Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/3uC7PtHYcsLAt-tjyTwaNHVmAjY.roa
File:                     3uC7PtHYcsLAt-tjyTwaNHVmAjY.roa (raw, json)
Hash identifier:          Hot/dv4IhzSmU2/ddwyCyCuq/S003T2v7G2tZVO9x2U=
Subject key identifier:   DE:E0:BB:3E:D1:D8:72:C2:C0:B7:EB:63:C9:3C:1A:34:75:66:02:36
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0362
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/3uC7PtHYcsLAt-tjyTwaNHVmAjY.roa
Signing time:             Tue 30 Apr 2024 01:56:55 +0000
ROA not before:           Tue 30 Apr 2024 01:56:55 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:6e00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 22:26:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 866 (0x362)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 01:56:55 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=DEE0BB3ED1D872C2C0B7EB63C93C1A3475660236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:52:cb:fc:e7:66:40:10:7b:14:43:03:5e:8d:
                    e0:a9:f1:a1:39:f1:d8:4b:f5:d6:17:9c:ec:81:3b:
                    13:25:cf:b0:fb:c4:27:dd:56:81:97:21:ba:d0:dc:
                    43:9b:fe:f4:71:48:fd:ba:99:1c:23:66:2a:9e:fc:
                    75:71:76:9b:f8:89:65:df:aa:3e:55:a9:6d:fd:77:
                    b3:fe:40:ef:c6:54:a0:34:1b:c2:1e:5e:8b:ba:4b:
                    02:54:85:80:d2:20:3e:ab:66:c5:6c:22:56:08:3b:
                    e8:a9:0b:d1:f8:ee:75:e1:67:7a:bf:5b:38:7e:a8:
                    e7:5a:c8:96:f3:c9:1e:27:3a:0a:5b:11:72:94:b1:
                    7e:46:a3:3f:f9:5a:57:64:98:bd:50:9c:40:98:b5:
                    04:11:3a:d2:3c:a8:f2:85:e4:91:81:75:ec:41:d7:
                    03:b2:9f:e2:11:1a:11:ab:a4:25:f6:c9:9f:18:9a:
                    c6:64:1b:ed:be:3e:68:40:1b:fb:16:7a:37:11:11:
                    b7:bf:f9:4a:23:7f:7d:c2:a5:17:11:e0:31:95:52:
                    96:90:93:fd:48:d5:a1:3a:ce:cd:b2:c1:ef:dd:ad:
                    d7:d3:f3:23:01:4a:d5:aa:85:95:51:5d:b0:ae:c4:
                    37:3f:a1:12:cc:71:3c:bb:35:55:d2:33:ee:f6:c9:
                    d1:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:E0:BB:3E:D1:D8:72:C2:C0:B7:EB:63:C9:3C:1A:34:75:66:02:36
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/3uC7PtHYcsLAt-tjyTwaNHVmAjY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:6e00::/40

    Signature Algorithm: sha256WithRSAEncryption
         6d:15:78:c0:75:60:69:7b:27:ee:d4:dd:e4:fd:41:85:ef:8f:
         b3:8e:90:1f:26:fa:81:56:c6:35:9d:f5:80:bc:57:62:a6:d8:
         53:56:ce:33:e0:da:fb:9a:da:e2:03:60:03:59:da:8a:48:53:
         b0:e1:07:5a:31:08:86:71:98:da:8d:06:6c:28:38:40:12:9c:
         17:c4:38:80:00:ce:8b:3e:46:17:cf:82:33:8b:1d:8e:b7:16:
         e1:77:b2:7f:26:6a:e6:03:d9:5c:cc:c2:cb:0c:2b:c2:db:2d:
         70:e0:e4:2e:15:13:a1:3b:52:26:2f:71:d0:4a:df:7d:fe:3b:
         ae:e0:26:64:a7:8a:a7:d7:06:7f:5b:fc:95:cf:7e:86:3a:3e:
         98:f4:b8:fc:66:64:43:06:eb:cd:dd:08:87:7a:9b:c2:ba:90:
         a1:cf:6a:6e:c6:c2:f8:b1:a8:f8:bd:dc:b4:91:c2:dc:70:20:
         fc:86:67:a1:02:b0:f4:08:43:6b:c4:4f:1a:df:fe:a8:36:8c:
         31:44:2a:4a:ec:07:c3:83:c5:e3:a3:1f:d8:68:9d:4a:50:7c:
         07:a6:e5:d3:00:ba:a2:46:88:5d:76:ea:f9:30:bf:ff:ae:5a:
         09:31:95:f9:a4:87:1d:ac:5d:6b:61:5b:7b:d9:1a:e7:62:c2:
         83:c2:a8:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 00:11:42 2024 by rpki-client on console-ams.rpki-client.org