Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/BGSEtWtUGtjTUj3BLTLqqW2I3Ko.roa
File:                     BGSEtWtUGtjTUj3BLTLqqW2I3Ko.roa (raw, json)
Hash identifier:          LwjcfxM3v27tI5000PiX/D5jQEMRtsOsNb460DyIAEQ=
Subject key identifier:   04:64:84:B5:6B:54:1A:D8:D3:52:3D:C1:2D:32:EA:A9:6D:88:DC:AA
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0292
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/BGSEtWtUGtjTUj3BLTLqqW2I3Ko.roa
Signing time:             Tue 30 Apr 2024 01:35:06 +0000
ROA not before:           Tue 30 Apr 2024 01:35:06 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:1800::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 22:26:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 658 (0x292)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 01:35:06 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=046484B56B541AD8D3523DC12D32EAA96D88DCAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:be:a6:b3:9a:af:c4:b8:9a:01:34:ce:b2:0a:
                    e5:0a:81:fa:1f:cd:53:9a:b2:dc:fa:fb:ba:12:54:
                    37:c9:72:01:96:84:02:45:34:52:0c:bf:1d:99:74:
                    d0:81:e1:58:d1:cb:cb:8f:a9:4d:f9:9b:0d:52:48:
                    68:18:23:fc:ed:9a:f6:17:db:2d:a5:4a:f7:e4:43:
                    03:b4:35:10:ce:50:6d:a6:ce:6f:bd:9f:c5:0d:3a:
                    04:86:43:44:21:2c:b3:0a:72:ae:bb:c4:8f:9a:e7:
                    41:9f:29:b7:12:4b:bb:d9:20:11:1b:c6:fb:28:ac:
                    ac:c4:41:7c:22:fe:8b:ca:a9:08:d9:64:c6:65:c3:
                    b5:f3:00:35:67:38:0a:82:14:9b:26:b4:8a:f7:81:
                    3e:e3:60:20:38:38:6f:53:4a:8f:6f:ea:88:76:18:
                    6a:32:73:db:6a:95:70:5b:d7:e7:ef:19:ff:29:8f:
                    b2:ba:8d:36:45:eb:c5:d1:4c:ac:a5:9f:df:11:26:
                    04:79:ab:57:be:da:15:2a:7d:05:22:8d:d5:a2:db:
                    ee:ab:ff:d8:90:f7:cb:3f:7b:cc:23:9a:b3:d8:36:
                    89:04:8e:dc:40:61:f0:5a:61:12:dc:52:86:97:65:
                    81:2f:f2:07:8a:03:8f:21:f0:5d:b0:f0:7f:63:6b:
                    b7:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:64:84:B5:6B:54:1A:D8:D3:52:3D:C1:2D:32:EA:A9:6D:88:DC:AA
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/BGSEtWtUGtjTUj3BLTLqqW2I3Ko.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:1800::/40

    Signature Algorithm: sha256WithRSAEncryption
         02:81:14:b1:c0:d1:06:c7:02:2c:b0:75:fe:f8:a9:1b:e8:1b:
         89:7f:dd:28:ef:03:e4:25:c4:27:26:aa:e7:cf:8e:5d:36:09:
         96:4b:7a:a2:c3:59:6c:e1:e7:89:09:4b:72:d2:99:7e:6f:c5:
         2b:d0:c8:7b:d3:f3:73:e0:21:e7:e8:db:7e:ba:e1:bd:3d:b7:
         e2:66:60:d9:bd:27:4e:6b:d0:08:e5:45:0b:f5:fd:00:e0:ef:
         2f:74:eb:56:18:c3:cf:ba:c5:0d:ae:eb:77:7f:34:55:4c:4e:
         a2:48:cb:8e:d9:8c:f4:6f:d1:00:31:ab:c6:4f:95:19:c6:eb:
         1a:62:58:e5:48:a1:c7:08:1c:fa:08:b1:d1:e2:32:df:0c:1c:
         5a:af:70:02:bd:81:d3:b3:ad:f3:1f:ae:ab:88:17:c6:90:d4:
         f9:e9:70:af:11:01:23:26:1e:c3:92:b1:b6:ea:35:fc:0e:93:
         53:5c:09:41:66:72:69:b8:bf:4f:48:33:cb:9c:af:9e:d2:b0:
         df:ee:c9:d0:8c:8e:98:a1:24:2b:af:8e:f0:12:b7:eb:89:25:
         38:14:19:9d:c9:c3:a7:db:b1:e0:18:e2:07:f8:f8:30:fd:a2:
         b4:6c:a8:48:ba:8a:16:1b:c1:5d:e6:e1:7c:32:f5:98:ae:0d:
         d5:91:32:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 00:11:43 2024 by rpki-client on console-ams.rpki-client.org