Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/u9H9Qzf9Q_4hwIjk16Qdp32QUlg.roa
File:                     u9H9Qzf9Q_4hwIjk16Qdp32QUlg.roa (raw, json)
Hash identifier:          Sr/J439l035q4n0oX3vELSWnxSboW8g4qp/5FbkBvvI=
Subject key identifier:   BB:D1:FD:43:37:FD:43:FE:21:C0:88:E4:D7:A4:1D:A7:7D:90:52:58
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       031B
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/u9H9Qzf9Q_4hwIjk16Qdp32QUlg.roa
Signing time:             Tue 30 Apr 2024 01:50:52 +0000
ROA not before:           Tue 30 Apr 2024 01:50:52 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:5200::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 795 (0x31b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 01:50:52 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=BBD1FD4337FD43FE21C088E4D7A41DA77D905258
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:10:90:09:de:8d:42:91:6d:bb:e3:05:55:fe:
                    b0:cb:72:74:35:61:f8:a8:d5:f5:eb:c3:f8:14:49:
                    df:f1:e1:7c:83:f1:08:e0:03:73:07:54:78:be:ca:
                    63:c8:77:15:05:b2:94:6d:9d:3c:0c:58:6c:83:ba:
                    4e:ee:e4:25:45:96:15:f4:f8:4f:41:b0:af:16:cb:
                    1c:fc:c2:a7:15:62:b4:e0:b9:44:93:db:6a:60:62:
                    f3:03:45:b1:47:b9:1c:0c:b7:55:5a:55:62:ef:b8:
                    51:0c:d0:96:7b:b3:c5:df:45:e1:30:18:c1:29:f9:
                    23:dc:77:8c:47:df:04:86:56:b9:17:da:36:22:67:
                    2b:61:30:d3:e5:9f:2c:f3:f3:c3:6c:41:86:45:7c:
                    e2:2a:98:5b:e4:56:e0:cf:d7:18:f4:32:e8:8c:f2:
                    aa:55:b9:5d:07:f2:d4:1e:87:6c:42:67:8c:40:5c:
                    c1:8e:41:ea:da:ca:68:de:39:fc:0c:8d:fd:ed:25:
                    05:1a:55:33:53:e1:20:d3:c8:39:a6:68:2b:14:b1:
                    47:75:af:c4:3b:36:86:4d:2f:1c:6f:6a:0d:9e:51:
                    11:e3:11:20:21:b9:7e:96:c2:f8:30:56:8f:92:7d:
                    73:92:33:1a:00:d1:7a:7f:a5:4d:96:7d:15:7b:cc:
                    1b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:D1:FD:43:37:FD:43:FE:21:C0:88:E4:D7:A4:1D:A7:7D:90:52:58
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/u9H9Qzf9Q_4hwIjk16Qdp32QUlg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:5200::/40

    Signature Algorithm: sha256WithRSAEncryption
         4c:55:83:49:a7:cd:83:b6:74:1a:4b:1b:c6:51:ff:32:bf:f0:
         fe:81:d9:46:4b:0b:52:50:28:58:e3:a7:b0:c6:87:df:ca:db:
         3c:75:d3:39:b8:af:7a:b4:9d:7c:83:ff:f2:54:94:be:5b:92:
         ad:ae:21:0e:15:81:2d:7c:95:92:10:7d:60:ef:1f:2f:ac:18:
         a8:e8:92:39:16:1b:e3:55:32:7e:c6:6b:81:4f:2a:d8:ae:19:
         8d:ff:5f:0e:94:67:41:43:b5:1e:be:0b:8c:ee:c4:e5:1a:96:
         7d:0c:ba:af:0c:33:d5:4f:6c:07:48:ef:b3:ab:22:ab:4c:85:
         18:01:55:df:39:4f:7e:e8:03:9c:21:68:50:2f:f5:cf:47:c7:
         8d:74:30:06:31:12:d3:7e:e0:91:6e:2a:d0:17:d7:36:60:84:
         01:0e:08:8b:0c:ff:96:92:64:78:48:c7:45:d6:7d:15:c3:cd:
         e1:7d:5d:43:73:66:67:e8:df:0e:57:e4:0b:3c:06:1d:ed:0e:
         44:eb:47:40:1c:1b:97:4a:81:07:8a:ec:6d:d2:06:68:d6:5d:
         46:55:3c:65:11:e2:b7:2e:c4:78:1b:90:09:8c:d7:57:f2:f3:
         10:70:8a:69:f1:10:50:86:75:53:a4:35:92:22:61:cb:03:68:
         45:fb:73:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:31 2024 by rpki-client on console-ams.rpki-client.org