Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/4dxh5ic_UBcQAD1keGIdgdXjloA.roa
File:                     4dxh5ic_UBcQAD1keGIdgdXjloA.roa (raw, json)
Hash identifier:          eOXOacydfNyzDwBIpBwMe/9r40eMesEzZXtpzQ9UAv8=
Subject key identifier:   E1:DC:61:E6:27:3F:50:17:10:00:3D:64:78:62:1D:81:D5:E3:96:80
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       034A
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/4dxh5ic_UBcQAD1keGIdgdXjloA.roa
Signing time:             Tue 30 Apr 2024 01:56:47 +0000
ROA not before:           Tue 30 Apr 2024 01:56:47 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:da00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 842 (0x34a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 01:56:47 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=E1DC61E6273F501710003D6478621D81D5E39680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:bf:c3:7a:c9:fa:74:e2:cc:e8:a0:51:86:69:
                    59:6b:cf:8c:21:3e:78:7d:e4:cd:7c:37:6a:9c:40:
                    f1:38:04:40:1b:7a:f9:2c:c9:45:03:e7:d7:9d:d5:
                    92:33:b0:c2:3a:01:10:34:f3:29:ea:84:82:fa:b5:
                    72:23:23:3f:bf:7c:77:b6:ec:1c:3c:a0:dc:71:be:
                    76:5b:ef:fd:06:0c:26:c7:4f:c4:9f:12:71:a6:90:
                    1d:51:83:48:20:1c:0b:ed:44:56:c1:1e:f6:ee:4a:
                    97:ba:ce:9d:59:1a:db:e1:16:68:9c:4b:f3:b2:6a:
                    ba:47:13:02:da:87:fa:3e:44:87:90:73:cd:d9:25:
                    47:94:71:cc:67:8f:97:8a:33:49:b0:9d:a1:76:19:
                    7a:58:31:4b:83:18:4b:df:95:2b:14:b9:60:56:b2:
                    37:69:2d:03:ee:64:b4:fe:af:e1:02:b9:00:db:f3:
                    2c:13:ac:35:d8:fc:15:9b:81:7a:07:0d:db:3b:86:
                    86:ad:dc:e2:fa:54:b4:df:4e:1f:4f:8d:08:af:af:
                    64:b0:68:48:a7:3c:90:d4:84:23:bf:b4:a2:d4:a1:
                    01:99:15:71:80:d2:3b:d8:1b:67:22:7e:22:f4:d6:
                    01:a1:75:e4:d3:d9:64:83:c7:bb:66:5d:2b:b9:89:
                    e8:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:DC:61:E6:27:3F:50:17:10:00:3D:64:78:62:1D:81:D5:E3:96:80
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/4dxh5ic_UBcQAD1keGIdgdXjloA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:da00::/40

    Signature Algorithm: sha256WithRSAEncryption
         69:1f:58:10:85:82:34:08:f2:ea:05:3f:55:ba:e0:17:7a:c4:
         45:83:ae:11:9d:56:a8:39:17:4b:9f:e9:90:58:a0:1b:78:76:
         1f:b9:f8:67:83:c8:f6:e5:25:e9:1e:fb:c4:4e:dd:0f:e5:de:
         a1:53:7a:30:b3:e1:05:aa:d9:63:71:76:66:2d:dd:0d:86:ef:
         5b:75:4f:75:3b:29:33:78:68:f1:82:e1:7b:97:0a:19:69:43:
         39:c0:7a:9a:6b:6b:23:89:56:b2:a5:98:17:1e:21:b6:07:f9:
         71:99:40:29:61:50:86:0b:a2:9e:dc:b7:b7:f0:7d:8a:1f:93:
         95:e7:0a:22:8b:30:95:c5:62:66:00:60:28:77:51:76:62:2a:
         af:4d:a4:0c:94:69:49:49:ce:ab:69:c7:59:a0:92:68:65:65:
         34:d4:2d:86:b8:92:3f:35:60:b9:2f:6c:e3:be:e8:34:36:ad:
         5a:f2:29:d0:3d:19:86:37:08:e9:94:35:1a:0e:98:af:67:ee:
         4d:25:37:2d:a8:b1:c1:de:e8:ba:8a:32:dc:1c:34:9f:72:36:
         45:28:d5:e5:70:19:71:e0:53:85:09:23:e1:b5:42:17:ea:07:
         e3:ea:a5:e1:cc:fc:cc:0b:61:f6:59:4d:81:91:a5:86:81:11:
         1d:21:c9:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:07 2024 by rpki-client on console-fra.rpki-client.org