Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/HzCAcSZjb18pVShC7BdZTwUxfPU.roa
File:                     HzCAcSZjb18pVShC7BdZTwUxfPU.roa (raw, json)
Hash identifier:          3tJFa7IpmPiaP9gkZNZ/LCPIwDdzp58EwMLxl55xmSc=
Subject key identifier:   1F:30:80:71:26:63:6F:5F:29:55:28:42:EC:17:59:4F:05:31:7C:F5
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       02F5
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/HzCAcSZjb18pVShC7BdZTwUxfPU.roa
Signing time:             Tue 30 Apr 2024 01:48:05 +0000
ROA not before:           Tue 30 Apr 2024 01:48:05 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:1400::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 757 (0x2f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 01:48:05 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=1F30807126636F5F29552842EC17594F05317CF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:86:5b:7a:07:cd:48:ff:35:7d:78:d6:57:c3:
                    66:9b:56:3c:2d:64:c6:00:11:12:f7:2d:03:18:5b:
                    b7:2c:25:d0:44:29:12:c4:18:86:84:cb:37:00:2b:
                    4a:54:40:7a:42:7b:c7:72:0a:cd:d4:e9:61:7e:e9:
                    44:e2:04:fb:92:30:35:8b:bc:af:92:e1:9f:95:ee:
                    75:61:96:11:18:c8:bb:ef:4f:dc:13:b4:99:ae:e4:
                    12:4e:3f:91:4d:d2:77:66:38:f9:4a:ab:75:ca:00:
                    fc:eb:11:e1:94:59:d9:89:32:f1:52:5d:79:36:9f:
                    12:b4:6f:e2:5b:9e:82:52:86:73:a8:9a:21:24:ea:
                    08:57:d8:2d:75:02:8a:6e:6a:88:68:3d:ad:45:e5:
                    6a:74:eb:e2:d0:ac:a6:8d:a2:ad:85:fe:cf:2e:88:
                    43:68:15:e9:11:ef:80:84:0c:48:93:83:0e:75:8b:
                    ff:98:f8:d7:21:5b:ee:02:b5:fb:41:21:f8:3f:42:
                    75:39:8d:09:8b:82:db:fe:11:ef:cf:3e:6a:e5:00:
                    6d:96:4d:13:55:70:d2:50:7a:43:66:30:71:b1:7c:
                    94:82:0d:b4:b4:51:bd:73:3d:88:4b:e8:7e:99:53:
                    33:c1:4d:d6:c7:71:eb:19:fa:d6:70:ae:b5:61:b2:
                    5f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:30:80:71:26:63:6F:5F:29:55:28:42:EC:17:59:4F:05:31:7C:F5
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/HzCAcSZjb18pVShC7BdZTwUxfPU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:1400::/40

    Signature Algorithm: sha256WithRSAEncryption
         33:89:51:99:07:e6:e5:30:7b:13:bb:e8:d1:22:d0:2f:53:ce:
         01:96:5b:16:c2:71:dd:d9:97:9c:20:e6:e3:75:55:23:2a:33:
         3d:30:2f:f5:10:24:9e:71:f7:35:3b:f1:10:81:bd:18:ae:d4:
         6b:7d:68:b8:3f:6f:1d:eb:a8:95:2f:03:c1:2d:f3:26:e3:5e:
         4e:16:ba:c8:64:dd:85:58:01:fe:1c:43:e6:39:2f:16:6a:a2:
         33:65:3b:c8:09:bf:09:e6:6c:4a:f9:c5:a1:7a:a8:0c:98:1e:
         7f:8a:98:86:ae:18:86:d6:72:43:b1:d6:86:7d:9a:ec:60:b5:
         8c:8d:1e:64:6b:e1:ba:17:7f:45:5d:9a:83:4a:54:7b:a8:dc:
         0d:9c:fc:df:8c:e4:23:78:d5:f0:92:38:b9:67:2e:06:96:12:
         75:ab:8c:1c:89:ce:a3:1c:20:3f:c8:4e:91:e7:d4:8c:e4:41:
         30:6e:32:b8:37:39:52:8c:c7:78:c4:cf:f3:5e:76:13:2e:41:
         d7:b9:12:54:17:92:3f:88:5d:e6:25:e7:67:ee:ba:f5:bd:47:
         b9:b1:63:74:06:c3:f5:e8:01:45:88:92:18:c9:c6:10:f6:02:
         9e:78:b8:48:6f:78:da:47:3e:76:98:b9:f3:4c:e2:aa:a9:40:
         db:5f:fe:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:30 2024 by rpki-client on console-ams.rpki-client.org