Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/19s2S7eBg_zqtKNoTlcRudMjcXM.roa
File:                     19s2S7eBg_zqtKNoTlcRudMjcXM.roa (raw, json)
Hash identifier:          lO1xK8pVdAzLKivgNQ0+I6wuyc5/eodujAMLcm9fuL4=
Subject key identifier:   D7:DB:36:4B:B7:81:83:FC:EA:B4:A3:68:4E:57:11:B9:D3:23:71:73
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0258
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/19s2S7eBg_zqtKNoTlcRudMjcXM.roa
Signing time:             Thu 27 Jul 2023 17:23:37 +0000
ROA not before:           Thu 27 Jul 2023 17:23:37 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:0:200::/41 maxlen: 41

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 22:26:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 600 (0x258)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Jul 27 17:23:37 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=D7DB364BB78183FCEAB4A3684E5711B9D3237173
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:fb:4d:0b:16:e4:dc:85:c1:72:1d:50:6c:bd:
                    af:27:32:fa:cf:be:77:30:5f:84:09:31:3b:2f:1f:
                    84:17:cd:b0:23:67:e9:92:38:de:3a:43:d5:d3:c8:
                    e2:fc:bb:17:d7:86:7d:a3:41:27:0f:a9:7a:28:ac:
                    6d:37:23:51:34:6f:d5:85:d4:9d:49:db:ab:23:33:
                    bb:6d:5b:d0:78:4b:1f:4f:cc:96:6b:1d:94:28:47:
                    7f:72:58:aa:b7:b7:63:47:69:0b:86:6b:e2:66:86:
                    19:25:f8:b4:d3:95:fa:96:b4:2c:07:1e:91:9e:fc:
                    67:41:7a:29:b9:c9:d1:f9:2c:6d:bf:73:e2:40:60:
                    59:93:90:ac:4e:e4:de:c8:d9:67:fd:76:bd:48:9e:
                    f1:a4:18:17:bf:20:4b:e5:c6:95:60:23:bf:95:c5:
                    c8:ce:da:5c:59:96:0d:67:b4:d9:b3:c1:d7:ca:e0:
                    55:9a:58:6e:14:00:20:42:0f:04:e4:ee:a5:21:34:
                    c0:a0:0c:7f:0d:a8:e7:f5:b2:cf:c8:f4:75:9c:96:
                    56:31:be:14:5b:d5:ff:54:d3:91:8a:7a:bb:d3:68:
                    0b:56:94:2e:08:8a:a8:98:c3:b8:63:36:44:23:f7:
                    02:0b:86:43:cd:fc:63:69:71:c4:0d:1b:e9:6c:7d:
                    d9:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:DB:36:4B:B7:81:83:FC:EA:B4:A3:68:4E:57:11:B9:D3:23:71:73
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/19s2S7eBg_zqtKNoTlcRudMjcXM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:0:200::/41

    Signature Algorithm: sha256WithRSAEncryption
         2f:0d:24:bf:ae:69:6e:9a:71:a7:ca:e7:a0:c5:36:60:e9:f7:
         63:c6:b6:a2:34:10:15:a2:c9:dd:98:62:05:1f:13:41:d2:30:
         3a:bb:cc:1e:3c:2f:10:4a:f8:3d:9f:a5:9e:e1:a1:38:2b:1c:
         a8:91:9c:33:32:56:01:88:bb:c6:ab:66:9b:cf:2d:f3:72:81:
         77:76:1b:c5:fc:ac:45:00:4b:b6:da:af:ae:e0:31:61:f0:65:
         56:f0:0b:5f:1f:79:0d:a9:af:3b:ab:24:33:0a:e8:46:de:74:
         b0:a4:4b:f1:41:5f:36:b6:f3:9f:c1:5a:4c:fa:2c:cb:bf:06:
         18:53:3d:2a:ff:18:48:ec:81:00:4b:3d:81:bd:09:21:72:cd:
         6d:4b:83:bd:91:6f:ab:58:63:7c:22:8f:de:cc:2d:f3:9e:bd:
         f6:cc:3d:59:9f:00:93:c5:78:51:6e:31:dd:f9:7f:a3:d2:99:
         6c:93:13:71:3c:14:72:f9:79:4f:95:a8:70:84:f9:31:ff:60:
         28:7c:c1:1c:c1:36:d6:e4:49:9c:b4:03:17:39:29:16:2f:ec:
         62:1f:ba:a7:87:c6:7a:69:08:b7:54:24:0f:33:b1:36:3e:70:
         12:0f:23:b0:24:6f:60:e1:c5:a7:01:5a:0e:bc:25:46:67:c4:
         50:e2:23:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 00:11:42 2024 by rpki-client on console-ams.rpki-client.org