Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/IIL-pHagnUFeg-5NMxKJHTVdrWU.roa
File:                     IIL-pHagnUFeg-5NMxKJHTVdrWU.roa (raw, json)
Hash identifier:          vGd+h/eb7GNhkJseWJe9gRQke7R7sDO4tS4r9SI96E0=
Subject key identifier:   20:82:FE:A4:76:A0:9D:41:5E:83:EE:4D:33:12:89:1D:35:5D:AD:65
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0276
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/IIL-pHagnUFeg-5NMxKJHTVdrWU.roa
Signing time:             Tue 30 Apr 2024 01:32:14 +0000
ROA not before:           Tue 30 Apr 2024 01:32:14 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:61:e00::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 22 Jun 2024 01:32:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 630 (0x276)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 01:32:14 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=2082FEA476A09D415E83EE4D3312891D355DAD65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:5e:77:1d:0f:62:2c:fe:be:bb:a9:c0:65:3f:
                    de:60:62:b0:01:7f:ce:e1:53:5b:e3:c7:59:ba:b1:
                    98:fd:dc:5e:57:60:52:1a:07:06:04:ab:5a:35:29:
                    1a:32:42:16:20:52:d6:1b:98:79:d8:58:b7:2c:46:
                    60:ab:06:54:32:28:db:1f:c0:11:f8:08:68:63:2e:
                    64:da:7d:bf:68:ce:fb:60:9e:36:72:f3:3b:04:1c:
                    9f:2b:53:17:d8:08:de:cf:69:21:ab:a7:b6:d1:12:
                    45:f0:bb:1c:46:3e:e5:82:50:48:69:62:d6:fe:d3:
                    56:ce:b7:02:38:3c:74:cf:c8:58:42:81:a9:23:4f:
                    a3:72:d2:73:af:18:d2:d2:ff:90:05:62:df:14:fb:
                    ef:15:f2:00:94:45:13:8a:a2:08:e2:e0:b2:42:d2:
                    b5:2e:32:1f:0f:31:a1:13:15:2c:fa:7a:1d:15:d5:
                    89:e4:17:d9:9a:e0:9b:ff:4d:61:8c:24:b4:01:d6:
                    5c:a7:75:d6:27:39:10:22:e8:56:5c:81:66:e0:d8:
                    12:07:bf:fd:1d:8e:32:3f:72:2c:21:7c:6d:14:51:
                    8b:45:d5:83:ae:02:51:f7:a3:fb:35:13:e2:db:0b:
                    37:05:fd:a8:78:4d:86:27:30:a1:72:3c:65:88:67:
                    1e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:82:FE:A4:76:A0:9D:41:5E:83:EE:4D:33:12:89:1D:35:5D:AD:65
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/IIL-pHagnUFeg-5NMxKJHTVdrWU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:61:e00::/48

    Signature Algorithm: sha256WithRSAEncryption
         b1:61:f9:28:f0:3f:9a:47:b8:3b:e9:00:cb:cc:82:f0:8a:1e:
         ea:54:94:bc:06:af:33:55:dd:00:7b:df:10:50:7d:7e:f3:b6:
         1c:46:f3:97:84:16:42:00:5c:cf:27:d5:1c:22:7d:05:81:88:
         7b:5d:c1:2c:44:d2:6a:47:46:14:76:58:c7:42:76:e5:8e:9f:
         be:ba:7e:16:2a:b3:d5:d7:14:f0:4f:e5:be:83:b7:3b:46:8b:
         2b:8c:62:a6:6e:6a:38:b7:cb:92:55:41:c8:6d:17:39:ff:7f:
         57:bc:69:78:0a:6e:fa:f6:09:e6:04:02:7e:ae:0c:5e:b0:0b:
         0d:11:12:3b:df:c6:3f:91:47:3f:4a:3d:bf:cc:4d:33:4d:03:
         14:0b:8f:bb:ed:bc:00:81:c6:34:15:ee:f5:e7:f0:b2:44:01:
         0b:32:73:aa:77:07:16:e3:dd:5b:34:bf:52:cf:62:5f:74:9a:
         b4:91:d6:85:25:a4:4e:97:df:fa:ec:20:2d:99:94:1d:74:2d:
         90:7a:ea:f9:e9:fb:a9:7d:eb:29:bf:3b:70:15:26:83:a2:1b:
         f0:94:0f:72:41:c0:9f:b0:a4:2a:db:f9:c8:fd:8f:2f:69:95:
         db:68:15:9a:1a:8a:ec:d9:e9:56:29:b4:13:39:38:87:86:de:
         9f:03:73:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 02:41:50 2024 by rpki-client on console-ams.rpki-client.org