Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ETSe7uMpTVxfshilo-0JSKvI9us.roa
File:                     ETSe7uMpTVxfshilo-0JSKvI9us.roa (raw, json)
Hash identifier:          Ckz5MeeeeCcmg535vq+3QFtquhNPa8Hm2nGn730yKCE=
Subject key identifier:   11:34:9E:EE:E3:29:4D:5C:5F:B2:18:A5:A3:ED:09:48:AB:C8:F6:EB
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       02F6
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ETSe7uMpTVxfshilo-0JSKvI9us.roa
Signing time:             Tue 30 Apr 2024 01:48:05 +0000
ROA not before:           Tue 30 Apr 2024 01:48:05 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:cd00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 758 (0x2f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 01:48:05 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=11349EEEE3294D5C5FB218A5A3ED0948ABC8F6EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:03:fd:3a:d9:96:db:bf:26:44:f5:e9:79:d6:
                    71:0c:8e:4e:20:18:b8:65:91:80:f3:c7:50:7c:e1:
                    ca:3b:e8:ee:20:5b:62:eb:fa:92:86:14:38:23:13:
                    e9:e4:9c:24:a6:52:dd:83:0e:94:cf:cd:21:49:fb:
                    5a:0c:bb:ac:eb:8d:1c:c6:bb:d0:44:15:33:91:a3:
                    61:9b:36:2a:f0:d8:ff:b7:57:7e:90:47:d5:18:39:
                    2d:77:aa:8b:84:0d:00:2b:6a:eb:2b:07:1c:40:29:
                    31:57:6b:13:8b:17:49:49:e7:38:1a:e4:05:62:be:
                    0d:b1:7b:c1:be:f5:1b:f8:df:0e:33:f4:b6:a8:8d:
                    4d:20:67:42:3b:11:72:cc:0a:52:84:94:93:7f:61:
                    9e:9b:ce:ab:98:79:29:d2:83:e4:56:1c:82:06:8f:
                    be:c1:39:fc:14:b9:49:11:87:76:04:8a:b3:29:e6:
                    46:be:8b:9b:10:01:03:db:25:86:eb:21:0a:db:77:
                    84:ea:0e:2d:a6:be:d0:41:ad:e6:c7:d8:8f:90:38:
                    1a:20:61:2f:8f:79:8c:e2:fa:4a:9e:18:e5:4a:cd:
                    08:89:7c:ab:62:f9:e1:cb:7d:4e:b5:8d:a8:7c:06:
                    8c:f2:53:9e:1c:31:78:44:65:b3:89:5d:07:90:a0:
                    5a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:34:9E:EE:E3:29:4D:5C:5F:B2:18:A5:A3:ED:09:48:AB:C8:F6:EB
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ETSe7uMpTVxfshilo-0JSKvI9us.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:cd00::/40

    Signature Algorithm: sha256WithRSAEncryption
         3b:b9:40:2f:8f:7f:8b:ad:6e:49:4d:24:66:a1:46:19:8f:bd:
         bf:16:43:f2:e5:4e:4a:d4:d2:3b:0b:4c:d3:0b:d6:b2:6e:b9:
         66:2d:ea:ed:90:2b:e9:a9:8b:b7:2f:79:52:85:2e:84:b3:43:
         1c:1b:04:36:85:9b:69:5b:54:77:a9:98:45:cf:76:dc:50:0e:
         99:e6:60:f7:ac:cb:91:54:b3:f8:ee:aa:a2:7b:15:b3:bf:14:
         49:8f:93:7c:29:de:d3:19:72:f7:51:83:58:b1:77:2f:2d:26:
         37:c5:15:72:00:b1:81:84:9a:8a:9b:72:be:76:80:11:13:7d:
         49:6c:13:fa:24:f4:53:97:f8:94:6e:03:11:c3:cd:48:ae:63:
         97:3a:13:45:c9:a3:b9:d7:91:a7:85:06:6f:9d:fe:2d:f9:96:
         1f:a9:5f:bb:a2:09:4f:63:e4:54:54:ff:52:a9:b3:f0:21:73:
         18:dd:f8:de:8d:e0:21:25:ec:86:06:ac:b8:42:22:65:b3:c0:
         7b:59:9b:dd:a2:d4:43:0f:b2:28:97:f6:61:9b:c1:b5:83:75:
         e9:99:0d:a1:20:96:37:8d:c6:2b:18:c4:3b:c4:c5:42:1e:08:
         0d:ab:73:d7:82:7c:33:67:0f:d2:3b:af:39:df:ed:eb:8a:59:
         75:91:b0:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:07 2024 by rpki-client on console-fra.rpki-client.org