Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/GhgTwRmKE40FNObUD3keOvT_NPQ.roa
File:                     GhgTwRmKE40FNObUD3keOvT_NPQ.roa (raw, json)
Hash identifier:          8mHQQQIdblI4fyOwQM8/fRwU+52mt7ngg92xio8UgCs=
Subject key identifier:   1A:18:13:C1:19:8A:13:8D:05:34:E6:D4:0F:79:1E:3A:F4:FF:34:F4
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       034C
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/GhgTwRmKE40FNObUD3keOvT_NPQ.roa
Signing time:             Tue 30 Apr 2024 01:56:48 +0000
ROA not before:           Tue 30 Apr 2024 01:56:48 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:5100::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Dec 2024 00:11:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 844 (0x34c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 01:56:48 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=1A1813C1198A138D0534E6D40F791E3AF4FF34F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:30:b6:30:fe:d8:de:34:6e:9f:cd:67:98:7e:
                    cf:14:66:d5:cd:0a:e8:74:6a:bd:f4:1e:9a:8e:08:
                    0c:80:e0:39:34:96:22:01:4d:87:60:0c:61:74:3d:
                    b6:66:7b:29:b7:e2:52:42:a6:0b:ad:f1:2e:a1:44:
                    c0:35:45:8e:d8:ba:34:9a:bb:b1:3e:c1:71:d9:8b:
                    c6:97:9d:b6:09:ea:20:8d:91:c2:97:94:a6:98:20:
                    9b:4e:32:46:f2:96:0f:aa:36:e1:c3:3e:6b:c6:36:
                    0f:73:13:82:86:51:37:de:89:8d:da:e9:c9:ca:33:
                    aa:dd:16:08:6a:b3:16:fc:d6:c5:20:d1:0e:c8:44:
                    49:81:4b:a8:56:7c:35:8b:60:08:8b:de:63:86:85:
                    60:1d:cc:2b:01:a9:a2:5b:41:21:43:1c:2f:c3:57:
                    d1:a8:79:99:b8:d8:7c:f4:d4:a8:a4:27:04:88:8c:
                    b0:e8:5e:dc:e3:90:d0:bb:77:f0:d8:4b:39:9b:b7:
                    3c:ee:9f:90:4c:81:1a:ec:70:62:e3:c1:bd:98:3f:
                    64:fc:4b:84:ec:9b:49:a2:f8:60:6c:cb:f9:c6:42:
                    89:8e:4a:e0:cd:60:31:37:32:1e:8a:a0:64:c8:e1:
                    fb:31:88:d4:fa:3d:ec:6f:f0:91:af:fd:a8:8f:c2:
                    19:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:18:13:C1:19:8A:13:8D:05:34:E6:D4:0F:79:1E:3A:F4:FF:34:F4
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/GhgTwRmKE40FNObUD3keOvT_NPQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:5100::/40

    Signature Algorithm: sha256WithRSAEncryption
         60:59:dc:d5:0e:21:72:32:ca:75:bd:0d:2c:ef:72:55:8f:71:
         00:41:47:43:bc:c7:6e:73:a2:f1:60:b5:05:56:b1:7c:5a:42:
         10:eb:cd:e4:32:c7:ee:20:43:d1:02:29:59:19:cf:0a:9b:a5:
         b1:11:c4:e6:9c:95:cd:d9:f8:0f:58:59:1c:4f:81:ff:e7:fd:
         a3:f4:fe:db:5b:64:cd:28:3c:30:00:13:c7:ed:f0:f1:0c:34:
         84:31:0a:77:1e:97:35:41:f3:47:61:a3:1b:ee:d6:ab:1b:56:
         bd:f1:7d:dd:60:17:f6:6b:21:13:70:a6:28:c8:63:dc:77:9b:
         7e:a8:5f:b0:b5:67:94:c1:55:ae:e3:0f:e8:4b:34:1f:5a:8b:
         43:3a:ce:77:09:2f:d2:85:b2:b3:24:64:38:fd:4a:7b:a8:8b:
         46:5c:c1:cc:c9:48:ce:9a:c0:12:fb:be:b5:74:1a:db:0e:ad:
         c9:04:69:eb:d6:48:f1:1b:ad:01:80:1f:a9:c8:5a:6a:31:39:
         0b:d8:8f:2c:13:8e:c8:27:aa:16:8b:f7:72:52:31:9c:cb:d8:
         27:06:93:da:d2:cb:f9:52:0b:5e:17:88:24:09:34:f3:18:ae:
         b1:81:c0:32:c3:cd:23:87:d3:9b:1d:93:78:fb:52:06:89:61:
         8b:0b:d8:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:27:04 2024 by rpki-client on console-ams.rpki-client.org