Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/0idLWeLsKms9eK4oM1tzX26QgNs.roa
File:                     0idLWeLsKms9eK4oM1tzX26QgNs.roa (raw, json)
Hash identifier:          ouov6WDrUEsWswo8L7XtzkA3R0bpzg95CM0AHbgjccI=
Subject key identifier:   D2:27:4B:59:E2:EC:2A:6B:3D:78:AE:28:33:5B:73:5F:6E:90:80:DB
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0320
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/0idLWeLsKms9eK4oM1tzX26QgNs.roa
Signing time:             Tue 30 Apr 2024 01:50:54 +0000
ROA not before:           Tue 30 Apr 2024 01:50:54 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:5900::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 800 (0x320)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 01:50:54 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=D2274B59E2EC2A6B3D78AE28335B735F6E9080DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5c:a0:51:ed:89:48:63:bf:69:5a:cb:6a:f3:
                    9c:1c:f9:2e:0b:68:a9:36:57:95:ee:b3:ce:07:3d:
                    5c:9a:60:2c:55:d7:45:7e:02:93:60:00:9c:84:55:
                    e4:b0:bb:b5:a6:cb:34:ef:dd:6f:83:43:ff:b9:1f:
                    64:dd:63:64:d1:1b:96:ae:a4:ba:76:7b:bf:38:80:
                    56:99:f5:c4:89:2f:2f:c7:64:6f:33:f9:69:03:14:
                    85:48:a7:a1:05:b3:79:70:62:5d:de:e0:7e:28:da:
                    de:75:75:6a:db:b3:65:53:87:39:f9:87:89:19:b4:
                    2e:82:4f:e9:a1:27:06:ea:fd:b0:05:52:b3:b4:02:
                    9d:1f:72:41:76:e3:ee:06:98:4a:3a:e8:58:67:8d:
                    f1:a7:90:dc:fa:6e:16:53:64:21:a0:24:2d:17:eb:
                    9e:58:6b:d1:22:07:9d:63:4c:e1:71:3d:52:d4:4c:
                    92:2f:45:d6:a2:f9:5a:2f:17:5e:f0:2d:6b:06:06:
                    d1:ae:ba:fc:9d:0d:aa:5a:b7:4b:e2:09:65:c9:7a:
                    c1:17:bb:97:c6:f5:93:4a:ad:02:ba:ba:be:ad:59:
                    2b:29:53:7e:8b:52:be:85:89:78:bf:39:a7:7b:92:
                    ad:ef:25:6d:98:78:97:4c:67:82:ea:de:88:e2:e2:
                    45:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:27:4B:59:E2:EC:2A:6B:3D:78:AE:28:33:5B:73:5F:6E:90:80:DB
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/0idLWeLsKms9eK4oM1tzX26QgNs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:5900::/40

    Signature Algorithm: sha256WithRSAEncryption
         26:64:09:3c:3a:65:3f:7d:cb:4d:2c:85:2f:84:66:d9:a3:b5:
         37:7b:b5:4e:56:7b:e2:c8:94:f4:b3:2c:6a:5e:2a:1b:4b:91:
         86:c7:69:dc:fd:70:87:4e:61:c8:0b:87:20:c7:19:aa:ce:6c:
         73:d0:60:c0:1e:86:fd:56:ed:38:78:54:ca:4a:ad:86:53:bd:
         1c:6b:cf:8a:5a:be:64:e3:2b:e7:61:50:e3:39:a0:c2:2a:7b:
         b8:e7:cc:af:f2:bf:a5:53:a9:76:e1:f6:98:3f:cd:1c:07:0e:
         9a:c1:a3:ec:00:82:56:f2:28:96:b2:76:aa:40:7b:60:73:73:
         7b:23:74:7f:2e:a5:02:2f:6b:2a:22:c8:41:2c:aa:eb:d1:5a:
         97:19:46:b5:ec:f6:78:a5:8e:22:37:f7:94:e7:8b:38:21:d2:
         c2:4a:7a:92:65:df:c2:e7:4a:eb:5e:bf:1e:1f:40:2c:42:07:
         06:a3:82:f0:bb:f7:0e:ff:3d:ab:e9:7a:e1:64:48:1a:94:46:
         b0:ea:3f:09:8f:f1:eb:19:c3:85:09:7f:1f:b2:6d:f5:ac:41:
         96:23:7e:d5:2c:12:a7:d0:d7:ef:f7:9f:55:26:4a:f0:35:09:
         7c:2e:05:6b:30:ea:e7:f0:16:7b:83:02:ab:6e:64:5d:59:7c:
         6c:99:b6:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:33 2024 by rpki-client on console-ams.rpki-client.org