Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/GYpVdJ6UW3mNwHXSAodRcAWMTkI.roa
File:                     GYpVdJ6UW3mNwHXSAodRcAWMTkI.roa (raw, json)
Hash identifier:          dVFgjpLyZhuTlnpHW70y2+QTeipUS6qXEStAboQT3EQ=
Subject key identifier:   19:8A:55:74:9E:94:5B:79:8D:C0:75:D2:02:87:51:70:05:8C:4E:42
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       013D
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/GYpVdJ6UW3mNwHXSAodRcAWMTkI.roa
Signing time:             Tue 30 May 2023 17:30:06 +0000
ROA not before:           Tue 30 May 2023 17:30:06 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:60:f01e::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 13:40:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 317 (0x13d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:30:06 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=198A55749E945B798DC075D202875170058C4E42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:bd:c9:cb:6b:f2:6c:94:b3:cc:38:68:39:9f:
                    90:79:9c:76:11:72:ee:29:0a:42:c4:22:66:5d:ec:
                    95:5e:c6:5a:67:4e:f5:0c:c2:e2:4f:3d:7a:e3:63:
                    aa:de:22:fc:b4:b0:cc:c5:85:1c:26:8e:b1:d5:82:
                    87:e2:f1:44:d5:54:6d:08:c6:e7:4b:32:fb:83:09:
                    4e:92:74:5e:71:58:f3:62:7e:c2:44:d9:02:14:cd:
                    89:7a:92:53:00:6f:32:0a:59:a2:7d:e0:67:42:9f:
                    92:d9:f6:df:5a:0d:de:c7:a9:ef:bf:8b:7c:9c:92:
                    c5:09:74:78:93:7c:6e:35:7e:8d:99:ec:c5:ea:2f:
                    6a:c9:58:cf:86:e0:a2:1d:64:9c:27:17:f3:ee:c2:
                    7d:a1:bb:9f:d7:c7:bf:d6:6d:0b:3e:1f:37:45:2c:
                    95:0d:5b:b9:bd:f0:6c:dd:f2:9b:2e:08:45:2d:ab:
                    39:02:cc:dc:45:de:67:0f:26:19:ce:c3:fa:33:80:
                    90:05:28:89:5a:c1:aa:35:00:0d:ac:a9:3f:87:6b:
                    1d:a8:76:94:cb:32:a2:24:a6:47:ef:db:13:b4:3b:
                    01:66:c3:45:76:64:c1:ae:c5:c3:a9:e1:e9:9f:e3:
                    6a:d9:7d:7b:87:27:8b:58:f1:39:ec:7c:31:ca:26:
                    b3:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:8A:55:74:9E:94:5B:79:8D:C0:75:D2:02:87:51:70:05:8C:4E:42
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/GYpVdJ6UW3mNwHXSAodRcAWMTkI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:60:f01e::/48

    Signature Algorithm: sha256WithRSAEncryption
         bc:d7:5f:e4:07:c0:7b:9d:ad:ad:b7:d3:36:4f:23:45:4b:78:
         d1:1e:19:16:e1:e2:bc:88:93:8a:c3:b8:90:5f:5c:87:34:58:
         bb:0c:e4:21:e2:67:0f:e3:d4:f3:73:79:36:c8:a0:14:a0:55:
         02:54:8c:72:ea:d1:27:fb:c1:3b:b0:78:85:85:20:23:87:41:
         ff:6f:4a:ef:8b:6e:bb:d5:5b:94:16:fc:b5:10:63:a7:11:15:
         79:bd:7c:ac:61:cf:d2:18:e9:f3:9b:96:68:b6:dc:d0:0b:2b:
         e4:6a:c0:19:e6:89:ff:de:91:4e:74:f0:52:8c:b9:54:d6:45:
         cf:e6:bc:fe:8d:96:7f:7f:9c:65:3d:18:ae:48:ff:b8:ed:55:
         c0:76:cd:27:53:bc:96:d2:34:17:1f:70:d0:a3:e7:84:e1:28:
         2e:55:c0:3c:6d:1f:80:ae:39:ff:d1:ab:4e:bc:47:45:43:a7:
         7f:a2:21:39:26:eb:97:41:78:04:8e:7f:de:8d:2f:a1:8d:41:
         e7:33:a5:e2:69:eb:c3:19:e7:75:38:41:6d:33:4d:c6:66:bc:
         61:bd:b1:c5:b7:39:a4:0f:10:a9:f5:62:45:d4:39:e8:12:ed:
         e3:71:6f:d9:a0:41:2b:18:ec:6f:1d:f3:5a:ca:48:aa:58:5b:
         16:b8:eb:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:15:52 2024 by rpki-client on console-ams.rpki-client.org