Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/JuFBJN63ViE5drr9yJiAJMis_hE.roa
File:                     JuFBJN63ViE5drr9yJiAJMis_hE.roa (raw, json)
Hash identifier:          fwGhKUAcR4f2FgYCWFMiM15e8H20fHog+1Q0o8CfVfQ=
Subject key identifier:   26:E1:41:24:DE:B7:56:21:39:76:BA:FD:C8:98:80:24:C8:AC:FE:11
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0282
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/JuFBJN63ViE5drr9yJiAJMis_hE.roa
Signing time:             Tue 30 Apr 2024 01:32:18 +0000
ROA not before:           Tue 30 Apr 2024 01:32:18 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:100::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 642 (0x282)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 01:32:18 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=26E14124DEB756213976BAFDC8988024C8ACFE11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9e:a8:55:f3:93:46:53:f9:43:10:a8:20:ca:
                    a7:45:07:1b:e1:28:e5:42:43:7a:96:ee:74:88:a3:
                    b2:2a:ea:5d:ea:d5:26:a6:72:91:b4:d9:3a:ae:c6:
                    80:b0:8d:ff:c6:e3:7d:fc:cb:9f:57:e0:4e:51:72:
                    fe:fb:46:0b:85:f4:50:db:c2:ad:9d:49:ef:3d:4a:
                    25:78:52:6e:4a:9b:01:09:87:f7:08:a1:06:70:83:
                    1a:43:03:7a:01:19:bd:ca:ad:f6:58:06:d0:83:0b:
                    c9:d2:2a:bd:fb:e0:05:f7:51:2c:ed:25:fb:1b:e1:
                    38:ee:da:d6:42:0b:d6:17:65:d5:dd:c3:8f:53:b2:
                    26:75:9d:f7:a4:dc:98:e8:f1:21:75:17:dc:c3:62:
                    f1:dd:0c:3c:37:17:15:f2:86:02:79:3e:5d:aa:58:
                    a3:b4:bc:67:13:ca:c5:5d:e7:ad:e3:e2:f8:4c:21:
                    83:57:9b:c0:09:91:5c:c4:19:16:0d:13:5e:e9:a3:
                    1c:1e:a5:a7:14:26:12:a8:3e:78:ec:89:5c:45:59:
                    9f:32:15:03:3c:b0:43:4d:46:fc:79:f2:f9:75:b6:
                    d1:6a:98:d4:7c:95:fa:93:d2:38:de:a8:84:07:b5:
                    c4:30:91:3a:d3:45:62:29:23:70:60:cc:9e:1d:bd:
                    46:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:E1:41:24:DE:B7:56:21:39:76:BA:FD:C8:98:80:24:C8:AC:FE:11
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/JuFBJN63ViE5drr9yJiAJMis_hE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         11:0e:10:94:51:1d:26:06:5d:f5:6e:15:7b:1e:66:2c:88:7f:
         5c:d8:7b:2b:dd:5a:64:03:3a:dd:78:c8:1e:fb:e0:cc:a8:1d:
         4c:f2:0a:6b:fc:53:01:b7:fd:03:c3:8d:7c:08:5e:5a:1b:ca:
         d6:f1:cd:4a:a2:39:1d:12:06:d6:4c:14:69:03:be:7d:4a:9f:
         75:8c:81:ae:7b:76:61:1d:40:db:2d:f9:a4:02:0e:9a:c4:a8:
         2b:a3:88:6f:21:2e:fe:3d:c6:86:c6:5f:fc:68:ae:04:f0:e1:
         9f:12:23:92:ed:12:da:a1:b7:1a:ef:1f:88:2c:bd:df:af:8d:
         6c:6d:7e:7f:b4:37:32:c8:6d:71:36:7a:9a:3c:a6:54:42:e7:
         b1:c1:c1:2f:c5:28:92:6b:71:55:d4:13:b9:41:a9:87:47:e7:
         17:89:d8:e8:78:2b:22:50:3d:c7:94:e8:5d:94:68:38:6f:ef:
         b3:89:ee:47:4f:d2:a3:92:5c:eb:cf:ba:6d:29:8b:de:bc:72:
         53:44:0c:84:72:f0:9d:23:32:f8:03:03:37:7b:c6:f0:23:0d:
         74:a1:61:c3:f2:ec:c7:8f:54:c6:78:3a:11:1b:e8:08:24:6a:
         f1:b8:5e:84:83:e8:81:5e:d2:7d:37:36:30:61:2c:61:25:0f:
         8b:f5:0a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:13 2024 by rpki-client on console-fra.rpki-client.org