Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/F7gnJna38ZLhrblKKMF39Y6Cusw.roa
File:                     F7gnJna38ZLhrblKKMF39Y6Cusw.roa (raw, json)
Hash identifier:          c43HNEj7UuiWXJYMyLPcDg2ifynbuOsvixvAVX2kltU=
Subject key identifier:   17:B8:27:26:76:B7:F1:92:E1:AD:B9:4A:28:C1:77:F5:8E:82:BA:CC
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       029C
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/F7gnJna38ZLhrblKKMF39Y6Cusw.roa
Signing time:             Tue 30 Apr 2024 01:35:14 +0000
ROA not before:           Tue 30 Apr 2024 01:35:14 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:a500::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 20:52:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 668 (0x29c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 01:35:14 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=17B8272676B7F192E1ADB94A28C177F58E82BACC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:67:db:84:5b:bb:15:b7:0b:0a:55:fb:45:54:
                    8f:18:1f:ad:05:5b:c0:01:22:84:79:dc:7d:e6:df:
                    92:2a:3c:5d:70:0c:d4:c7:83:c1:c1:90:4f:19:38:
                    33:41:b6:0f:fe:a2:f9:a1:eb:77:ab:cb:b2:39:43:
                    88:4c:f6:8e:22:96:7a:22:dc:1b:f4:1c:bc:93:5f:
                    d2:da:fa:9d:4d:34:36:ca:53:f9:12:78:9f:ac:31:
                    82:44:be:50:4c:f6:1f:d2:be:f4:f2:df:a6:16:7f:
                    ec:5e:b5:7b:1f:8f:41:30:67:cb:c2:a1:e6:bd:2d:
                    a5:3a:b4:9e:1f:d5:da:f1:3a:3f:c9:6b:58:ba:6a:
                    ac:b2:bb:7a:be:91:2d:5d:0f:df:32:da:fc:2b:35:
                    f8:f4:f3:29:7b:58:9e:47:70:1e:8a:13:88:f5:53:
                    96:6d:2f:c5:00:a4:c4:e2:b4:c3:0d:34:21:7a:b8:
                    d2:0a:a1:74:f6:66:92:35:8e:18:9e:99:3c:a1:83:
                    eb:aa:f9:ee:43:ca:7a:ad:03:d7:db:5f:a8:ba:19:
                    a0:25:5a:53:c5:19:1d:57:d2:1b:a0:98:f6:b7:f8:
                    bc:57:d8:45:c2:af:d7:db:c1:29:64:e5:d7:ea:0b:
                    e1:c4:db:6c:98:24:be:ba:d0:2e:04:05:27:61:b1:
                    a4:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:B8:27:26:76:B7:F1:92:E1:AD:B9:4A:28:C1:77:F5:8E:82:BA:CC
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/F7gnJna38ZLhrblKKMF39Y6Cusw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:a500::/40

    Signature Algorithm: sha256WithRSAEncryption
         04:63:1f:94:03:5f:ef:56:01:81:7e:25:88:c2:3c:e2:2a:7b:
         cd:cd:52:58:6e:e8:4c:cc:ba:e9:0f:97:e1:04:77:09:87:b1:
         94:9a:00:0a:af:eb:4b:d4:44:bf:8f:32:25:0e:57:96:83:22:
         8c:b9:e9:02:b5:9a:98:80:05:f0:d2:37:e8:c7:99:31:7f:7d:
         52:69:22:e5:31:e4:af:2a:8d:34:d9:f0:7b:e2:4d:7e:0e:16:
         f2:55:67:54:90:da:fa:8d:5c:62:9e:fc:21:73:71:a0:a4:eb:
         14:3a:d7:13:ad:9c:9a:40:34:52:11:5c:4e:2e:7e:ff:ce:c7:
         5c:8d:1f:1e:d3:1f:c6:8c:a6:53:ad:eb:70:40:80:70:23:24:
         50:5b:e1:42:46:b3:97:20:b0:7f:d2:b8:e8:f4:f3:13:c8:cc:
         34:4c:db:d8:80:8a:1c:db:45:06:fc:5b:9f:7f:75:ab:59:e6:
         80:29:9f:04:da:6d:8d:f8:1d:3c:10:26:77:c6:56:20:32:b3:
         a6:93:e3:31:a9:07:78:fc:cc:39:8f:11:d0:51:7a:25:dd:e0:
         84:4f:11:22:1f:d3:15:02:22:76:a4:08:54:d5:54:15:22:a5:
         52:9c:8c:2c:9a:35:a3:09:7a:64:35:94:ee:96:17:d7:12:a5:
         60:0a:2b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 21:52:33 2024 by rpki-client on console-fra.rpki-client.org