Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/yed6MiMQuSH1Y8LePiAC-248Jo4.roa
File:                     yed6MiMQuSH1Y8LePiAC-248Jo4.roa (raw, json)
Hash identifier:          PtOArIb6SRpeUTGb3rIdp3bTGyg3p7wcGZE/t2mMzNo=
Subject key identifier:   C9:E7:7A:32:23:10:B9:21:F5:63:C2:DE:3E:20:02:FB:6E:3C:26:8E
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0370
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/yed6MiMQuSH1Y8LePiAC-248Jo4.roa
Signing time:             Tue 30 Apr 2024 01:59:56 +0000
ROA not before:           Tue 30 Apr 2024 01:59:56 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:7a00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 22:26:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 880 (0x370)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 01:59:56 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=C9E77A322310B921F563C2DE3E2002FB6E3C268E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:49:39:a8:25:ee:03:07:c0:5d:1c:5d:2e:01:
                    08:72:28:2e:db:f8:0c:68:49:3a:5d:2d:77:1b:37:
                    83:16:74:b9:7d:ef:da:34:87:0d:36:9c:ef:4e:5c:
                    f9:aa:9c:0e:21:07:eb:70:13:a4:f6:88:17:57:9b:
                    4e:93:ac:82:b9:1f:99:22:f9:11:78:27:7a:df:1d:
                    1a:8b:2a:6e:a9:5f:49:1a:2e:1b:6b:44:6d:6d:6a:
                    e2:18:39:be:39:6f:f9:87:42:86:c6:37:ef:e1:e3:
                    11:58:c6:55:e8:e2:52:bf:fa:61:c1:23:41:9b:7a:
                    23:01:ea:a9:18:1a:49:66:78:52:e0:5f:ed:8b:d8:
                    16:83:b4:37:39:15:56:2e:6e:bf:38:24:08:d2:0d:
                    35:a7:b2:5f:0e:0a:34:bc:50:b0:8b:51:69:34:5b:
                    6c:42:ce:4c:45:2c:08:3f:33:ae:05:0b:b7:39:dd:
                    c4:11:94:37:af:c2:11:b0:7b:99:29:6a:ea:19:23:
                    e1:d9:a7:24:07:ff:2a:ba:39:4c:ae:70:77:a2:23:
                    52:cb:24:96:f6:c1:48:d0:7c:56:ee:48:08:ca:91:
                    1b:d3:5b:d5:24:ff:fe:f7:ed:13:4e:93:49:25:0d:
                    53:f6:45:0d:a1:51:6c:c8:ea:7d:86:f7:53:28:74:
                    ec:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:E7:7A:32:23:10:B9:21:F5:63:C2:DE:3E:20:02:FB:6E:3C:26:8E
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/yed6MiMQuSH1Y8LePiAC-248Jo4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:7a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         63:ec:fc:54:97:db:8d:74:80:f6:3d:24:b8:c7:7f:fd:b9:7d:
         47:f6:cf:6e:5a:e1:c7:0c:07:ec:4b:d7:3b:35:e4:08:13:a9:
         98:ab:d0:75:ed:12:73:1a:aa:90:b3:10:fe:65:d7:84:41:a5:
         bb:cb:fc:2b:39:8f:7a:eb:4c:37:75:60:fe:14:0f:15:a7:79:
         c2:a8:5e:8c:04:16:78:de:2e:93:c5:d5:ea:b6:fd:4b:6f:c2:
         93:77:7d:c3:da:fe:83:94:58:cf:7a:5c:72:7b:7e:1a:76:7e:
         ef:5f:12:24:fb:25:4e:35:a4:ff:fd:7a:21:27:97:64:74:38:
         e6:50:c7:32:ac:af:42:5e:e3:e8:0a:9e:77:95:5a:bc:b6:bc:
         b2:53:76:8e:98:ff:a9:02:b8:3b:71:da:8f:51:0a:c6:18:68:
         67:71:d5:a1:c2:2d:a1:98:1d:2d:f6:0c:bd:57:02:e9:9a:fd:
         c4:73:e8:d1:ca:63:e7:23:8c:67:5e:c5:dc:b7:2a:83:c8:3c:
         68:4b:53:66:1b:7f:0d:71:1a:b8:9c:fb:b5:f9:e2:b8:33:f4:
         cf:54:d9:1c:a8:58:4f:d6:37:04:82:f7:e0:3d:2a:3a:3c:4a:
         03:0f:f0:70:52:a2:17:dd:8e:65:a9:18:24:98:44:f4:33:5c:
         19:11:3e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 00:11:43 2024 by rpki-client on console-ams.rpki-client.org