Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/C7LHxOS_bVBdFdtOizOsI5vqjbY.roa
File:                     C7LHxOS_bVBdFdtOizOsI5vqjbY.roa (raw, json)
Hash identifier:          ghyD2hf2FkjPNQ/D/LtI1GA1qrkaRqklQ+2GybL5544=
Subject key identifier:   0B:B2:C7:C4:E4:BF:6D:50:5D:15:DB:4E:8B:33:AC:23:9B:EA:8D:B6
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0385
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/C7LHxOS_bVBdFdtOizOsI5vqjbY.roa
Signing time:             Tue 30 Apr 2024 02:00:07 +0000
ROA not before:           Tue 30 Apr 2024 02:00:07 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:7f00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 22:26:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 901 (0x385)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 02:00:07 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=0BB2C7C4E4BF6D505D15DB4E8B33AC239BEA8DB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3b:c8:d4:8d:09:6f:db:d6:22:93:26:a5:c2:
                    a2:64:b1:29:05:67:30:80:97:5f:9e:7a:66:cd:dc:
                    cc:db:d7:73:28:57:c7:18:96:b8:b7:ca:d3:d5:fd:
                    a4:8f:e5:bf:0d:0f:55:ff:b1:77:21:6c:88:dc:15:
                    07:9a:bf:8b:c7:d8:57:ca:b9:0e:22:e7:aa:fc:9d:
                    4c:df:fc:c3:4e:6d:97:3a:43:34:3e:c4:e7:17:ae:
                    d6:17:93:7f:20:64:08:3c:d5:c3:5a:5b:36:30:03:
                    e1:23:8c:08:51:df:58:d0:0e:dd:e5:92:ad:9d:33:
                    69:c9:c1:a7:32:c6:8c:b6:13:3a:30:2e:63:33:eb:
                    65:11:02:c0:0b:be:06:27:84:f3:7a:dd:40:da:94:
                    b2:3c:48:f4:1b:8a:3d:b9:a1:a4:04:13:45:bc:ca:
                    5e:6f:8e:42:10:96:8f:65:0c:9a:50:50:f5:3b:95:
                    f1:8e:f2:b9:d6:19:bd:de:7b:c1:69:e5:a6:e7:fa:
                    06:6e:7c:5e:17:88:79:d5:91:81:2c:77:5d:e5:5c:
                    be:2f:96:59:d6:af:89:36:01:bd:10:3f:ea:da:f8:
                    67:57:e2:6a:0b:15:9a:fb:a8:7f:00:ab:1d:ac:23:
                    e1:7c:7c:06:be:87:10:b6:a2:af:ff:d6:42:26:25:
                    51:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:B2:C7:C4:E4:BF:6D:50:5D:15:DB:4E:8B:33:AC:23:9B:EA:8D:B6
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/C7LHxOS_bVBdFdtOizOsI5vqjbY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:7f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         09:ca:fc:a9:fe:ec:0e:5e:07:28:c2:31:29:7c:c5:7b:75:c4:
         1c:2b:50:4b:61:40:55:94:ab:00:e0:36:f0:91:c6:b5:1a:3c:
         f1:8b:af:82:a6:2d:0e:08:69:6b:3c:88:62:df:82:94:27:4f:
         70:7a:5f:05:27:e0:7e:6c:9e:c9:7d:28:0d:04:2f:45:8c:69:
         c4:58:9f:f4:a6:6c:0e:c0:73:29:5a:33:a8:48:35:70:1d:78:
         f9:e8:68:d9:7b:82:f9:be:e3:f5:cf:c5:3d:ae:6e:82:6e:bf:
         96:a2:58:f0:4b:2f:e8:d1:59:0e:52:80:75:79:83:ca:c1:18:
         4c:77:db:e6:59:0d:31:6b:f6:92:ca:9e:1f:fb:9b:1e:d9:52:
         01:1f:26:9d:0b:95:41:51:45:3b:4f:22:dc:a3:2f:81:59:30:
         10:2e:65:45:c1:3a:ab:f1:0c:19:c6:8a:9d:b6:fe:00:8b:34:
         a4:72:fd:e4:fb:d2:7b:35:82:b8:8b:54:d3:42:9a:26:66:34:
         e5:bf:45:8d:a4:e4:2c:ae:3e:3d:5d:6b:4d:6f:86:02:12:04:
         3c:9f:46:52:dd:b5:2d:1f:6a:1b:4c:18:70:70:32:8a:1e:f8:
         e1:43:16:8c:77:af:81:7b:94:d5:6e:71:05:0e:86:f5:6f:1c:
         29:f9:ca:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 00:11:43 2024 by rpki-client on console-ams.rpki-client.org