Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Cq0YjoFpqVm5Z4kFbVDrUJQxt7I.roa
File:                     Cq0YjoFpqVm5Z4kFbVDrUJQxt7I.roa (raw, json)
Hash identifier:          UaJS4O7inhd8WwMcYmb/6Pl+afiNgrBVowta4sj0Wl0=
Subject key identifier:   0A:AD:18:8E:81:69:A9:59:B9:67:89:05:6D:50:EB:50:94:31:B7:B2
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       01EE
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Cq0YjoFpqVm5Z4kFbVDrUJQxt7I.roa
Signing time:             Tue 30 May 2023 17:38:32 +0000
ROA not before:           Tue 30 May 2023 17:38:32 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:ac00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 13:40:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 494 (0x1ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:38:32 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=0AAD188E8169A959B96789056D50EB509431B7B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:16:d1:56:40:0e:b8:1c:3f:73:9d:1d:47:3d:
                    5b:93:3f:57:ed:1c:80:c4:10:9b:cb:f9:83:e1:ff:
                    b5:3c:a3:43:d7:b4:8d:f2:63:91:eb:fb:2f:33:84:
                    fe:cb:f2:66:09:5c:7a:19:3f:9b:d6:a5:88:e6:80:
                    40:36:53:7f:7a:4d:ef:b8:c9:2e:b6:ba:17:91:2c:
                    0c:dd:91:2d:db:b1:8e:71:f2:a9:77:68:fb:ec:87:
                    cf:24:46:5f:fb:70:bd:b2:60:b5:01:cf:23:26:7c:
                    a4:82:3b:37:d4:a7:a0:da:71:97:ad:a1:2d:fa:8a:
                    2b:c1:da:d3:30:1a:9c:a0:98:c4:f3:fe:94:58:10:
                    a2:b8:95:b7:6f:dc:d3:d0:67:04:52:7a:a0:66:68:
                    66:d1:bd:77:05:25:a5:65:08:de:3c:87:6a:04:79:
                    4d:cf:ca:96:0a:71:8d:fc:81:68:3d:13:f3:37:90:
                    23:ec:7f:dc:e8:ed:aa:ef:7d:0e:75:af:30:af:e7:
                    6b:a1:5c:c2:8a:32:d7:c1:05:7c:5f:54:a7:d1:9c:
                    6b:5b:18:76:2c:f7:24:70:0a:e8:7d:15:d8:49:75:
                    44:a6:61:bc:fb:22:a1:c1:af:1a:c1:04:06:ce:ff:
                    f3:cd:d3:de:f0:11:e5:f9:88:18:0d:06:29:3d:4b:
                    36:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:AD:18:8E:81:69:A9:59:B9:67:89:05:6D:50:EB:50:94:31:B7:B2
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Cq0YjoFpqVm5Z4kFbVDrUJQxt7I.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:ac00::/40

    Signature Algorithm: sha256WithRSAEncryption
         b0:5f:8c:03:69:b7:a0:91:81:1c:c0:b9:5c:48:28:b8:66:ed:
         ce:b8:f3:ee:df:bf:98:35:d2:38:76:4e:21:de:9c:62:c3:13:
         fa:d9:42:90:17:07:59:08:f4:c3:3a:a7:44:02:c7:f7:94:bc:
         bd:ec:7d:22:e0:95:f9:80:29:eb:18:b0:35:4d:b1:ca:6d:ca:
         84:e6:05:28:f8:35:11:43:70:06:97:86:8f:70:9b:43:95:f1:
         c2:72:a9:28:12:bc:14:be:05:83:1d:08:32:a1:6f:51:ad:1b:
         13:42:bb:c6:ba:e0:e9:2e:36:ce:28:34:21:cd:eb:59:96:76:
         45:ef:fc:ef:fa:4e:48:4e:90:a9:28:19:65:06:ba:58:a9:24:
         75:a0:00:a1:c5:e4:c7:7c:f2:72:1a:02:c6:40:2b:7e:32:71:
         3f:72:3c:06:db:9a:32:9f:f4:18:47:c5:75:26:8d:60:34:db:
         ae:3c:eb:ac:4e:13:8e:b5:79:ce:28:de:5d:79:e1:b8:1e:ae:
         5e:67:ea:06:7a:34:4a:8d:4f:e0:72:10:82:11:33:db:5f:2d:
         5a:b8:5a:3d:33:8d:cb:4c:92:bc:1e:d6:c3:28:1f:4e:d0:f3:
         ec:dc:d5:e7:e2:83:a5:d0:a8:ce:9e:6e:19:41:d8:8a:fc:66:
         64:f5:f9:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:15:52 2024 by rpki-client on console-ams.rpki-client.org