Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/zFQS0nxlh0E0XweeKY3X4MutbSk.roa
File:                     zFQS0nxlh0E0XweeKY3X4MutbSk.roa (raw, json)
Hash identifier:          zfsLXP1fOY6b03Xs6RgiU8tE8Fd1nlY6KGJ+BrgruSg=
Subject key identifier:   CC:54:12:D2:7C:65:87:41:34:5F:07:9E:29:8D:D7:E0:CB:AD:6D:29
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0390
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/zFQS0nxlh0E0XweeKY3X4MutbSk.roa
Signing time:             Tue 30 Apr 2024 02:02:44 +0000
ROA not before:           Tue 30 Apr 2024 02:02:44 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:f500::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 912 (0x390)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 02:02:44 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=CC5412D27C658741345F079E298DD7E0CBAD6D29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:46:f1:34:5f:a8:e2:8a:7a:4a:a9:10:44:10:
                    e4:97:5a:ab:41:34:e4:38:38:d9:fc:1d:28:ee:17:
                    4b:b2:7b:f6:29:63:fd:17:f7:3b:70:43:e5:72:dc:
                    a9:89:f3:9b:9a:4c:cf:fb:3a:d7:03:cf:2f:3e:b5:
                    8d:25:2d:0c:bc:2d:69:cf:45:bf:a6:a6:2c:5f:9f:
                    40:4b:7f:b1:af:80:3b:9d:35:90:07:37:70:0d:30:
                    2a:a0:53:ee:9d:81:b2:f8:1a:94:98:fa:f9:9f:0f:
                    4f:57:63:8f:a1:2d:f0:57:9d:ac:5b:69:15:ed:f8:
                    fa:02:1e:8d:d8:81:f4:d4:40:19:5e:ed:63:90:48:
                    17:cf:04:5d:e4:76:e8:d0:b4:d4:74:ba:ce:09:c8:
                    09:8d:a6:ad:fe:9b:f0:84:c7:92:75:31:b4:83:71:
                    21:65:32:c5:4c:fd:37:0e:c0:37:40:83:b2:d7:99:
                    2f:c9:4d:e4:35:97:70:9f:32:38:e1:5b:0a:ce:50:
                    fd:14:df:5e:1d:a9:ca:33:7f:3f:e4:27:28:1c:32:
                    ab:da:04:2c:b0:e8:3f:57:ba:2d:8d:85:e1:19:c9:
                    d8:01:70:dd:46:18:85:2b:6c:62:d6:4a:63:6d:af:
                    30:ba:23:25:5d:19:92:29:07:f9:89:97:d0:f5:7e:
                    00:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:54:12:D2:7C:65:87:41:34:5F:07:9E:29:8D:D7:E0:CB:AD:6D:29
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/zFQS0nxlh0E0XweeKY3X4MutbSk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:f500::/40

    Signature Algorithm: sha256WithRSAEncryption
         50:63:0d:a6:ea:ea:8e:fa:33:c5:72:9c:ef:36:ad:07:09:ce:
         dd:24:2c:b9:fd:3f:19:3a:b6:4b:6b:84:85:b7:f5:da:3b:07:
         c2:af:4a:1b:46:e6:82:92:6b:9b:8b:d0:0f:63:07:2a:e0:97:
         a8:dd:91:25:05:59:a8:c6:a6:71:94:8d:a5:a6:d5:60:d5:41:
         b1:e1:49:c0:fe:0e:cd:83:0f:4c:4b:89:d1:01:44:14:a7:61:
         9a:04:f6:6d:e4:f9:58:25:0b:2b:89:ad:e6:d0:ff:ef:ad:bd:
         92:8d:de:d1:18:fb:01:58:ac:ee:64:67:08:90:27:d4:05:1a:
         5d:b4:c5:aa:30:b5:04:72:dc:56:fe:c8:9f:36:67:4c:25:fa:
         a7:d5:10:8a:33:11:ff:8a:05:30:cc:ad:f2:6e:71:eb:20:dd:
         b1:a6:d4:e6:62:cb:56:25:02:0c:73:2c:c2:4b:5a:63:15:f5:
         92:22:85:b5:0e:3b:60:a1:4a:03:8a:66:61:ea:44:eb:47:02:
         60:55:77:c7:87:36:57:c8:2c:f7:b6:c2:06:12:b4:ff:d9:50:
         10:19:d3:64:46:8a:65:e1:f4:ea:48:b2:eb:56:76:ca:ce:bd:
         e5:07:a2:a8:65:13:15:52:28:4f:ee:a9:b6:0b:6f:bb:4c:a9:
         59:5f:8a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:09:59 2025 by rpki-client