d:
         5f:d6:42:57
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICA44wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNDA0MzAw
MjAyNDRaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEI3NTk1NDNBQzRERDBD
MTZDRjExQkY0ODA1MzNBOUMwRkMyQ0VDNTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCvd3b0+ivKDnOBLGFgkAc1uTKETXJS3WTuZja2LmdZEAKlVgWn
ffUrbcrJLzI/7MeTb5bhOky9+H9jZJpHL/0Ix1dH2gTlaCrPUxisXmTEfWIeksr6
mpKaZYIagmj9wwrVjKKMLTZrx9ehfc4xATftHjE3BE0yCX0FzYwWuiNceilE22EF
bGQm/ucQ9jWImHVrx2Ze61FM+qe/MqN8zBAgu5UgW+VeyEmDNO01mZSFLtnQflZl
s5+SvN56CRwzJDSP8MwoB89KWYDLLZST5aNdRnvgTPzZbnxofemWT/M9fGLKBBNF
GnVldMjZ2CGK03h43uYuaFEv5+76Gq3+dW1fAgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQUt1lUOsTdDBbPEb9IBTOpwPws7FQwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS90MWxVT3NUZERCYlBFYjlJQlRPcHdQd3M3RlEu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAa/wwDQYJKoZIhvcNAQELBQADggEBAB29F0rFmoWfQI1yroKN
lQ+kZ/+goSVP9KIXLST5RrrhkAD8WSwSyyy8E3lcrwArOVoLU9xgPHUrjwvBz8H6
49Xt3s7/p74DD1LYK5m8N+g3iSsvuqgNDG777HH1Lmii0SMDi+NFJn7NXbDpajb/
rk02cYBBLeDGi/6Jntrox8bodxAQ0DP2GOCyPZcJMLTLM51MRYVdyn6Hn6QpNP68
FplMQ3AoshOwKMM0urERE7rzzVqfln6UP122Sza5fS8y7a5xjRiu0NlHILjwHwQK
duroWPj7TcD6R4bwr/EQXKyClupGcFhdCZ43SDtm5hIVjuxkNQPDJUfLJpcPPV/W
Qlc=
-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:21 2024 by rpki-client on console-ams.rpki-client.org