Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Nqc1N56bGEMgQOJvzcPH8e0Hv5w.roa
File:                     Nqc1N56bGEMgQOJvzcPH8e0Hv5w.roa (raw, json)
Hash identifier:          4S2sgcFoGOleCZe8qhXmhvoqFNMQUntfYjWeTcZhzFw=
Subject key identifier:   36:A7:35:37:9E:9B:18:43:20:40:E2:6F:CD:C3:C7:F1:ED:07:BF:9C
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       02F8
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Nqc1N56bGEMgQOJvzcPH8e0Hv5w.roa
Signing time:             Tue 30 Apr 2024 01:48:07 +0000
ROA not before:           Tue 30 Apr 2024 01:48:07 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:a800::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 760 (0x2f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 01:48:07 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=36A735379E9B18432040E26FCDC3C7F1ED07BF9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:80:30:86:ce:e5:fc:c3:86:fb:4b:1f:d2:b8:
                    66:56:17:b0:2f:81:ef:9e:65:80:18:76:77:eb:8e:
                    30:ad:fa:01:a3:ce:b8:92:cc:4f:cf:9a:a2:10:d5:
                    4b:b6:9e:b5:80:58:bf:b8:f8:f2:b2:b8:8e:c5:bd:
                    65:59:b6:d3:68:82:5d:24:a7:80:50:b5:04:7d:9a:
                    ce:ab:8d:ff:31:09:c4:41:bc:b0:b7:cd:dc:14:8b:
                    0d:e5:f7:e7:88:09:e8:7b:c3:b8:d3:44:40:0e:5e:
                    24:2a:e0:2f:1e:7b:0f:01:d6:1d:ab:8d:ba:fc:1a:
                    29:eb:ed:f4:3a:8c:5c:d4:59:d6:e5:fb:4e:04:d6:
                    77:bc:a8:a8:27:b1:2d:e5:1e:d5:a0:fe:a9:45:25:
                    c4:f5:aa:fc:64:53:f4:26:a0:fe:10:72:a6:a6:88:
                    6b:7d:aa:d7:ef:94:83:ff:8d:6b:63:a7:da:70:30:
                    e7:4d:3c:f7:6c:38:59:4e:e4:dd:91:33:7e:20:ce:
                    09:7e:4b:f1:ce:55:ec:48:00:ae:72:b0:a6:77:27:
                    71:89:09:33:e2:9f:29:c9:80:ac:0e:42:91:cc:d4:
                    bb:96:96:80:be:5a:c8:c6:2b:df:ea:3e:1b:ac:24:
                    75:47:cd:e1:61:a2:5f:7d:8e:b5:4c:82:83:3d:7d:
                    52:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:A7:35:37:9E:9B:18:43:20:40:E2:6F:CD:C3:C7:F1:ED:07:BF:9C
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Nqc1N56bGEMgQOJvzcPH8e0Hv5w.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:a800::/40

    Signature Algorithm: sha256WithRSAEncryption
         87:01:77:c5:dd:39:a5:be:26:fb:9f:24:1c:b4:bb:4d:25:20:
         c9:16:b9:3d:cd:35:65:cc:e7:08:c2:6e:a3:4a:0f:45:89:fd:
         98:f3:60:52:95:27:9b:aa:d5:f8:5f:25:5e:1b:71:10:2b:d2:
         02:46:21:0a:b8:6c:35:93:ae:a1:4b:88:25:fa:a1:c4:50:65:
         dd:ed:e7:4e:64:12:ba:a2:a4:4a:b2:40:6e:00:cb:a5:db:ee:
         c5:e3:c3:72:23:5c:cd:9b:17:44:bc:4b:9f:02:e9:4c:75:8c:
         a4:61:2f:5b:01:78:fb:12:c7:d2:eb:8b:ee:72:74:cc:98:32:
         f8:bd:15:80:6b:7e:4a:ad:b8:cb:ac:ad:0a:e2:4f:bd:f9:a4:
         3e:f6:02:6b:97:1d:ae:ab:5f:4f:cb:43:0c:c8:35:bc:f7:20:
         e8:37:d9:2b:86:fa:79:7d:e0:e6:01:e0:5a:9e:31:4d:a6:cc:
         13:27:38:6c:b9:28:55:f0:93:8d:25:36:ec:4a:3e:1b:6b:34:
         47:af:02:da:89:2f:13:99:04:12:d3:72:2f:5d:ad:85:a1:e3:
         87:08:bc:41:00:fb:64:7e:c2:ef:ed:45:f6:15:72:5e:95:49:
         11:93:7c:a8:2c:50:90:9b:e4:2b:40:07:de:55:cc:fb:fc:f3:
         38:5a:35:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:20 2024 by rpki-client on console-ams.rpki-client.org