Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/B99T0AYR2QUYbL-J8enNtxLUShI.roa
File:                     B99T0AYR2QUYbL-J8enNtxLUShI.roa (raw, json)
Hash identifier:          99tgITvYf8td/wSOibxnb9+TrF2mr+9WJOOHYKDrk2s=
Subject key identifier:   07:DF:53:D0:06:11:D9:05:18:6C:BF:89:F1:E9:CD:B7:12:D4:4A:12
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       033C
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/B99T0AYR2QUYbL-J8enNtxLUShI.roa
Signing time:             Tue 30 Apr 2024 01:54:01 +0000
ROA not before:           Tue 30 Apr 2024 01:54:01 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:ac00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 10:06:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 828 (0x33c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 01:54:01 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=07DF53D00611D905186CBF89F1E9CDB712D44A12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9d:88:2c:08:9f:2a:54:df:22:4e:14:03:ff:
                    7c:2d:9b:a9:d8:bb:63:9c:a4:0a:22:1c:14:bb:1b:
                    3e:ea:b3:7d:d1:62:16:dd:4e:66:ce:5e:e5:b2:54:
                    83:2f:0e:07:c3:ce:10:f1:86:96:53:be:15:70:25:
                    8e:3e:2c:15:89:a3:f5:85:a1:96:0f:94:76:5d:1e:
                    95:9e:ba:54:cc:18:27:50:35:aa:b4:e0:10:c0:42:
                    a6:12:11:10:19:3e:c0:28:ef:89:44:73:49:68:a2:
                    35:d9:aa:49:a3:e0:f7:48:1d:fa:85:47:18:1f:e8:
                    67:e1:8a:8d:74:a0:1b:4d:02:1c:53:4a:4d:72:03:
                    9b:05:f3:df:b4:b4:3f:10:ec:54:5d:de:03:4d:be:
                    08:7f:85:a9:bb:9a:e7:96:f9:cb:d4:d4:34:52:4c:
                    3e:7c:4e:b7:f5:c1:47:9f:04:84:04:bf:28:b7:c6:
                    e2:7b:c0:0d:21:63:a9:a9:c0:a5:0a:6d:b7:8b:8f:
                    f1:be:01:f5:2e:35:91:17:f9:3d:e4:20:a6:d7:a6:
                    bd:b2:59:15:c5:99:ec:0a:0c:fc:0e:ab:aa:8c:1d:
                    de:f7:eb:85:e8:13:4f:3b:fa:0d:9e:83:f2:ee:6f:
                    f2:df:90:76:0a:f1:9b:67:01:47:9e:42:5b:2a:14:
                    04:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:DF:53:D0:06:11:D9:05:18:6C:BF:89:F1:E9:CD:B7:12:D4:4A:12
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/B99T0AYR2QUYbL-J8enNtxLUShI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:ac00::/40

    Signature Algorithm: sha256WithRSAEncryption
         c5:bc:58:db:84:ca:59:58:f8:20:69:94:8a:e2:9c:bc:80:50:
         b2:95:5f:c3:6a:5f:c3:31:50:bd:5b:4a:f1:83:86:be:c5:33:
         6b:a6:5a:83:c8:c9:d3:82:ad:3b:9e:49:6c:2e:e9:41:8e:c7:
         26:af:45:fd:8f:59:c5:ae:d8:8e:80:85:8a:79:dd:a3:d4:d1:
         76:42:ca:e8:41:3f:96:ab:72:bd:21:51:d4:4b:73:d4:1a:df:
         69:6d:e0:a5:23:5a:e0:01:9c:87:86:89:92:60:9f:a2:18:01:
         85:d2:42:8b:f7:c8:87:d9:81:0b:81:a5:11:fd:e8:80:b8:e4:
         46:70:da:79:68:b9:89:d4:81:81:98:8c:53:ce:e2:9f:38:89:
         22:93:a9:f8:30:d0:86:15:97:d6:e8:0b:42:9e:4a:77:0b:e5:
         a4:31:ae:05:51:74:31:a4:71:4f:0e:f7:0a:98:08:c2:02:de:
         1a:7c:73:d5:5e:fe:7a:cd:7f:e0:ce:11:bc:11:97:26:c7:6d:
         9f:fe:1f:aa:23:5b:cb:3a:ce:91:6d:ea:90:8e:dd:e7:d5:fb:
         08:85:2c:c8:0a:12:8b:96:67:55:b6:2e:60:a6:0b:c3:ef:2a:
         0f:3e:e1:7f:76:b4:14:a3:4b:22:b3:b4:54:3b:ae:7e:4c:1d:
         5e:a2:24:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 11:28:28 2024 by rpki-client on console-ams.rpki-client.org