Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/3Dk-0OJuzTroccHzUEocnqywllo.roa
File:                     3Dk-0OJuzTroccHzUEocnqywllo.roa (raw, json)
Hash identifier:          BqmARVMyLOKEPnyeF9xZMVjMuWxawvQNVCzPaxaqsBI=
Subject key identifier:   DC:39:3E:D0:E2:6E:CD:3A:E8:71:C1:F3:50:4A:1C:9E:AC:B0:96:5A
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       029A
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/3Dk-0OJuzTroccHzUEocnqywllo.roa
Signing time:             Tue 30 Apr 2024 01:35:13 +0000
ROA not before:           Tue 30 Apr 2024 01:35:13 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:cc00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 22:26:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 666 (0x29a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 01:35:13 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=DC393ED0E26ECD3AE871C1F3504A1C9EACB0965A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:9d:d0:a6:b4:f9:8f:28:fb:f2:98:9d:3b:a9:
                    1d:59:26:37:bd:72:06:de:0a:5e:e3:87:21:fc:06:
                    66:bf:fa:63:d2:71:67:0a:ee:46:7b:0b:bf:4f:ae:
                    5b:0e:3a:e8:2b:35:5a:c2:a8:da:1d:a5:f4:ca:2d:
                    0c:94:00:be:78:21:dc:be:c1:0f:7c:da:f3:bd:81:
                    19:0f:78:3a:41:10:6f:98:06:cd:e4:0b:6b:a1:0f:
                    3b:39:96:48:9b:b9:47:85:7d:2b:93:b3:b9:27:e8:
                    d7:32:d1:58:e0:fb:bb:c4:82:b7:02:d4:5b:c8:5e:
                    60:d2:05:e9:4f:e3:c6:33:86:5a:2a:4a:22:04:85:
                    89:3b:e4:d8:c3:c8:53:e1:7e:77:e5:79:5c:02:79:
                    e4:48:12:4b:e7:de:9c:d0:76:ae:59:9b:f3:d4:2b:
                    b9:fb:fd:fd:ed:8a:7c:ba:d9:f5:2a:ec:1e:a0:be:
                    1e:c2:a3:26:a3:ce:e1:f8:d2:18:ec:84:13:f6:0a:
                    b2:40:c5:ff:9c:66:27:3b:c7:d4:7b:ae:8a:e1:52:
                    0c:e3:b4:64:ee:6a:85:fc:6c:ee:0d:d4:70:f8:89:
                    7d:4d:bb:e5:2b:91:d8:56:28:61:34:77:14:b9:c3:
                    03:bf:83:cb:48:94:fe:7d:7e:03:ff:2b:c1:90:ce:
                    5c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:39:3E:D0:E2:6E:CD:3A:E8:71:C1:F3:50:4A:1C:9E:AC:B0:96:5A
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/3Dk-0OJuzTroccHzUEocnqywllo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:cc00::/40

    Signature Algorithm: sha256WithRSAEncryption
         a6:1d:6d:d5:c3:3f:b8:be:06:00:4e:2b:87:c0:c1:ba:7f:12:
         ec:cd:6b:80:75:64:31:ef:30:4e:f6:51:30:17:49:3c:76:98:
         88:14:e3:63:bf:13:d7:ab:f4:ac:1b:3c:97:b8:7e:da:c3:50:
         c6:c7:c8:98:58:4b:6e:13:d7:e8:d9:fb:b4:77:67:17:f3:a1:
         b0:0f:ac:61:a4:d0:e5:7a:8f:cb:a2:2d:4b:a7:a8:a6:1e:33:
         c6:83:a9:b7:19:92:a8:fe:11:85:54:9a:eb:97:39:b9:21:4d:
         38:c0:3d:f1:f3:65:05:12:87:92:0d:54:95:48:bd:8f:50:77:
         92:25:2f:d4:35:1b:9b:6c:f9:7e:a1:78:fa:69:d5:a8:c0:d7:
         44:5a:8f:01:ba:a3:22:bf:31:6b:a6:cb:a2:0c:08:f4:74:7c:
         5b:db:c2:ae:83:46:67:4c:ef:ff:93:8f:46:30:55:8a:75:a7:
         a9:0a:c4:5f:9c:90:57:72:47:1f:3d:37:a5:fa:0e:db:ed:56:
         6f:20:c5:01:00:c6:71:c2:a6:79:ef:f4:a8:ed:b2:a5:85:0d:
         c1:fd:58:55:08:5e:1a:d1:a3:5f:a0:da:be:b1:da:71:8e:19:
         c6:4a:6e:ba:c7:ee:11:f3:3e:20:ee:47:52:52:0e:6c:3a:4a:
         48:6a:61:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 00:11:42 2024 by rpki-client on console-ams.rpki-client.org