Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/yzibrvpd8g9FN863DRjd6tNKprQ.roa
File:                     yzibrvpd8g9FN863DRjd6tNKprQ.roa (raw, json)
Hash identifier:          EauXWDF+YnjF6K5NpeAoXk93LsjC6SV0zLJvg/Ch1AU=
Subject key identifier:   CB:38:9B:AE:FA:5D:F2:0F:45:37:CE:B7:0D:18:DD:EA:D3:4A:A6:B4
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       02BF
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/yzibrvpd8g9FN863DRjd6tNKprQ.roa
Signing time:             Tue 30 Apr 2024 01:39:33 +0000
ROA not before:           Tue 30 Apr 2024 01:39:33 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:f100::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 22:26:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 703 (0x2bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 01:39:33 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=CB389BAEFA5DF20F4537CEB70D18DDEAD34AA6B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:bf:ab:8b:2a:c2:40:d8:a3:ee:f8:7c:8d:99:
                    11:99:7b:06:af:6a:69:89:0f:1e:a2:1d:4b:09:77:
                    a2:e3:08:c2:97:32:7f:8c:20:17:08:30:bf:7c:ae:
                    92:b0:52:6f:f8:e7:52:5d:c4:9c:4f:3e:e1:ea:01:
                    f2:76:ff:0e:28:c3:7a:62:fa:31:38:30:de:ed:3f:
                    29:52:c5:54:93:5d:54:62:c3:9f:a0:65:f7:17:39:
                    b5:c8:7a:40:89:fc:9b:24:62:be:a4:60:5e:83:59:
                    7e:c0:23:ef:a1:b6:e7:bc:5d:89:7b:fd:0a:54:de:
                    b2:65:ba:fc:e3:f8:16:0f:ca:79:60:b1:95:a2:b3:
                    62:64:27:a1:5d:4f:3e:c4:f0:c5:35:2a:4d:33:42:
                    62:9e:58:92:4b:9a:85:83:0d:45:11:30:6d:b1:08:
                    ca:aa:14:85:d6:34:3f:f1:fd:a5:c4:ef:b7:0c:57:
                    ac:fc:54:a3:18:58:d1:f1:50:24:6d:00:5d:2c:7e:
                    bf:00:67:a6:0b:56:8d:8a:9d:4a:1c:8c:43:82:50:
                    2a:5a:07:7b:f8:d8:8d:95:a7:b6:70:9a:55:f4:d8:
                    5d:cb:8a:5a:35:60:9e:bc:06:a2:c6:37:04:45:a7:
                    50:01:78:22:1f:38:29:b0:b4:c6:fd:de:c1:d6:de:
                    55:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:38:9B:AE:FA:5D:F2:0F:45:37:CE:B7:0D:18:DD:EA:D3:4A:A6:B4
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/yzibrvpd8g9FN863DRjd6tNKprQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:f100::/40

    Signature Algorithm: sha256WithRSAEncryption
         91:d3:80:ca:ba:e7:0d:bb:d6:ca:5a:d7:ba:2f:c7:c4:7f:b5:
         46:d7:63:70:90:3c:e1:32:7e:fe:b3:ac:b8:c2:a0:8c:68:69:
         c6:c4:dc:4a:32:dc:bd:d4:d2:58:da:37:dd:e9:d1:00:3f:9a:
         b6:b2:1f:43:da:ca:de:a4:57:88:93:6e:58:0f:39:56:a2:02:
         35:f2:7b:03:97:cd:4e:0c:39:96:d3:1d:6f:3f:4b:65:22:37:
         12:08:33:88:b1:de:ed:b4:6d:b3:fb:7e:e0:ce:fa:3e:2f:42:
         ca:c1:cf:16:c5:6e:5a:1a:d5:78:40:b1:44:cd:04:cd:37:49:
         bd:ba:10:5e:25:06:08:0f:00:19:67:1b:3d:f6:24:72:83:bf:
         c5:28:b8:06:0c:ee:22:2f:eb:af:a1:1f:11:95:6a:fe:03:36:
         33:e9:84:9e:24:c0:df:36:02:f8:bc:5d:08:4f:d7:3c:c5:6a:
         01:8c:7f:83:3b:0a:d0:30:06:4a:aa:59:09:58:61:37:e9:11:
         6a:0b:d9:c8:6e:4c:f3:c5:4d:b7:7d:7b:6e:5f:42:37:58:80:
         dc:19:b2:7a:ce:3e:82:34:1d:6c:da:ad:6f:ba:da:1d:62:22:
         82:77:0f:2e:39:05:b1:62:09:c5:88:2d:bc:5b:29:da:15:5d:
         61:bd:2d:bb
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICAr8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNDA0MzAw
MTM5MzNaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKENCMzg5QkFFRkE1REYy
MEY0NTM3Q0VCNzBEMThEREVBRDM0QUE2QjQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDbv6uLKsJA2KPu+HyNmRGZewavammJDx6iHUsJd6LjCMKXMn+M
IBcIML98rpKwUm/451JdxJxPPuHqAfJ2/w4ow3pi+jE4MN7tPylSxVSTXVRiw5+g
ZfcXObXIekCJ/JskYr6kYF6DWX7AI++htue8XYl7/QpU3rJluvzj+BYPynlgsZWi
s2JkJ6FdTz7E8MU1Kk0zQmKeWJJLmoWDDUURMG2xCMqqFIXWND/x/aXE77cMV6z8
VKMYWNHxUCRtAF0sfr8AZ6YLVo2KnUocjEOCUCpaB3v42I2Vp7ZwmlX02F3Lilo1
YJ68BqLGNwRFp1ABeCIfOCmwtMb93sHW3lWZAgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQUyzibrvpd8g9FN863DRjd6tNKprQwHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS95emlicnZwZDhnOUZOODYzRFJqZDZ0TktwclEu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAa/EwDQYJKoZIhvcNAQELBQADggEBAJHTgMq65w271spa17ov
x8R/tUbXY3CQPOEyfv6zrLjCoIxoacbE3Eoy3L3U0ljaN93p0QA/mrayH0Payt6k
V4iTblgPOVaiAjXyewOXzU4MOZbTHW8/S2UiNxIIM4ix3u20bbP7fuDO+j4vQsrB
zxbFbloa1XhAsUTNBM03Sb26EF4lBggPABlnGz32JHKDv8UouAYM7iIv66+hHxGV
av4DNjPphJ4kwN82Avi8XQhP1zzFagGMf4M7CtAwBkqqWQlYYTfpEWoL2chuTPPF
Tbd9e25fQjdYgNwZsnrOPoI0HWzarW+62h1iIoJ3Dy45BbFiCcWILbxbKdoVXWG9
Lbs=
-----END CERTIFICATE-----
Generated at Fri Jun 7 00:11:43 2024 by rpki-client on console-ams.rpki-client.org