Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/-xHZv8QmZzD0SKNKWn5ypDBE3dE.roa
File:                     -xHZv8QmZzD0SKNKWn5ypDBE3dE.roa (raw, json)
Hash identifier:          X8yf3rRp8KzqKAq7xips+NwsrkltcYZibnGloWzLyKs=
Subject key identifier:   FB:11:D9:BF:C4:26:67:30:F4:48:A3:4A:5A:7E:72:A4:30:44:DD:D1
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       02CE
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/-xHZv8QmZzD0SKNKWn5ypDBE3dE.roa
Signing time:             Tue 30 Apr 2024 01:44:49 +0000
ROA not before:           Tue 30 Apr 2024 01:44:49 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:4600::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 10:06:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 718 (0x2ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 01:44:49 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=FB11D9BFC4266730F448A34A5A7E72A43044DDD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:6f:7f:a2:79:42:07:43:ec:a4:3f:1c:c0:cc:
                    3d:d1:45:5e:d1:29:62:8f:97:5b:e8:c6:e7:0d:75:
                    07:99:35:53:c5:8d:e6:b1:75:16:dd:71:91:2a:54:
                    2f:3a:28:50:2e:71:5e:ae:85:44:02:de:ad:d5:f9:
                    84:17:19:7d:9d:3d:d4:d1:cd:b2:b8:c9:13:b2:ff:
                    ec:ca:38:c0:99:7d:7c:6c:24:83:f4:19:42:6c:38:
                    9f:66:4d:2b:5a:2f:c5:12:da:a3:ac:6d:8f:2a:bc:
                    5f:76:13:e6:73:93:48:13:c1:86:b2:21:c9:93:34:
                    d6:1f:c1:2c:9b:c5:ee:1b:0c:a6:50:3f:3c:e6:14:
                    39:8f:9f:c4:59:da:82:ae:c4:13:22:b1:d5:e1:f9:
                    73:e4:fd:97:b9:01:22:af:f9:34:cb:3d:01:28:06:
                    71:a1:e2:5a:59:75:95:1c:d2:36:18:fe:4a:52:c2:
                    f5:01:a4:aa:9e:08:fa:43:82:ac:ab:a8:df:db:2d:
                    c4:ac:26:3c:1a:30:03:5b:68:c6:8d:31:8b:ac:6f:
                    f4:dc:cf:e5:69:03:95:27:9b:c3:94:97:c6:2d:5c:
                    87:bf:83:19:7d:3b:30:84:52:f8:ad:19:a7:17:8d:
                    b1:81:6e:9e:4f:7d:71:28:6f:81:91:e3:6d:f3:8b:
                    b3:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:11:D9:BF:C4:26:67:30:F4:48:A3:4A:5A:7E:72:A4:30:44:DD:D1
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/-xHZv8QmZzD0SKNKWn5ypDBE3dE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:4600::/40

    Signature Algorithm: sha256WithRSAEncryption
         45:70:56:a9:6a:e6:27:5b:c7:d9:be:d8:cd:08:9c:0f:13:d4:
         32:ea:78:66:e4:40:a9:7f:c0:a7:5d:ae:66:de:3b:e6:de:ee:
         9b:2b:62:3a:a4:df:ca:9d:5e:00:c1:51:8b:84:50:58:a5:03:
         04:08:5d:6a:0d:40:b1:ef:b3:54:38:17:8e:91:c7:6e:30:84:
         d3:f5:e7:1a:fb:02:98:cf:4c:ff:b2:19:b2:58:07:2c:e3:0e:
         c9:61:61:6f:04:1f:7b:89:da:79:3b:7c:3c:e3:fc:9e:c2:db:
         22:bb:9d:4f:89:d8:a2:49:a4:5b:ff:34:b8:61:e0:9f:ff:59:
         8e:eb:cb:95:c1:84:67:f2:94:ad:bd:0a:ef:7d:d4:17:43:b7:
         cc:fc:39:70:32:47:2c:9c:8b:4f:0e:af:ef:5e:dd:72:f3:02:
         78:bd:ba:0e:74:b0:e2:4a:8e:e1:56:c0:61:4a:4a:b7:a0:0e:
         d8:42:e5:1e:7e:35:1d:aa:bc:0b:c3:d4:5f:dc:a3:cf:33:95:
         fd:62:a5:00:d1:4b:89:e8:50:ec:c4:bd:63:41:9e:5f:82:f9:
         79:f9:bb:67:49:92:ca:15:ec:0e:60:28:ae:eb:97:62:ea:af:
         37:95:f2:8f:13:6a:a5:3a:8c:b4:81:da:e4:45:50:cd:7b:08:
         18:62:48:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 11:28:28 2024 by rpki-client on console-ams.rpki-client.org