Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/JPKgGu6kdnO-pgzd4p6LHFFUo-A.roa
File:                     JPKgGu6kdnO-pgzd4p6LHFFUo-A.roa (raw, json)
Hash identifier:          +Ty1PVTUYyQiwnM/m3vyko28f+BDQBV1bBYe/xsJU6Q=
Subject key identifier:   24:F2:A0:1A:EE:A4:76:73:BE:A6:0C:DD:E2:9E:8B:1C:51:54:A3:E0
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       02AA
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/JPKgGu6kdnO-pgzd4p6LHFFUo-A.roa
Signing time:             Tue 30 Apr 2024 01:39:24 +0000
ROA not before:           Tue 30 Apr 2024 01:39:24 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:e500::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 682 (0x2aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 01:39:24 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=24F2A01AEEA47673BEA60CDDE29E8B1C5154A3E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:82:a3:20:d9:0a:28:64:0e:d4:4b:85:a5:ba:
                    6f:5c:3e:2f:33:19:3b:b9:09:6d:a1:18:76:23:1c:
                    31:a2:7a:83:9f:b5:7f:cc:ad:2e:32:9e:27:cf:0c:
                    ce:40:74:8d:43:34:55:aa:e1:4c:35:04:c3:b7:7a:
                    1c:9e:a3:16:5c:1a:b4:19:72:c0:4f:b7:75:d1:e1:
                    aa:04:03:d8:94:13:4d:b7:58:3a:59:a2:18:52:c9:
                    c5:59:10:f1:80:99:6f:25:1f:54:04:a5:95:61:c6:
                    82:04:20:45:75:b9:6a:5f:b8:72:61:f9:ee:f6:c6:
                    dd:e3:01:99:81:cc:44:b3:13:96:f1:b0:4e:36:8f:
                    0a:4c:42:e6:96:14:fb:2d:e8:b2:f2:2c:e1:9a:28:
                    20:fa:fd:cb:07:52:7a:75:19:0e:a0:00:69:79:1f:
                    43:c0:15:8e:37:5f:24:18:1a:d6:c0:d1:1c:46:27:
                    c4:2d:fc:dd:56:2a:37:e9:d0:37:69:a9:ff:a6:18:
                    33:5e:32:d1:f6:22:4e:04:eb:b6:90:49:c0:58:e2:
                    2c:b2:83:95:a8:3e:bd:75:80:13:5d:61:96:72:80:
                    8b:24:83:13:58:c4:9f:6a:e7:c4:2e:d3:0a:52:89:
                    b2:79:45:3c:29:3f:fc:16:a6:7b:cc:fd:fe:23:60:
                    3b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:F2:A0:1A:EE:A4:76:73:BE:A6:0C:DD:E2:9E:8B:1C:51:54:A3:E0
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/JPKgGu6kdnO-pgzd4p6LHFFUo-A.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:e500::/40

    Signature Algorithm: sha256WithRSAEncryption
         cc:a5:2a:4d:fa:c4:0b:7f:21:be:0e:76:9a:51:55:a8:5b:bd:
         27:54:1e:b9:0d:15:ee:eb:ea:a9:75:f6:1f:0a:32:21:c9:ba:
         70:61:63:ff:6e:d5:c6:58:e0:29:ff:d0:f7:1e:85:2e:34:0d:
         0b:eb:2a:ba:61:0d:5f:c8:ad:df:22:af:8a:c2:f8:5d:25:49:
         44:61:6c:07:09:51:b0:e8:06:68:69:4c:a5:46:d9:74:f5:8c:
         63:90:b2:af:d9:67:87:21:d0:47:c7:b1:01:2c:f3:95:a0:2f:
         51:f5:17:1f:69:73:99:70:27:0b:40:48:0f:6f:5d:1a:1d:a2:
         26:10:f1:e4:5a:a7:fa:f7:ca:34:26:88:66:4d:86:36:d2:fc:
         89:33:67:a9:80:c7:c7:a8:50:d8:1d:19:2d:af:71:25:25:b2:
         06:b6:a0:25:42:14:f9:91:01:c7:a0:b3:52:57:66:dd:fe:94:
         10:3c:9c:92:90:ca:e6:cd:d2:ce:e5:eb:e4:0b:3a:87:38:93:
         e5:b2:b5:6d:93:fd:8b:e9:ec:3a:dc:6d:77:26:5e:2f:cb:c2:
         cd:bb:ff:d0:01:35:5c:19:30:bd:9f:30:b5:d9:4d:3a:19:4b:
         4b:81:f3:8a:c9:4d:0c:49:5c:ee:c5:82:61:a4:a0:bf:9f:97:
         0e:ba:35:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:30 2024 by rpki-client on console-ams.rpki-client.org