Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/6usF7XYE5DPciIJerOsjoK9Xhe8.roa
File:                     6usF7XYE5DPciIJerOsjoK9Xhe8.roa (raw, json)
Hash identifier:          to7g5naV35e3nyzUxRN9oh2BJ93lv5K4ajJ+cHip6cE=
Subject key identifier:   EA:EB:05:ED:76:04:E4:33:DC:88:82:5E:AC:EB:23:A0:AF:57:85:EF
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       01C7
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/6usF7XYE5DPciIJerOsjoK9Xhe8.roa
Signing time:             Tue 30 May 2023 17:38:21 +0000
ROA not before:           Tue 30 May 2023 17:38:21 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:7900::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 13:40:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 455 (0x1c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:38:21 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=EAEB05ED7604E433DC88825EACEB23A0AF5785EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f5:84:b7:41:5e:e0:b6:90:6e:bd:46:9c:8c:
                    d2:0e:65:7d:df:98:3f:58:9f:fa:9f:80:26:93:50:
                    6a:40:bc:01:57:08:d1:6f:5c:09:ff:e6:c3:85:3c:
                    72:8b:c5:d4:fc:85:b6:62:cc:ed:5b:39:ca:79:cc:
                    e0:61:71:74:e4:f1:9b:ff:c9:31:96:f6:48:a3:a2:
                    52:d1:83:91:5e:64:49:55:f6:d8:e5:43:95:67:4c:
                    29:c6:9e:38:ab:0b:58:21:d4:e2:8b:c9:9c:d2:17:
                    50:63:fa:0a:93:8e:e4:03:51:f1:81:81:09:d6:a2:
                    b2:6d:f4:74:6f:7d:6d:8e:f2:27:21:d5:74:d9:a7:
                    77:20:32:1e:24:2f:0b:f0:03:c1:60:52:9f:f0:72:
                    38:81:6b:cb:1c:14:0b:c6:44:b0:94:ce:66:df:86:
                    4d:0d:c8:1f:b9:b7:20:e1:80:8e:2c:ba:f1:69:30:
                    b2:07:11:2c:aa:55:2e:39:39:b8:f8:ef:06:11:17:
                    2c:6b:03:ed:64:d5:0c:dd:11:72:1f:40:f1:6d:dc:
                    fb:28:74:c9:ab:e3:75:02:24:cc:48:35:da:64:73:
                    6f:b9:8e:56:32:3c:3d:4c:3f:31:34:73:05:92:0c:
                    50:a3:07:f4:b1:be:93:b6:08:fa:c2:04:03:1f:51:
                    2f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:EB:05:ED:76:04:E4:33:DC:88:82:5E:AC:EB:23:A0:AF:57:85:EF
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/6usF7XYE5DPciIJerOsjoK9Xhe8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:7900::/40

    Signature Algorithm: sha256WithRSAEncryption
         0a:3a:63:f6:1d:b0:a9:b8:73:e7:31:8f:43:0d:03:fc:34:ef:
         0e:62:f7:5b:d0:78:2a:9e:56:92:d4:d7:6a:08:f9:07:36:44:
         ac:0c:c6:43:fa:7e:6a:66:03:cb:3b:bf:45:97:24:bb:3f:01:
         6b:94:e2:e9:79:88:27:17:ea:0c:05:35:37:0a:e3:34:0b:8a:
         83:08:d3:31:1a:c9:94:94:8d:75:0f:ff:50:c9:50:3a:a4:88:
         bf:4f:c4:d7:3e:34:82:27:6e:86:28:f2:57:15:34:0a:ae:3e:
         9e:ba:46:9b:0e:73:a6:e6:2a:b0:84:5e:d1:ce:2d:60:36:5d:
         d9:d5:79:5e:10:0c:a4:23:7f:7b:ad:98:27:12:dc:e8:ff:f6:
         9e:2f:22:07:64:c2:bd:52:4e:e8:da:4f:62:a8:3d:23:1a:89:
         6e:dd:16:02:cf:16:ce:de:15:81:a4:37:bb:af:e2:25:f9:84:
         e3:f5:1a:fa:70:45:1a:d2:d9:d8:a5:57:c5:46:38:cb:b8:b4:
         78:2c:0e:bf:d9:21:79:1a:0c:0d:10:d2:85:68:be:93:fc:23:
         b5:40:3a:00:52:13:8f:c4:8e:37:03:3f:26:39:63:7d:67:0a:
         9c:d3:6f:59:ba:cb:e2:45:8e:d6:07:45:7e:ac:d3:80:0f:e9:
         64:ba:11:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:15:52 2024 by rpki-client on console-ams.rpki-client.org