Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Ieu_ukVSwYhkeK--6vLy6JjJveQ.roa
File:                     Ieu_ukVSwYhkeK--6vLy6JjJveQ.roa (raw, json)
Hash identifier:          PVF3bzImgqiM5UzUNXyxyF9CQPyNaTul+gAU6qHbIwg=
Subject key identifier:   21:EB:BF:BA:45:52:C1:88:64:78:AF:BE:EA:F2:F2:E8:98:C9:BD:E4
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       02BE
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Ieu_ukVSwYhkeK--6vLy6JjJveQ.roa
Signing time:             Tue 30 Apr 2024 01:39:32 +0000
ROA not before:           Tue 30 Apr 2024 01:39:32 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:ba00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 22:26:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 702 (0x2be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 01:39:32 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=21EBBFBA4552C1886478AFBEEAF2F2E898C9BDE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a9:ff:8b:b5:c0:77:58:8b:fe:ad:e9:e2:ab:
                    cb:3d:20:64:82:f0:54:8b:a4:93:f7:87:04:36:0c:
                    5e:b0:00:7e:ed:f5:f2:3b:1e:0c:31:32:76:56:f5:
                    da:f0:4b:29:d9:1e:bc:77:0e:06:58:ef:ec:52:4a:
                    78:48:05:e6:8d:dd:f2:c7:88:8b:49:e1:ef:2a:6a:
                    12:9e:4e:51:68:58:03:50:a6:19:5b:e6:39:39:4c:
                    9f:79:4f:f3:cb:09:c4:4e:8e:ea:a1:c0:0e:78:52:
                    67:01:ed:6a:bc:b7:60:1d:dc:91:57:d3:a2:b9:c1:
                    40:0f:72:27:94:dc:66:3f:21:bc:2c:d1:81:a7:be:
                    67:c0:df:eb:29:b6:11:6e:98:ca:59:c8:9b:41:f1:
                    81:d2:44:ae:2c:b4:ff:22:12:98:da:8d:02:d4:99:
                    15:89:36:94:5e:0d:51:c1:9a:87:5d:13:35:d4:c3:
                    3a:6f:0b:6b:85:41:94:c5:60:32:1d:bb:19:cc:ef:
                    51:2e:59:32:f7:e2:cd:2f:2e:15:6b:e6:73:f6:87:
                    75:b9:0b:d3:e0:f2:48:65:a7:e6:be:ac:de:12:6e:
                    49:06:ee:86:3a:e1:6f:91:70:3b:b5:a4:42:fd:54:
                    79:a5:c2:3b:6c:5f:d5:b5:fe:22:cb:a4:4b:3c:d8:
                    d5:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:EB:BF:BA:45:52:C1:88:64:78:AF:BE:EA:F2:F2:E8:98:C9:BD:E4
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Ieu_ukVSwYhkeK--6vLy6JjJveQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:ba00::/40

    Signature Algorithm: sha256WithRSAEncryption
         65:0f:9c:6b:b5:dc:75:f7:f1:4a:6a:25:84:99:09:28:d6:26:
         ad:6a:5f:2c:42:9c:3c:b2:ac:6a:1f:11:53:a5:14:51:33:23:
         39:86:c5:3d:c0:d2:d3:b3:e6:77:a5:29:71:70:4d:4b:f8:95:
         91:4f:e9:60:8f:0a:85:81:a1:e3:c2:f9:fd:98:5b:f2:f4:fc:
         a9:cf:32:5e:83:5a:dc:72:08:d0:59:cb:0f:15:c5:7c:c4:ae:
         89:b0:01:f6:cb:f0:60:86:2e:f9:3e:d8:8e:5e:94:1d:f4:50:
         d2:00:f2:c1:0d:f5:9c:41:72:1b:ee:08:80:2f:ad:89:40:ef:
         fb:ce:88:94:56:cf:b4:2b:91:11:17:bc:5d:74:25:84:6d:7a:
         64:5e:33:d6:b3:98:fd:18:5d:e8:ba:d1:9c:09:f5:7e:5b:f4:
         d9:46:f5:90:99:04:c0:db:85:04:e0:59:44:62:d7:98:55:60:
         b3:31:cf:aa:46:a2:7e:18:23:84:de:fd:ef:f6:1c:8b:a9:54:
         d8:f0:24:35:ee:6f:b4:3a:76:c4:22:c7:5a:71:8b:c1:a0:87:
         00:fc:07:ce:0b:05:35:de:a9:f8:d0:83:28:66:be:04:51:7b:
         05:58:ba:d9:19:bd:e6:82:71:df:b8:7e:c7:a6:b1:88:c1:ff:
         57:d6:e8:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 00:11:43 2024 by rpki-client on console-ams.rpki-client.org