Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/tAfX8mr87puMhmzDElZRin_5r0U.roa
File:                     tAfX8mr87puMhmzDElZRin_5r0U.roa (raw, json)
Hash identifier:          s+GYVbgvz9+dLmn54Bc9L/UzJYusD6+DdGQYnU/JC/4=
Subject key identifier:   B4:07:D7:F2:6A:FC:EE:9B:8C:86:6C:C3:12:56:51:8A:7F:F9:AF:45
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       029B
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/tAfX8mr87puMhmzDElZRin_5r0U.roa
Signing time:             Tue 30 Apr 2024 01:35:14 +0000
ROA not before:           Tue 30 Apr 2024 01:35:14 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:17:f90::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 20:52:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 667 (0x29b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 01:35:14 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=B407D7F26AFCEE9B8C866CC31256518A7FF9AF45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:59:c9:f4:61:49:47:ca:da:f3:2c:c0:71:13:
                    88:c3:98:e3:f4:dd:ef:5f:35:55:d9:5d:27:9e:fa:
                    af:8b:a6:0c:36:55:b7:bc:69:8a:6b:42:ab:36:6f:
                    fc:d3:6f:e1:31:22:7f:0b:31:bf:19:ea:d7:e0:ac:
                    d3:d1:d0:4c:9e:40:23:71:d9:10:a4:5e:85:f3:40:
                    e4:38:cf:17:50:fc:11:99:72:76:b9:5f:dd:34:7a:
                    45:2a:ac:08:13:48:43:b0:38:3a:0d:9a:a9:c3:c7:
                    ba:d3:62:02:06:3b:f1:91:4d:f3:12:92:d7:ec:0d:
                    dd:9f:bb:4b:b5:c1:cd:ce:2f:35:66:b2:ca:56:1b:
                    60:cf:a3:8e:1b:33:74:83:65:b7:5c:da:9e:99:22:
                    5b:88:ec:f1:82:62:a3:96:1a:e2:da:9b:88:e3:bc:
                    6c:d4:9a:e8:86:99:2c:9d:36:29:d5:b2:4e:61:8e:
                    3c:f0:11:4b:da:59:f4:f3:aa:18:ce:59:9d:ce:ea:
                    25:d8:7f:ef:ca:2d:5a:21:47:07:ca:df:cd:45:b2:
                    0a:91:42:b6:24:1b:c7:66:86:76:f6:21:e6:68:63:
                    7a:3d:fd:fc:5d:68:a9:6b:de:75:22:63:28:ac:1f:
                    37:6d:81:09:3b:85:92:92:f5:38:8d:93:4a:e7:b8:
                    6b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:07:D7:F2:6A:FC:EE:9B:8C:86:6C:C3:12:56:51:8A:7F:F9:AF:45
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/tAfX8mr87puMhmzDElZRin_5r0U.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:17:f90::/44

    Signature Algorithm: sha256WithRSAEncryption
         69:08:17:17:20:4e:12:a0:66:b1:f1:99:a1:54:c2:b4:62:33:
         95:c3:c8:d0:56:a9:b6:70:f0:97:1f:c8:74:93:eb:81:45:73:
         eb:8d:f1:7e:37:b4:c9:06:95:49:3e:d4:58:45:d5:bf:f0:bf:
         42:03:92:bc:29:6d:e0:5d:41:d1:e6:f1:86:ee:4b:3b:fe:b8:
         4f:89:31:32:37:d4:d5:05:6e:33:e3:df:47:19:20:82:bd:dc:
         5a:53:7c:10:9d:9e:4a:b8:56:f5:2e:92:47:91:5c:a8:ca:95:
         c1:c9:c0:fc:45:7b:ea:ca:c2:ec:e1:5b:e3:5e:37:14:a9:8b:
         c4:46:ac:3b:44:c1:76:d1:30:9d:6c:2f:5b:45:38:57:9e:39:
         12:1d:09:2e:01:8c:d4:7b:f6:c7:ba:6e:0d:8b:c5:06:bd:3c:
         99:67:37:e3:b4:fc:20:3a:0e:a9:7a:4c:88:14:b0:e8:2d:8d:
         13:af:57:4d:21:e5:b3:21:59:0a:22:47:8a:6a:d5:b0:3e:55:
         3e:6d:94:a7:ad:31:8e:c4:d3:be:2a:e5:10:23:08:45:53:bb:
         a9:03:71:e0:38:a0:95:12:ec:ef:9c:15:c0:1b:f1:8f:c8:1d:
         e9:e3:fb:7a:2b:20:e2:ef:e8:9d:63:15:5f:9c:dc:68:45:f8:
         5d:01:9e:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 21:52:34 2024 by rpki-client on console-fra.rpki-client.org