Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/6Oy1h1xTESkWiH7aL_XviE0wAYc.roa
File:                     6Oy1h1xTESkWiH7aL_XviE0wAYc.roa (raw, json)
Hash identifier:          wTDr2iKmRQ0ecy45Yq4rucI3zVurHv7/DSxJ9AQfCuE=
Subject key identifier:   E8:EC:B5:87:5C:53:11:29:16:88:7E:DA:2F:F5:EF:88:4D:30:01:87
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0353
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/6Oy1h1xTESkWiH7aL_XviE0wAYc.roa
Signing time:             Tue 30 Apr 2024 01:56:51 +0000
ROA not before:           Tue 30 Apr 2024 01:56:51 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:a700::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 851 (0x353)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 01:56:51 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=E8ECB5875C53112916887EDA2FF5EF884D300187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7d:c4:56:0b:e7:8f:e9:1b:8c:e2:31:6c:55:
                    37:df:a8:5b:a7:a0:76:a2:27:ca:c9:0b:43:67:e7:
                    0a:d5:b5:ab:90:5b:b7:02:6f:c5:28:6a:46:ea:1d:
                    5b:e8:e7:fc:c8:08:a0:21:9c:3a:49:cf:40:06:1a:
                    58:1d:55:80:97:bd:ff:b3:ce:15:60:18:4d:6e:db:
                    c6:ec:57:66:7c:d6:9b:c6:4f:65:87:42:d1:a0:1d:
                    94:03:ee:57:7b:7e:f7:1f:84:d5:56:8d:e9:a1:4c:
                    13:28:03:83:95:e1:75:9c:8e:16:ed:17:ce:9e:06:
                    1e:7f:63:13:a5:30:84:58:f8:2a:39:d8:c9:d9:e7:
                    fe:38:ee:54:db:fa:f6:76:f3:bb:68:3a:de:1c:97:
                    04:01:e5:8b:91:9d:39:90:e6:70:da:c4:82:33:05:
                    5f:3c:29:52:20:82:50:5d:81:a7:7a:24:ca:e5:8b:
                    82:bc:a2:de:86:df:51:6a:76:f6:2e:b4:75:6a:dd:
                    a1:8a:0f:06:a5:76:b5:7c:41:c8:2e:de:c3:eb:dc:
                    10:65:ed:b2:ea:06:f5:53:d1:e6:87:4a:cb:a7:48:
                    6d:35:35:68:57:55:76:06:33:ef:a6:ff:f9:e4:15:
                    bb:1a:73:82:70:ca:e1:46:46:7f:c2:80:8b:0d:a4:
                    95:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:EC:B5:87:5C:53:11:29:16:88:7E:DA:2F:F5:EF:88:4D:30:01:87
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/6Oy1h1xTESkWiH7aL_XviE0wAYc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:a700::/40

    Signature Algorithm: sha256WithRSAEncryption
         c0:ff:9e:a2:32:7e:eb:50:6c:32:cb:f5:94:d7:8b:8d:ce:45:
         70:b5:0b:45:38:59:a0:1d:0f:fb:bf:0c:6f:23:e2:8d:24:bf:
         4f:15:58:6f:73:b9:c2:e1:b7:3a:53:88:f6:6d:57:37:5a:16:
         d3:6a:39:27:db:96:4d:48:93:1a:60:e5:36:ba:50:d0:db:03:
         e9:28:be:a4:3c:4a:d0:41:8e:92:52:55:b2:f9:de:23:e6:61:
         02:d9:39:68:8d:1f:32:f5:c3:1a:32:76:4a:f2:a4:c5:4c:a3:
         ee:59:5d:ab:8d:61:45:78:3b:e2:22:c6:14:4d:57:65:f2:cf:
         2f:7c:cb:87:21:75:18:f5:90:9c:3d:61:4e:08:53:84:6b:ec:
         2b:d2:9b:4b:fd:93:49:b9:44:24:80:8c:6c:dc:60:8c:30:b9:
         c1:cd:6b:a0:a3:7f:88:3f:38:47:6c:61:fd:9c:21:4f:37:36:
         42:67:76:9d:c8:1e:fe:58:c6:9d:f1:6b:11:7b:32:9d:3a:5a:
         2d:aa:85:9e:25:95:14:89:28:a2:89:bb:cd:e5:13:00:39:a5:
         49:47:e6:ff:66:d9:f5:5b:83:bb:1f:bc:7f:f5:03:2c:a6:b9:
         3b:84:47:f1:4f:71:45:e4:b9:36:3c:13:db:fe:da:9b:50:08:
         19:47:e5:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:13 2024 by rpki-client on console-fra.rpki-client.org