Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/DquSshrz4es5Ztyip1JMXISU45o.roa
File:                     DquSshrz4es5Ztyip1JMXISU45o.roa (raw, json)
Hash identifier:          kz2idTukk7g60bs6xR5BJskFrRFlloAFk6H22qPgle0=
Subject key identifier:   0E:AB:92:B2:1A:F3:E1:EB:39:66:DC:A2:A7:52:4C:5C:84:94:E3:9A
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       02FE
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/DquSshrz4es5Ztyip1JMXISU45o.roa
Signing time:             Tue 30 Apr 2024 01:48:09 +0000
ROA not before:           Tue 30 Apr 2024 01:48:09 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:0:200::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 766 (0x2fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 01:48:09 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=0EAB92B21AF3E1EB3966DCA2A7524C5C8494E39A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:96:8d:bd:3c:cb:88:be:15:e5:8c:03:d3:b8:
                    98:a5:a0:33:fc:b7:36:e4:e3:26:a1:ce:2e:bc:63:
                    12:47:e8:32:f9:9e:44:18:f1:37:10:c6:3c:15:d9:
                    2e:3e:35:d7:27:1d:a1:f9:0e:e4:8a:3e:70:95:d3:
                    8b:5b:a3:fb:62:82:6f:bd:22:04:42:a1:da:91:92:
                    75:84:80:b5:f0:36:1b:58:1a:7f:84:d4:9e:9f:02:
                    1e:11:bc:b7:18:08:9b:06:99:40:2f:19:63:27:d7:
                    bd:7e:0a:7e:47:08:43:b7:2c:ec:9b:21:76:37:3e:
                    ab:ee:58:b3:24:b7:60:24:99:27:ab:30:62:36:b3:
                    18:7e:c0:ea:37:23:54:d4:5d:6d:4a:33:77:26:5e:
                    62:ad:1f:28:7f:f7:5e:35:78:59:a1:a1:92:b1:11:
                    e9:e2:82:3d:45:b2:fe:46:49:61:77:26:c0:ec:ec:
                    18:1e:fa:1a:78:17:a9:3f:87:af:50:d2:e7:e6:e8:
                    08:a9:3d:b0:a3:c8:3b:d6:7d:a9:ed:cf:7c:fe:4d:
                    06:48:a4:24:1d:20:6e:c0:4a:77:05:0d:83:de:27:
                    30:51:65:0b:f7:64:8f:28:84:81:9f:3e:d1:08:79:
                    44:c6:1a:88:3c:64:30:64:89:f7:69:e1:6f:71:ec:
                    d0:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:AB:92:B2:1A:F3:E1:EB:39:66:DC:A2:A7:52:4C:5C:84:94:E3:9A
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/DquSshrz4es5Ztyip1JMXISU45o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:0:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         5d:46:40:f4:b9:83:55:6f:9d:57:f0:bf:c1:f4:92:16:7c:2e:
         eb:af:17:84:27:24:12:78:fc:d5:6b:f3:31:bc:85:e8:f6:ce:
         07:dc:9f:bc:ac:fd:33:55:36:d7:4e:66:ca:dc:49:8a:ff:25:
         a4:1a:44:6e:1b:a7:a9:dc:e0:03:1a:dd:4e:82:64:8c:66:6b:
         ff:cf:eb:bc:aa:f7:b5:a4:02:71:6f:c7:70:3a:49:bb:0e:37:
         93:f9:1b:d7:06:fd:c7:d7:7f:6e:02:f6:b6:c8:b7:24:bb:9e:
         f6:2f:8d:b8:0d:98:80:96:ce:3a:fd:d6:31:40:6a:f3:a1:99:
         04:e9:e2:86:70:0c:a1:73:84:4d:fa:9f:bd:2a:9b:10:d5:93:
         63:8e:5d:4e:90:9f:d9:ee:c6:b7:06:a8:1a:5c:36:10:92:9d:
         2e:05:82:63:6d:e0:7b:c6:89:64:d6:97:99:ab:29:a3:b6:c5:
         1e:ac:b7:55:c0:96:c0:64:06:bf:c6:9d:eb:43:d9:3d:04:26:
         bd:43:41:cb:dd:12:f2:77:33:9d:d0:09:2e:ef:bc:d7:f2:03:
         86:7f:61:58:29:b1:ff:ac:35:73:48:5e:10:1f:f5:7c:38:7e:
         93:7a:a1:91:eb:a0:74:86:f5:97:9e:82:97:32:e8:e1:b1:99:
         54:e2:d5:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:13 2024 by rpki-client on console-fra.rpki-client.org