Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Mk_mrWyoeWO5jg8C7p5BlTCJD0k.roa
File:                     Mk_mrWyoeWO5jg8C7p5BlTCJD0k.roa (raw, json)
Hash identifier:          J9Ex8y0yJbZE3eHyJieSp8KYG2p3+3Pp8JHmDlmCZ1M=
Subject key identifier:   32:4F:E6:AD:6C:A8:79:63:B9:8E:0F:02:EE:9E:41:95:30:89:0F:49
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       027C
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Mk_mrWyoeWO5jg8C7p5BlTCJD0k.roa
Signing time:             Tue 30 Apr 2024 01:32:16 +0000
ROA not before:           Tue 30 Apr 2024 01:32:16 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:b600::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 636 (0x27c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 01:32:16 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=324FE6AD6CA87963B98E0F02EE9E419530890F49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:25:55:b2:ee:9f:c9:31:8b:10:1d:7b:fd:69:
                    40:0c:02:d3:59:5b:be:25:77:88:6b:f0:9b:be:43:
                    3c:ec:56:c2:63:ae:26:20:da:8c:d4:3f:a8:92:f5:
                    53:7e:bd:91:a4:7c:c5:00:ab:b1:5f:aa:c4:fc:40:
                    34:4a:72:ab:0c:0a:f6:d5:5f:71:ec:f9:12:c7:2a:
                    0d:b5:a7:b4:ca:35:86:93:e3:a5:1c:3c:49:26:cf:
                    04:27:fb:1c:18:55:21:6b:5a:9a:4f:7e:5d:e5:4b:
                    2e:03:15:c4:7c:5f:0b:a4:28:f2:2d:92:cf:09:c7:
                    2f:32:76:70:b1:8d:d0:bc:5f:3e:31:67:8d:54:b0:
                    74:31:ba:df:9d:09:f4:37:86:f5:06:c6:c1:71:82:
                    fc:82:ff:af:13:ed:70:ab:2d:c9:04:27:ce:36:3c:
                    d4:d2:d7:1b:29:1f:08:ed:d2:c8:71:25:06:a3:67:
                    b6:60:fa:08:ec:20:93:f1:82:48:ca:2c:85:25:4e:
                    fd:11:f8:2f:b5:c1:f8:7b:bb:ca:f1:f1:9a:02:07:
                    14:a6:df:06:5f:93:e5:ab:3e:d2:f4:87:ab:c3:6f:
                    2a:0b:81:8e:57:97:a8:a2:07:b7:9f:86:de:19:95:
                    5e:a8:1a:44:ff:7a:0e:53:23:73:ee:d6:16:33:e0:
                    42:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:4F:E6:AD:6C:A8:79:63:B9:8E:0F:02:EE:9E:41:95:30:89:0F:49
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Mk_mrWyoeWO5jg8C7p5BlTCJD0k.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:b600::/40

    Signature Algorithm: sha256WithRSAEncryption
         08:2f:88:43:d1:a2:b0:d1:86:86:eb:70:5c:d6:14:29:1f:8c:
         00:9d:4a:4d:b0:4e:4d:d0:c4:2c:1a:c2:b0:db:c7:c5:60:51:
         21:10:2e:bd:43:ef:05:1d:37:b6:1b:56:c9:b6:a0:77:ab:a2:
         2f:0f:36:79:1d:8a:b1:ff:6a:0b:36:78:77:9e:2e:41:85:49:
         3f:dc:3a:5b:c5:b5:2a:cb:f3:af:ce:e6:1a:6a:ae:88:67:bd:
         c6:e6:c9:b4:41:66:87:3b:42:5d:8d:83:83:c3:46:51:21:28:
         77:4f:56:b4:52:61:ef:2c:6c:ed:9e:be:c8:f3:f4:43:1d:7a:
         ad:f0:55:fa:7c:b8:8a:45:75:ea:a4:76:b3:b1:e3:6b:73:c7:
         3e:2a:cf:cd:fb:c1:8a:7f:1a:ca:64:6e:f3:57:08:c3:72:7b:
         0f:82:18:ca:43:42:e8:4d:e3:df:19:dd:19:53:a8:6c:7d:46:
         56:59:0e:ae:78:ca:40:d9:41:fc:a8:65:b8:c2:41:da:f6:04:
         b1:12:fd:f9:e2:a6:b4:eb:12:35:b3:e8:a4:4b:72:f0:84:60:
         4e:0a:0e:27:72:20:91:8e:a2:1d:30:31:3b:d6:b5:da:74:e4:
         f5:ba:7d:77:0e:64:a2:25:24:e0:a4:2b:23:61:d2:63:0c:9f:
         32:62:b1:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:07 2024 by rpki-client on console-fra.rpki-client.org