Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/z1OqSCZz46XQkrJBtkMKAjyXC-o.roa
File:                     z1OqSCZz46XQkrJBtkMKAjyXC-o.roa (raw, json)
Hash identifier:          A77afSQp889sNmGYRBb/gV/v+aMT63vj5vZY1sHzllY=
Subject key identifier:   CF:53:AA:48:26:73:E3:A5:D0:92:B2:41:B6:43:0A:02:3C:97:0B:EA
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       02C5
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/z1OqSCZz46XQkrJBtkMKAjyXC-o.roa
Signing time:             Tue 30 Apr 2024 01:39:36 +0000
ROA not before:           Tue 30 Apr 2024 01:39:36 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:bf00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 709 (0x2c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 01:39:36 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=CF53AA482673E3A5D092B241B6430A023C970BEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:88:a1:f6:77:8b:56:41:5b:a4:aa:86:b8:33:
                    8f:e9:90:8f:79:b1:7b:b9:82:8e:30:1e:a8:e0:93:
                    89:58:aa:1c:57:01:4f:8b:87:fc:cf:1f:c2:35:8a:
                    41:39:83:c2:31:40:f1:35:bd:66:4c:ae:14:a1:86:
                    88:9a:56:83:ca:9d:d1:9a:5f:d0:0f:2f:9c:79:be:
                    2a:fd:3a:b3:8d:1e:d4:1f:ed:0d:4c:d5:b4:fb:23:
                    30:60:4c:fb:b0:c0:2a:2c:c3:25:e0:ae:bc:1b:38:
                    4b:21:27:89:78:96:db:31:f2:2c:ac:db:24:df:87:
                    c8:1c:58:2a:c4:53:16:bc:02:e6:6f:fc:b9:cf:cb:
                    e0:bf:02:cf:cf:19:36:3b:00:b4:71:d4:34:c0:79:
                    6a:96:cc:46:e1:bb:97:89:3a:83:1c:40:f9:e1:21:
                    a8:ec:ae:61:c1:30:61:19:9b:79:93:60:82:d6:24:
                    a5:d6:94:80:0d:9c:75:75:86:6f:69:5b:30:67:49:
                    a2:ec:ca:b6:2f:35:6e:5f:a5:d0:b0:92:02:be:9d:
                    23:2e:45:60:6c:90:19:26:54:24:88:5b:6e:af:4d:
                    b1:d5:71:f5:42:fe:4e:6f:c9:ba:0b:6b:c0:c0:0b:
                    be:d5:51:7c:68:19:6c:d8:a3:00:dd:06:f1:72:23:
                    f0:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:53:AA:48:26:73:E3:A5:D0:92:B2:41:B6:43:0A:02:3C:97:0B:EA
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/z1OqSCZz46XQkrJBtkMKAjyXC-o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:bf00::/40

    Signature Algorithm: sha256WithRSAEncryption
         19:80:66:a4:ed:97:a3:1c:d7:d4:d7:7b:d2:8e:16:cb:61:60:
         61:81:0b:a9:76:2a:47:18:29:b2:3b:06:9e:bb:29:c9:d6:ed:
         af:ec:c8:1d:96:d6:1d:27:d2:5b:bc:f3:a3:c1:d6:42:85:0f:
         01:6a:f4:c8:63:fe:12:2d:ea:b6:88:1e:29:3b:0a:4b:f9:75:
         13:29:09:c4:e8:c1:f3:29:a6:a0:f4:21:a9:af:d3:5f:69:e6:
         ff:d4:69:70:d7:a8:6a:e6:60:6f:87:f3:53:1b:0f:78:f1:44:
         1b:3d:48:ad:c4:10:4a:77:d7:ed:8d:0c:22:41:5f:dc:61:a5:
         23:7d:7d:67:55:8f:9e:f6:ef:b5:cd:2d:ee:fc:ea:dc:23:92:
         8b:2b:00:13:d5:ef:7b:2f:c1:b0:19:cd:53:9a:68:00:6f:3c:
         01:46:79:c9:bb:c0:99:71:e5:50:ac:93:c5:45:ad:a5:f3:23:
         1f:8f:c2:bf:34:ac:65:0d:09:e2:91:0e:74:da:84:8c:73:87:
         ed:a5:5d:f1:13:bc:1b:71:11:f5:06:8e:c0:13:4c:3e:b8:9e:
         1b:39:dc:71:f4:dd:92:26:8e:65:f6:17:0d:34:21:b3:4e:af:
         8e:b6:31:bb:d4:7c:c8:b1:4d:81:81:a7:e9:0d:9c:12:3c:e8:
         f5:0d:08:57
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgICAsUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTEy
NjE3M0I4RDZCM0ZGMTBFM0YwM0ZCMDU2MEZFNjU1MURFQTJEQjAeFw0yNDA0MzAw
MTM5MzZaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKENGNTNBQTQ4MjY3M0Uz
QTVEMDkyQjI0MUI2NDMwQTAyM0M5NzBCRUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDAiKH2d4tWQVukqoa4M4/pkI95sXu5go4wHqjgk4lYqhxXAU+L
h/zPH8I1ikE5g8IxQPE1vWZMrhShhoiaVoPKndGaX9APL5x5vir9OrONHtQf7Q1M
1bT7IzBgTPuwwCoswyXgrrwbOEshJ4l4ltsx8iys2yTfh8gcWCrEUxa8AuZv/LnP
y+C/As/PGTY7ALRx1DTAeWqWzEbhu5eJOoMcQPnhIajsrmHBMGEZm3mTYILWJKXW
lIANnHV1hm9pWzBnSaLsyrYvNW5fpdCwkgK+nSMuRWBskBkmVCSIW26vTbHVcfVC
/k5vyboLa8DAC77VUXxoGWzYowDdBvFyI/DBAgMBAAGjggIqMIICJjAdBgNVHQ4E
FgQUz1OqSCZz46XQkrJBtkMKAjyXC+owHwYDVR0jBBgwFoAUUSYXO41rP/EOPwP7
BWD+ZVHeotswGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwMTI5L1VTWVhPNDFyUF9FT1B3UDdCV0QtWlZIZW90cy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VTWVhPNDFyUF9FT1B3UDdCV0Qt
WlZIZW90cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8zMDEyOS96MU9xU0NaejQ2WFFrckpCdGtNS0FqeVhDLW8u
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMCEGCCsGAQUFBwEHAQH/BBIwEDAO
BAIAAjAIAwYAJAoAa78wDQYJKoZIhvcNAQELBQADggEBABmAZqTtl6Mc19TXe9KO
FsthYGGBC6l2KkcYKbI7Bp67KcnW7a/syB2W1h0n0lu886PB1kKFDwFq9Mhj/hIt
6raIHik7Ckv5dRMpCcTowfMppqD0Iamv019p5v/UaXDXqGrmYG+H81MbD3jxRBs9
SK3EEEp31+2NDCJBX9xhpSN9fWdVj57277XNLe786twjkosrABPV73svwbAZzVOa
aABvPAFGecm7wJlx5VCsk8VFraXzIx+Pwr80rGUNCeKRDnTahIxzh+2lXfETvBtx
EfUGjsATTD64nhs53HH03ZImjmX2Fw00IbNOr462MbvUfMixTYGBp+kNnBI86PUN
CFc=
-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:07 2024 by rpki-client on console-fra.rpki-client.org