Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Ho9eZ4u7RGV6Cz_lh26l8V079hg.roa
File:                     Ho9eZ4u7RGV6Cz_lh26l8V079hg.roa (raw, json)
Hash identifier:          mrTbwHGf4DiIAoojRaCwDCwaVUGrYXt3I+BWLgmrf3Q=
Subject key identifier:   1E:8F:5E:67:8B:BB:44:65:7A:0B:3F:E5:87:6E:A5:F1:5D:3B:F6:18
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0291
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Ho9eZ4u7RGV6Cz_lh26l8V079hg.roa
Signing time:             Tue 30 Apr 2024 01:35:06 +0000
ROA not before:           Tue 30 Apr 2024 01:35:06 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:f600::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 20:52:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 657 (0x291)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 01:35:06 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=1E8F5E678BBB44657A0B3FE5876EA5F15D3BF618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:94:f9:d9:14:78:55:0c:b0:e0:28:a0:09:b9:
                    0b:e6:14:23:3c:f9:71:f5:06:6f:55:d3:c5:61:d6:
                    4e:9e:18:77:99:57:e4:c9:74:af:09:8c:e5:b1:65:
                    41:5b:5b:c6:f9:c2:f3:b3:09:65:c8:3d:e3:ab:f2:
                    db:8d:47:89:31:c3:4e:cb:1b:b9:f9:00:b1:1a:2a:
                    18:aa:54:78:61:a4:35:c0:28:b4:4d:61:6d:2a:8c:
                    b7:46:4a:17:8a:ec:13:fb:7f:2a:2e:ef:92:90:15:
                    b4:63:df:f3:c6:d1:3c:22:cc:ad:38:75:9b:41:3b:
                    68:9a:6c:f4:37:31:3c:ac:f3:2d:9f:67:25:e8:77:
                    04:7e:e0:10:32:de:77:66:18:e6:b0:02:da:e3:30:
                    16:02:f3:4b:fb:fc:41:56:ad:ca:52:63:f9:c0:9f:
                    cb:9f:42:54:4b:70:dd:28:3d:bb:7c:f1:29:d1:3e:
                    14:16:80:22:4c:fb:ac:6c:7f:6f:89:00:65:27:73:
                    30:c5:07:8a:5a:34:a6:cf:16:9e:36:83:22:77:c8:
                    ca:16:5a:55:5b:50:f7:15:4e:11:4d:f0:99:de:cf:
                    46:00:88:47:9e:71:ff:68:0c:99:83:6e:28:26:91:
                    99:5e:6f:db:f8:50:6f:09:30:bc:e3:c9:94:4e:2a:
                    e2:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:8F:5E:67:8B:BB:44:65:7A:0B:3F:E5:87:6E:A5:F1:5D:3B:F6:18
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Ho9eZ4u7RGV6Cz_lh26l8V079hg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:f600::/40

    Signature Algorithm: sha256WithRSAEncryption
         88:a0:8b:37:f1:fe:73:73:4b:7d:31:39:63:a7:05:51:14:19:
         06:3d:18:e3:62:a2:79:ec:5a:03:51:48:7a:b8:a7:fc:9d:fb:
         21:47:d7:ca:93:c9:5d:b6:d7:0a:bf:e5:cd:59:37:ba:56:7c:
         04:60:ec:3b:aa:78:5e:8c:0e:12:ba:94:be:30:7a:95:6b:64:
         ca:59:f0:01:bb:9a:20:0c:e8:d9:f6:b0:57:53:71:a3:05:c7:
         86:89:1a:f0:0c:43:d6:25:39:1f:66:78:bd:8f:5d:aa:e0:6e:
         7c:fc:51:30:7a:8c:05:29:5e:f9:7d:bc:a9:30:c1:d2:d9:54:
         d2:3a:8d:99:8b:9f:84:df:4a:ec:ba:c0:88:e7:8f:ed:79:6b:
         88:55:41:f9:2b:b8:ce:75:b9:c8:f7:80:66:b5:5c:ec:55:67:
         0b:aa:75:22:7b:ae:22:4f:7e:89:a0:b2:ff:84:8d:7f:47:7d:
         01:ac:dc:e0:a4:c6:e1:dc:7a:4e:45:a5:36:98:a2:9a:73:14:
         2e:d1:4d:bd:b6:cb:6d:66:20:2c:63:d0:a0:9a:6b:15:a7:23:
         86:cb:44:03:59:f5:83:3a:fa:97:25:ae:4f:c1:e6:65:c6:f8:
         f0:75:4b:d6:f0:33:73:db:9a:77:99:f8:a9:3a:ad:bd:c2:48:
         12:51:a7:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 21:52:33 2024 by rpki-client on console-fra.rpki-client.org