Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/-Z68Z-3wXwdEPx3JjfILAl43m_M.roa
File:                     -Z68Z-3wXwdEPx3JjfILAl43m_M.roa (raw, json)
Hash identifier:          SDYn8RxBn1SyiJjGOz63wqHH+CiPUvY+8/72MyMz1/g=
Subject key identifier:   F9:9E:BC:67:ED:F0:5F:07:44:3F:1D:C9:8D:F2:0B:02:5E:37:9B:F3
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       032B
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/-Z68Z-3wXwdEPx3JjfILAl43m_M.roa
Signing time:             Tue 30 Apr 2024 01:53:52 +0000
ROA not before:           Tue 30 Apr 2024 01:53:52 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:be00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Sep 2024 01:36:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 811 (0x32b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 01:53:52 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=F99EBC67EDF05F07443F1DC98DF20B025E379BF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:17:df:f0:72:6f:a1:4a:7c:91:16:f0:be:02:
                    0c:09:9f:03:f2:4f:e8:53:d4:51:d7:08:36:e5:be:
                    7c:fa:9e:8e:09:e7:e2:66:31:a7:12:78:73:3f:82:
                    af:7e:43:ab:54:38:2a:cf:41:00:1e:31:8d:5b:74:
                    12:a9:7a:64:9f:4a:2d:24:77:97:13:75:51:ea:cb:
                    e7:8d:10:2e:7c:04:e9:b4:ba:ae:82:d1:4a:2d:cb:
                    fc:61:33:43:45:05:4d:04:36:88:71:2b:b1:b7:89:
                    ca:29:2b:d0:da:af:3c:f7:5f:23:b7:dc:59:09:a7:
                    10:34:36:0f:12:64:72:f9:b6:67:33:86:0d:19:27:
                    34:75:ee:6b:61:10:80:08:dd:ae:fa:ab:da:23:6f:
                    f8:1e:de:9c:2d:dc:82:92:65:48:3d:3a:d9:bd:e0:
                    f9:fb:1a:7e:15:23:cd:e5:c1:d5:44:b8:59:03:7b:
                    5f:bb:aa:40:4b:2b:d7:c5:ac:b2:cd:a8:6c:c8:4b:
                    ba:0a:29:87:28:2b:ea:96:fb:99:ba:1e:dc:6c:8d:
                    c7:0f:61:bf:5b:47:a4:d1:76:1c:58:7b:72:52:7e:
                    58:84:b0:0b:82:a4:28:a5:af:c2:d5:16:79:57:ca:
                    09:a4:af:2c:aa:0b:a0:8a:d8:7b:d7:fa:ca:42:ef:
                    d9:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:9E:BC:67:ED:F0:5F:07:44:3F:1D:C9:8D:F2:0B:02:5E:37:9B:F3
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/-Z68Z-3wXwdEPx3JjfILAl43m_M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:be00::/40

    Signature Algorithm: sha256WithRSAEncryption
         65:e0:04:b9:98:75:d6:ed:18:af:b1:a9:64:b4:74:a3:32:6d:
         5c:da:a8:76:97:c7:8e:d5:e8:2c:27:9f:c7:41:86:52:27:82:
         f9:3b:cd:77:06:53:11:3f:5e:66:43:28:9b:1d:56:f1:07:95:
         6d:99:b0:f7:b1:f9:c9:be:09:88:23:f2:6d:c6:10:3e:31:5b:
         cc:d7:0b:a2:2e:b9:11:ec:f3:37:db:ab:80:cc:31:d3:4a:3e:
         89:db:b3:92:e6:34:52:61:34:90:ea:8d:a7:a4:52:67:f3:0a:
         a8:80:85:42:e7:b1:fd:d0:80:43:e1:33:42:ac:c2:78:9d:e9:
         00:ed:98:38:27:1b:cb:1a:9a:ac:3a:61:e7:e3:a8:d0:8f:10:
         d0:f0:94:03:07:ff:fc:a5:28:a5:54:60:11:bd:a0:89:21:5b:
         60:fd:73:72:dc:e0:1f:68:dc:c0:ed:53:00:d2:fb:58:c9:12:
         9c:84:7a:03:1c:32:22:8f:6c:ea:7e:9e:94:bb:69:97:25:d7:
         0b:67:70:57:19:8e:6b:d4:7b:d2:9f:50:30:1d:4f:05:c5:e1:
         3b:d6:26:0d:6e:76:cf:c3:b7:09:f8:d3:c9:5e:f5:42:af:c8:
         1b:d9:95:24:a5:53:97:dd:07:d1:ee:ae:57:5e:ca:a6:c1:9b:
         71:03:cb:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 10:51:58 2024 by rpki-client on console-fra.rpki-client.org