Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/LTOnVT-kA0EIRbGr4i_HCXD-U48.roa
File:                     LTOnVT-kA0EIRbGr4i_HCXD-U48.roa (raw, json)
Hash identifier:          cYcnGspMVM47BDLYiIysDfsJqSuteX41lzC+FXmqoGA=
Subject key identifier:   2D:33:A7:55:3F:A4:03:41:08:45:B1:AB:E2:2F:C7:09:70:FE:53:8F
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       02B3
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/LTOnVT-kA0EIRbGr4i_HCXD-U48.roa
Signing time:             Tue 30 Apr 2024 01:39:28 +0000
ROA not before:           Tue 30 Apr 2024 01:39:28 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:1000::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 691 (0x2b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 01:39:28 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=2D33A7553FA403410845B1ABE22FC70970FE538F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:20:70:2c:73:e1:04:ee:53:12:e2:27:c6:b6:
                    24:63:0b:00:af:4c:7e:81:64:a3:d6:bf:6e:cf:ed:
                    41:0a:ea:3e:db:eb:6e:29:17:10:f8:a7:92:66:d7:
                    a4:93:cc:bc:e5:8e:af:40:ed:e5:fa:d7:d8:d2:d6:
                    0c:1b:5f:34:84:9c:bc:13:60:95:8a:98:6d:07:26:
                    aa:d7:24:16:eb:28:e3:df:88:89:b0:c6:fa:8d:19:
                    6d:49:45:f8:07:00:33:0b:c1:b0:76:dd:fd:40:0c:
                    37:7e:87:d5:88:79:35:30:c0:1a:52:c3:41:4c:a8:
                    6d:f5:f0:f8:4d:48:7a:fb:b7:14:23:06:fe:e9:08:
                    34:29:6f:95:25:21:8e:8c:02:3b:75:84:01:1a:ef:
                    a1:21:f5:e2:32:ef:4d:94:a5:d1:a4:65:92:fe:6f:
                    b1:98:54:57:8c:99:da:3e:e7:8d:61:9d:ec:9d:81:
                    7f:ac:d4:a0:f5:e3:38:fe:52:c9:71:22:d5:83:88:
                    f9:64:13:0e:d8:25:7e:17:8d:23:41:41:77:a9:a3:
                    48:e3:22:34:db:cf:01:72:15:85:bf:af:ff:75:25:
                    4e:d5:e0:a5:94:28:90:0e:4a:9c:29:91:22:cf:8e:
                    d7:6a:eb:a7:75:b7:42:2d:17:85:59:d1:59:e8:d6:
                    e4:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:33:A7:55:3F:A4:03:41:08:45:B1:AB:E2:2F:C7:09:70:FE:53:8F
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/LTOnVT-kA0EIRbGr4i_HCXD-U48.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         21:9b:12:61:47:cc:31:2b:68:f2:dc:c5:0e:78:2b:2c:12:1e:
         37:83:67:72:b1:08:7d:7a:fc:64:5c:4c:5a:d6:ab:20:14:4b:
         ac:13:a6:26:9e:06:10:5d:8c:b5:e5:bc:18:2d:84:d9:9b:d7:
         a7:23:51:85:6b:2e:95:4c:2a:cf:5b:c9:24:29:0b:4b:f1:4e:
         15:54:10:07:c0:7a:fa:e5:55:9d:49:32:35:8a:f5:80:50:f2:
         08:4b:16:df:f4:fa:ff:d4:76:61:b7:f2:28:12:15:73:2b:2e:
         ca:d2:9e:2f:06:d8:33:82:08:a2:df:dc:84:a4:f3:d5:cb:9c:
         9b:06:cb:74:64:ec:63:4e:02:99:2d:0b:26:1a:f4:37:77:74:
         7b:26:f4:bf:b5:d8:ad:a9:e4:5b:d4:9b:a9:e2:30:3e:1b:ad:
         d7:20:25:e8:6c:48:21:3f:54:57:33:81:d2:01:60:47:11:87:
         80:82:af:8e:f0:8b:48:e1:a6:2f:bd:cf:28:2a:f1:0e:8e:6b:
         55:93:b0:96:6a:b1:24:45:dc:48:5d:1d:57:d8:d5:91:33:09:
         d3:8d:2d:ce:1c:1b:34:e4:74:56:4b:49:1a:61:95:2b:4c:c0:
         4b:38:ca:d1:24:e9:2e:5f:e9:a1:b7:37:f9:f7:e4:83:70:b9:
         32:7b:49:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:44 2024 by rpki-client on console-fra.rpki-client.org