Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/vMkDjSGIvjwfgsGlK4NK4X9Y2Ec.roa
File:                     vMkDjSGIvjwfgsGlK4NK4X9Y2Ec.roa (raw, json)
Hash identifier:          f4JzVG+fVY4s+/5i5gYwXcDljrpEXRqsLynMo1hhpLY=
Subject key identifier:   BC:C9:03:8D:21:88:BE:3C:1F:82:C1:A5:2B:83:4A:E1:7F:58:D8:47
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       036A
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/vMkDjSGIvjwfgsGlK4NK4X9Y2Ec.roa
Signing time:             Tue 30 Apr 2024 01:56:59 +0000
ROA not before:           Tue 30 Apr 2024 01:56:59 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:e00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 22:26:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 874 (0x36a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 01:56:59 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=BCC9038D2188BE3C1F82C1A52B834AE17F58D847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:13:16:d5:6d:b9:fd:ec:78:48:da:d4:24:3c:
                    b9:a4:03:dd:b4:4a:95:10:cb:52:8f:1c:35:a5:cf:
                    bd:ce:7c:89:e6:45:c0:84:f6:b9:71:3b:41:ea:5e:
                    ad:fc:42:f3:91:68:76:34:27:27:f4:b1:99:15:4f:
                    da:e4:e4:96:bb:26:50:1a:cf:e9:44:4d:0e:84:ad:
                    fb:ac:8a:39:41:1d:71:4a:f1:73:ff:34:17:53:61:
                    ee:75:3a:de:a5:9b:64:f8:1b:0c:95:f6:f0:b8:75:
                    83:b8:cb:55:57:e0:3f:74:4e:1a:99:92:ae:40:a1:
                    31:83:5e:0c:7b:94:39:68:1f:58:2e:08:99:75:9f:
                    3d:0b:a2:cd:48:cc:7f:f5:bc:2f:96:72:69:5a:12:
                    59:e9:0e:d7:dd:5d:ba:20:5b:2f:5a:76:42:fd:14:
                    03:c9:fb:4a:24:9c:e6:0f:5d:a5:9b:0f:a7:e0:55:
                    77:c9:02:3a:43:6e:22:ad:2b:0c:43:bc:c1:3a:31:
                    ae:5f:35:33:84:7e:e0:6c:34:1a:2d:9c:35:0f:e7:
                    57:b4:c6:45:a0:2e:a2:d4:77:2a:c7:b1:89:13:c6:
                    20:32:d6:14:14:dd:44:64:b1:85:4a:dc:dc:6a:a5:
                    99:5a:95:f7:e3:51:2f:8f:bc:7a:01:84:c7:ed:cc:
                    5b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:C9:03:8D:21:88:BE:3C:1F:82:C1:A5:2B:83:4A:E1:7F:58:D8:47
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/vMkDjSGIvjwfgsGlK4NK4X9Y2Ec.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:e00::/40

    Signature Algorithm: sha256WithRSAEncryption
         82:fb:25:f0:6f:f8:9f:0c:a3:5f:ac:00:97:d0:4c:07:57:ef:
         a0:97:c7:65:67:83:86:e7:43:2c:44:71:6c:75:35:e9:77:71:
         9e:30:8c:c2:30:00:67:29:81:90:2f:4d:c4:36:20:58:c6:e1:
         ac:d5:9c:b9:c2:09:84:17:b1:63:66:3a:3f:37:74:5a:5e:98:
         78:38:51:4a:f7:de:61:26:84:1e:81:24:7a:b6:88:c2:29:4e:
         1c:1d:e4:3d:13:2b:6b:94:f0:46:14:fc:a5:0b:d2:26:b9:5e:
         dc:dc:1d:52:b6:dd:bd:90:db:cd:7a:11:84:3b:52:85:89:9f:
         d4:98:f9:49:c9:c1:fb:b2:e9:50:dc:d6:d1:6e:9f:de:58:dd:
         9a:eb:f5:bc:02:75:cd:18:c3:a0:31:e4:f0:32:44:cf:d8:14:
         c6:ff:d1:95:95:82:c9:e2:0d:d5:58:e5:48:c3:40:81:6d:83:
         09:a2:f2:3f:7d:0e:6f:ce:e8:5a:20:13:26:56:7b:b7:8a:23:
         c1:bb:da:04:ab:df:3e:8a:b3:40:b1:9c:d5:c7:93:7c:59:85:
         7f:22:c3:65:e3:33:47:6b:4a:30:06:db:8a:a3:cf:4a:21:c5:
         63:de:97:fa:63:0c:e1:9a:b2:d1:14:4f:94:b7:ad:34:53:f0:
         ae:bd:1e:17
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICA2owDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNDA0MzAw
MTU2NTlaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEJDQzkwMzhEMjE4OEJF
M0MxRjgyQzFBNTJCODM0QUUxN0Y1OEQ4NDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDaExbVbbn97HhI2tQkPLmkA920SpUQy1KPHDWlz73OfInmRcCE
9rlxO0HqXq38QvORaHY0Jyf0sZkVT9rk5Ja7JlAaz+lETQ6ErfusijlBHXFK8XP/
NBdTYe51Ot6lm2T4GwyV9vC4dYO4y1VX4D90ThqZkq5AoTGDXgx7lDloH1guCJl1
nz0Los1IzH/1vC+WcmlaElnpDtfdXbogWy9adkL9FAPJ+0oknOYPXaWbD6fgVXfJ
AjpDbiKtKwxDvME6Ma5fNTOEfuBsNBotnDUP51e0xkWgLqLUdyrHsYkTxiAy1hQU
3URksYVK3NxqpZlalffjUS+PvHoBhMftzFt7AgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQUvMkDjSGIvjwfgsGlK4NK4X9Y2EcwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS92TWtEalNHSXZqd2Znc0dsSzROSzRYOVkyRWMu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAaw4wDQYJKoZIhvcNAQELBQADggEBAIL7JfBv+J8Mo1+sAJfQ
TAdX76CXx2Vng4bnQyxEcWx1Nel3cZ4wjMIwAGcpgZAvTcQ2IFjG4azVnLnCCYQX
sWNmOj83dFpemHg4UUr33mEmhB6BJHq2iMIpThwd5D0TK2uU8EYU/KUL0ia5Xtzc
HVK23b2Q2816EYQ7UoWJn9SY+UnJwfuy6VDc1tFun95Y3Zrr9bwCdc0Yw6Ax5PAy
RM/YFMb/0ZWVgsniDdVY5UjDQIFtgwmi8j99Dm/O6FogEyZWe7eKI8G72gSr3z6K
s0CxnNXHk3xZhX8iw2XjM0drSjAG24qjz0ohxWPel/pjDOGastEUT5S3rTRT8K69
Hhc=
-----END CERTIFICATE-----
Generated at Fri Jun 7 00:11:43 2024 by rpki-client on console-ams.rpki-client.org