Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/44ZaAgMock5a6-BjEDdBWGx643s.roa
File:                     44ZaAgMock5a6-BjEDdBWGx643s.roa (raw, json)
Hash identifier:          AVrj2l8puDy1zpmHE3yuoOb1/z+3CB65q6XBOHnVbHA=
Subject key identifier:   E3:86:5A:02:03:28:72:4E:5A:EB:E0:63:10:37:41:58:6C:7A:E3:7B
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       034F
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/44ZaAgMock5a6-BjEDdBWGx643s.roa
Signing time:             Tue 30 Apr 2024 01:56:49 +0000
ROA not before:           Tue 30 Apr 2024 01:56:49 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:b300::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 847 (0x34f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 01:56:49 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=E3865A020328724E5AEBE063103741586C7AE37B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:27:d9:87:cd:4a:73:f0:50:de:7f:c9:a8:ad:
                    9a:75:82:22:38:7b:21:5c:a2:d3:62:17:e2:f6:75:
                    4e:ed:bb:33:6c:37:b8:86:28:e4:2e:e1:d8:34:f6:
                    d0:d6:01:d7:a5:4f:c6:23:ce:be:fb:cb:bd:25:79:
                    28:97:8e:9b:b4:a2:4b:58:5c:7f:c7:8f:ba:60:70:
                    96:54:1e:96:6b:fc:2b:0f:5d:35:47:35:e4:9b:2a:
                    b1:ce:d6:52:15:b0:5a:79:4f:5c:c8:05:17:ab:3b:
                    3b:4e:ec:9c:5e:fe:d2:4d:fe:71:cd:94:fd:1b:03:
                    67:bb:2c:f9:2c:e7:0b:7a:73:59:48:43:09:18:26:
                    db:2e:e7:5a:ba:f8:df:63:ea:bd:e9:63:b1:a8:27:
                    c3:41:c0:67:4c:88:68:04:bf:61:5e:8a:96:43:a1:
                    7b:90:1f:9a:db:2c:70:02:b5:a7:d0:5c:79:c0:ba:
                    19:b2:f6:b7:17:25:82:e0:23:63:2a:0b:76:ae:92:
                    f3:fd:b0:87:ec:4c:e0:94:c2:68:4a:f2:d9:d9:d6:
                    6d:36:ca:0a:7f:cc:ea:9f:b5:9e:81:4e:05:a4:15:
                    3f:3a:2f:f9:b7:53:e2:ff:74:7e:b3:a5:a4:8a:ed:
                    c1:c9:dd:6a:66:7d:6c:2c:6e:eb:29:a1:e7:83:a0:
                    bd:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:86:5A:02:03:28:72:4E:5A:EB:E0:63:10:37:41:58:6C:7A:E3:7B
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/44ZaAgMock5a6-BjEDdBWGx643s.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:b300::/40

    Signature Algorithm: sha256WithRSAEncryption
         7a:d9:96:60:f4:64:29:2d:4f:38:d7:db:0f:e9:d7:a1:66:87:
         ee:47:84:33:84:a7:41:74:3a:d7:06:b9:8d:af:04:77:9d:72:
         42:45:2f:92:00:12:13:c5:c0:5c:39:c4:2c:ee:09:d8:ab:bf:
         05:98:f1:6d:d9:5e:78:5f:ba:1f:59:22:d5:a8:38:0c:19:c8:
         5a:9d:ef:97:21:8b:50:16:b4:f5:86:00:e4:10:2b:17:9b:a2:
         03:b8:ee:d3:b2:61:b2:ae:d7:e2:da:70:a0:2b:73:d7:4b:4c:
         58:4e:b4:02:11:4c:db:da:ef:f6:43:fe:82:76:f1:09:6b:6a:
         3f:15:05:d7:b1:e5:ae:4e:0a:07:61:85:e3:29:2b:67:d7:17:
         54:32:53:b8:06:f4:22:57:ac:da:3d:24:fa:51:86:f7:38:43:
         5f:da:b3:7d:f5:1d:6a:70:ec:62:20:47:f0:61:78:ac:64:b0:
         bf:39:11:85:18:62:45:6e:45:21:ee:f2:05:7d:1f:a2:7a:e2:
         0c:56:bd:e0:c1:47:05:29:2a:22:8c:c2:e2:03:e4:3a:a0:3e:
         ab:30:9a:03:aa:bc:af:28:d2:da:2a:ef:68:d0:45:e3:b3:51:
         8d:41:4e:90:d0:d6:46:69:e9:85:15:1d:48:ec:e2:0c:57:5a:
         21:4e:50:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:30 2024 by rpki-client on console-ams.rpki-client.org