Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/vkUs0tWBFuo6j7lcDGjt_OwqngM.roa
File:                     vkUs0tWBFuo6j7lcDGjt_OwqngM.roa (raw, json)
Hash identifier:          +ksdR6z81lMIo0rdzlHntFCbLQ985b6lN8DyTKKbWC4=
Subject key identifier:   BE:45:2C:D2:D5:81:16:EA:3A:8F:B9:5C:0C:68:ED:FC:EC:2A:9E:03
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       01E4
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/vkUs0tWBFuo6j7lcDGjt_OwqngM.roa
Signing time:             Tue 30 May 2023 17:38:29 +0000
ROA not before:           Tue 30 May 2023 17:38:29 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:2a00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 13:40:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 484 (0x1e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:38:29 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=BE452CD2D58116EA3A8FB95C0C68EDFCEC2A9E03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:c6:b2:ea:07:75:e6:07:c4:41:db:3d:dd:4d:
                    1a:da:af:29:02:86:96:b5:bf:a3:ec:73:06:43:77:
                    13:c2:8e:19:a0:fa:61:ec:9a:a5:a9:b3:a9:e2:d4:
                    0e:1d:10:03:36:32:f8:ce:58:4b:78:bb:c9:90:92:
                    b9:52:a8:74:08:8d:f2:bf:92:ea:29:7a:2f:f3:c0:
                    6d:fa:18:94:d7:5b:f9:69:8c:86:bf:36:0d:db:15:
                    23:16:9c:0c:2e:9f:8d:32:9c:61:12:2a:ac:30:35:
                    26:df:09:0b:91:a0:18:b3:ba:5e:b9:c9:4e:65:27:
                    1f:db:26:96:84:14:2b:9f:90:e5:85:c5:e0:1c:df:
                    9d:7b:04:95:0a:8f:13:82:98:85:ad:fe:92:98:ed:
                    c1:82:5b:55:7d:23:28:c9:84:2b:10:be:35:9e:10:
                    62:f7:ee:f4:6e:f4:b4:d5:56:36:eb:95:84:1a:58:
                    77:32:ab:88:7f:58:96:26:6b:7b:b8:a3:bb:d3:1e:
                    48:cc:32:3c:87:67:a2:51:73:9c:7a:15:8e:04:b9:
                    72:35:92:e7:28:9f:24:74:ff:78:3b:e0:25:6c:8f:
                    f8:cf:ec:e4:68:c4:cb:72:83:76:bd:1e:6d:4d:60:
                    26:3a:bb:ab:2b:8d:7e:46:ea:46:89:99:29:ba:20:
                    3f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:45:2C:D2:D5:81:16:EA:3A:8F:B9:5C:0C:68:ED:FC:EC:2A:9E:03
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/vkUs0tWBFuo6j7lcDGjt_OwqngM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:2a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         7b:dc:99:09:8a:9b:af:8e:47:0f:f3:ee:f7:db:db:1d:1b:67:
         6f:d0:a2:05:91:49:40:a2:87:50:48:c9:5d:74:5a:94:61:30:
         ee:13:20:c7:c4:93:4c:6b:70:4f:da:66:06:cc:0e:37:3d:62:
         95:d5:ae:55:51:79:09:f9:d1:b5:12:de:f2:21:86:59:54:c4:
         fd:87:0c:97:b7:51:9c:96:ec:69:5d:ec:53:af:f8:58:fe:16:
         87:f1:63:c5:5a:50:f8:a8:0e:11:6b:23:66:b1:2e:ed:06:01:
         8f:97:31:be:2f:7e:e5:7c:50:35:de:e9:9a:e0:45:e1:6e:4f:
         6c:ba:56:ec:55:6a:7c:ef:c9:08:bb:77:b1:b2:6c:07:12:9a:
         2a:ae:d7:21:25:79:59:09:c8:24:6f:92:64:85:b1:09:e7:08:
         2b:c8:95:de:c0:01:ec:b2:64:ae:c7:d4:19:06:6d:5a:f3:45:
         41:84:9f:3b:39:9b:eb:0c:12:c9:f7:75:dd:9e:2a:f2:ce:df:
         e2:ea:5f:4c:c5:16:5d:7c:1c:86:c7:6f:b1:92:27:71:57:1e:
         83:6b:77:81:62:f1:4a:a9:bd:51:01:4c:9a:10:eb:d4:a2:23:
         d9:e3:66:50:e9:b7:e1:78:ab:2d:8f:46:ba:37:94:a4:5c:f8:
         a0:32:2d:2d
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICAeQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yMzA1MzAx
NzM4MjlaFw0yNDA1MTQwMTMwMDJaMDMxMTAvBgNVBAMTKEJFNDUyQ0QyRDU4MTE2
RUEzQThGQjk1QzBDNjhFREZDRUMyQTlFMDMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDsxrLqB3XmB8RB2z3dTRrarykChpa1v6PscwZDdxPCjhmg+mHs
mqWps6ni1A4dEAM2MvjOWEt4u8mQkrlSqHQIjfK/kuopei/zwG36GJTXW/lpjIa/
Ng3bFSMWnAwun40ynGESKqwwNSbfCQuRoBizul65yU5lJx/bJpaEFCufkOWFxeAc
3517BJUKjxOCmIWt/pKY7cGCW1V9IyjJhCsQvjWeEGL37vRu9LTVVjbrlYQaWHcy
q4h/WJYma3u4o7vTHkjMMjyHZ6JRc5x6FY4EuXI1kuconyR0/3g74CVsj/jP7ORo
xMtyg3a9Hm1NYCY6u6srjX5G6kaJmSm6ID/PAgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQUvkUs0tWBFuo6j7lcDGjt/OwqngMwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS92a1VzMHRXQkZ1bzZqN2xjREdqdF9Pd3FuZ00u
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAayowDQYJKoZIhvcNAQELBQADggEBAHvcmQmKm6+ORw/z7vfb
2x0bZ2/QogWRSUCih1BIyV10WpRhMO4TIMfEk0xrcE/aZgbMDjc9YpXVrlVReQn5
0bUS3vIhhllUxP2HDJe3UZyW7Gld7FOv+Fj+FofxY8VaUPioDhFrI2axLu0GAY+X
Mb4vfuV8UDXe6ZrgReFuT2y6VuxVanzvyQi7d7GybAcSmiqu1yEleVkJyCRvkmSF
sQnnCCvIld7AAeyyZK7H1BkGbVrzRUGEnzs5m+sMEsn3dd2eKvLO3+LqX0zFFl18
HIbHb7GSJ3FXHoNrd4Fi8UqpvVEBTJoQ69SiI9njZlDpt+F4qy2PRro3lKRc+KAy
LS0=
-----END CERTIFICATE-----
Generated at Sat Apr 27 10:15:53 2024 by rpki-client on console-ams.rpki-client.org