Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/CBdgyvisrH53RVcVpZjwbu1q5kg.roa
File:                     CBdgyvisrH53RVcVpZjwbu1q5kg.roa (raw, json)
Hash identifier:          lK0xt5JWzttIT4ThJXXJ4qoxjjRP5jRH6yuXWKhdXtc=
Subject key identifier:   08:17:60:CA:F8:AC:AC:7E:77:45:57:15:A5:98:F0:6E:ED:6A:E6:48
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0317
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/CBdgyvisrH53RVcVpZjwbu1q5kg.roa
Signing time:             Tue 30 Apr 2024 01:50:49 +0000
ROA not before:           Tue 30 Apr 2024 01:50:49 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:3e00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 791 (0x317)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 01:50:49 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=081760CAF8ACAC7E77455715A598F06EED6AE648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:48:ac:c3:ab:9d:3d:1a:8a:96:b0:44:22:dd:
                    20:55:5c:41:00:df:43:85:df:b7:5c:71:4d:9b:b7:
                    be:3b:eb:e0:04:20:1a:d3:1b:7e:41:05:c0:56:ac:
                    fa:46:2c:ba:19:4f:0e:de:29:9c:57:61:2c:49:09:
                    be:a9:7b:8a:bb:48:4b:9e:e4:9e:53:9c:a8:6b:2f:
                    19:79:c0:2e:95:f6:7a:3e:19:51:da:c4:ec:ff:95:
                    28:ce:88:14:f3:3d:9f:98:da:cb:ed:41:dc:c4:73:
                    51:62:88:fa:d1:af:25:74:04:7f:c6:b3:3c:27:ca:
                    30:15:3d:ea:11:3a:e1:89:74:49:91:85:d3:04:e9:
                    f2:0c:db:8a:8c:19:65:57:9d:58:f5:c6:a4:8c:02:
                    ab:3d:1e:9c:49:6c:30:de:fb:7f:6b:e7:89:a2:25:
                    0b:86:7a:10:32:8d:04:51:d6:08:93:c6:33:a7:1e:
                    68:16:76:f3:20:b7:5e:ce:35:07:be:62:ff:0c:ae:
                    b8:2c:1d:da:63:f6:7d:3c:f6:96:29:83:e4:f6:bc:
                    10:19:47:6d:24:5e:56:2c:87:99:6e:51:00:22:d9:
                    7c:dc:87:30:ec:ce:71:b4:21:f0:2a:97:b0:f7:c8:
                    b1:eb:31:4f:68:85:b9:92:70:03:c2:17:91:2b:57:
                    e5:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:17:60:CA:F8:AC:AC:7E:77:45:57:15:A5:98:F0:6E:ED:6A:E6:48
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/CBdgyvisrH53RVcVpZjwbu1q5kg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:3e00::/40

    Signature Algorithm: sha256WithRSAEncryption
         9a:c3:61:9d:94:44:a9:60:6f:c2:f9:d9:a7:b6:2e:44:b3:98:
         73:cb:87:1b:9e:e4:09:b1:bc:51:1a:72:aa:58:6f:75:3c:3c:
         06:79:1a:bc:df:7d:7a:5a:57:90:bf:09:05:38:71:94:d6:8c:
         c2:c5:74:40:e1:30:e5:a2:d3:aa:84:13:18:d5:d4:8d:5e:f2:
         9a:3f:16:39:75:b8:45:d6:2a:28:50:75:3f:38:5a:58:16:97:
         79:02:0e:cf:b5:c7:a1:f0:0f:48:30:dc:6a:02:af:d4:8e:d9:
         c4:86:73:83:e4:c9:be:71:36:11:25:c2:43:ef:59:35:4b:30:
         22:5d:65:6b:c3:0f:31:75:44:81:07:cb:42:dd:20:03:0b:17:
         0f:93:8d:39:5e:9f:ca:e3:95:0a:15:c5:04:fd:b6:8d:56:8d:
         7d:52:de:cb:c6:46:f4:b0:62:b0:33:54:0c:d9:eb:8a:58:ad:
         54:7f:7c:5c:da:f7:c0:22:31:09:df:9d:ba:fa:3d:9d:19:9f:
         80:ae:bd:26:11:a9:6e:3c:00:45:88:62:a1:85:f1:cc:fc:66:
         a3:cd:61:ee:d1:e1:fc:99:2f:20:bb:49:01:07:2f:03:00:8f:
         62:ae:42:74:58:48:ef:33:46:63:23:29:51:4b:db:93:75:5d:
         49:6d:30:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:44 2024 by rpki-client on console-fra.rpki-client.org