Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/FWLJyvlTBN-ny9MIgs_vJlFJYu8.roa
File:                     FWLJyvlTBN-ny9MIgs_vJlFJYu8.roa (raw, json)
Hash identifier:          cBTrI0guc9SnyFMeSjokf1ZRqk/QdxHXzoB2qy9mrJM=
Subject key identifier:   15:62:C9:CA:F9:53:04:DF:A7:CB:D3:08:82:CF:EF:26:51:49:62:EF
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       025D
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/FWLJyvlTBN-ny9MIgs_vJlFJYu8.roa
Signing time:             Tue 22 Aug 2023 05:38:13 +0000
ROA not before:           Tue 22 Aug 2023 05:38:13 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:61:4800::/38 maxlen: 38

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 22:26:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 605 (0x25d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Aug 22 05:38:13 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=1562C9CAF95304DFA7CBD30882CFEF26514962EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:73:2b:f7:b2:3f:ed:59:72:f9:a2:5c:0d:5b:
                    74:27:17:7b:09:03:72:ff:81:50:2b:4a:02:c2:95:
                    b0:25:d0:0e:e5:f6:15:c4:fa:93:07:8c:14:97:61:
                    0f:1f:f4:c0:fa:1d:fc:92:10:39:1d:4f:ae:ab:69:
                    66:10:9f:db:12:7f:af:bd:a3:6a:2b:90:ec:94:bf:
                    9d:5f:ad:11:71:9d:c1:24:67:74:4b:8b:d4:f6:53:
                    e9:52:05:b8:87:08:97:7f:c8:54:f2:d2:7e:0c:eb:
                    1a:3b:af:9b:73:0a:f3:89:0d:6d:b9:d6:d6:98:ee:
                    fd:60:23:26:b6:2e:f9:83:43:f5:80:7f:28:38:21:
                    2b:49:e1:8c:b4:5c:d8:63:39:da:a5:f9:d2:9f:c3:
                    49:52:4d:a7:50:ca:48:54:0d:b3:96:9a:a4:ec:09:
                    0d:3e:1c:6c:af:a9:95:d8:44:7e:6f:7e:75:7f:83:
                    38:af:58:ce:4d:a2:68:bc:8d:26:0f:09:c8:e7:01:
                    f7:f2:4d:d8:13:86:1b:ee:02:78:c0:54:61:29:b4:
                    d3:d2:2e:71:c7:28:fa:19:3f:8d:05:f2:61:2e:44:
                    ea:63:e6:9f:d4:24:7b:fb:13:51:03:16:ea:d1:5c:
                    48:c5:3c:e2:9e:cf:72:05:54:d1:e1:41:9d:99:75:
                    a7:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:62:C9:CA:F9:53:04:DF:A7:CB:D3:08:82:CF:EF:26:51:49:62:EF
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/FWLJyvlTBN-ny9MIgs_vJlFJYu8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:61:4800::/38

    Signature Algorithm: sha256WithRSAEncryption
         25:26:f7:a5:39:3f:d1:91:e5:bd:b5:bb:e7:71:63:dc:13:44:
         e4:db:00:9a:32:35:96:20:4f:4b:98:2f:a7:b5:2c:1f:25:99:
         10:bd:d4:3d:f9:0a:27:60:3b:1b:23:c3:f5:c8:1a:4a:de:f0:
         3a:15:b1:22:22:9e:5b:e9:8f:8f:bb:b1:0f:a3:38:46:aa:27:
         ae:76:ed:95:09:22:1a:e7:cc:c2:e5:e7:db:14:60:82:12:b7:
         ba:6a:c6:be:f4:b4:0e:74:3c:d8:f8:cf:30:a8:96:24:3e:58:
         30:3d:5b:18:36:57:56:72:e8:ee:8c:f5:5a:5e:b0:f9:d2:46:
         2b:b1:f8:82:d1:95:01:fe:1c:b3:1d:a9:73:e9:37:4c:99:1d:
         06:d5:f2:c8:ed:f6:10:a5:25:86:b1:df:dc:6a:81:f1:f6:57:
         40:f4:0f:d2:02:a0:f7:f3:4f:c6:27:23:c2:c2:fa:5c:0c:2f:
         c1:28:7f:77:e8:6d:dd:67:85:b5:54:77:9e:6e:a8:39:a6:e0:
         d0:11:c3:47:8c:19:1c:ea:1c:2c:20:82:ba:c3:88:9a:34:f8:
         23:89:9b:16:14:ec:12:55:1a:91:f7:7d:d7:a9:a7:8c:08:ec:
         92:4f:ab:d6:e1:fa:79:3d:4f:70:ca:d1:f1:06:2b:35:e3:45:
         6c:7d:cc:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 00:11:43 2024 by rpki-client on console-ams.rpki-client.org