Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/QDfovarijbvcUetdA3FnaLVisnU.roa
File:                     QDfovarijbvcUetdA3FnaLVisnU.roa (raw, json)
Hash identifier:          xMgNN9F+ZrJpRt7THQ0VePwk0XaId4s0n7fJfK0cujc=
Subject key identifier:   40:37:E8:BD:AA:E2:8D:BB:DC:51:EB:5D:03:71:67:68:B5:62:B2:75
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0274
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/QDfovarijbvcUetdA3FnaLVisnU.roa
Signing time:             Tue 30 Apr 2024 01:32:13 +0000
ROA not before:           Tue 30 Apr 2024 01:32:13 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:9300::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 22:26:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 628 (0x274)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 01:32:13 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=4037E8BDAAE28DBBDC51EB5D03716768B562B275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:82:1d:ce:ff:71:73:70:b3:d3:31:dd:cb:65:
                    bc:fd:7e:6e:c2:f7:8d:26:ac:16:a5:21:00:75:ef:
                    0c:cd:05:ab:9c:c3:8a:a3:d0:33:91:d3:aa:4e:7f:
                    83:1e:41:0b:4b:04:e8:36:36:9a:91:1d:e3:26:ac:
                    ea:80:6a:25:72:28:25:19:50:0f:d7:4e:89:c9:c3:
                    ab:a5:95:5c:1c:c2:66:47:af:d5:cc:c5:9a:1f:9d:
                    2c:57:15:4a:cd:06:d7:73:d0:7f:4a:ee:e9:3f:b0:
                    b1:0a:36:3e:74:bf:4c:ed:40:cd:69:f4:e8:44:4e:
                    ca:00:a6:20:7f:2b:49:ab:76:7c:24:14:05:32:1a:
                    d7:5d:dc:db:9e:68:b3:62:77:4c:4b:55:ab:89:f6:
                    c2:75:75:a9:68:b8:a5:f7:25:c2:a9:e5:dc:df:61:
                    90:10:1a:54:bc:95:ad:88:d1:83:8d:42:da:ac:5b:
                    cc:b5:86:bb:0e:f2:11:ef:c4:fb:25:8c:80:29:64:
                    98:d6:c4:26:90:d0:4d:93:5f:93:fb:bc:c9:ce:85:
                    7c:5c:e4:22:4f:ca:e6:8c:cc:7d:83:3e:53:c0:fd:
                    c7:0d:7c:ce:70:92:f1:94:3b:be:61:84:5d:75:51:
                    89:fe:f6:98:5c:7d:e0:ed:65:80:a1:11:bb:c7:6a:
                    8b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:37:E8:BD:AA:E2:8D:BB:DC:51:EB:5D:03:71:67:68:B5:62:B2:75
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/QDfovarijbvcUetdA3FnaLVisnU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:9300::/40

    Signature Algorithm: sha256WithRSAEncryption
         35:ce:24:35:03:ab:f6:b9:ed:5e:0d:0f:35:9f:57:69:cf:04:
         8e:24:1a:1c:2a:00:ae:56:66:43:51:e3:11:d4:45:66:c8:d8:
         9a:d6:25:c6:28:5b:d9:ae:9b:df:67:5f:04:57:d3:28:bc:dd:
         02:e4:57:08:c6:e9:3f:0a:ac:f3:43:ae:8e:27:ff:1d:96:07:
         e3:b3:36:be:af:72:17:2a:60:cb:40:58:7f:cd:83:3c:a3:4a:
         57:2b:d1:f9:5c:4f:08:e8:b3:9e:77:1b:90:fd:1f:44:36:57:
         de:f8:90:95:e7:81:ae:39:eb:28:8c:f5:09:23:9f:ac:d5:e6:
         ed:8c:56:d2:58:ab:8c:50:aa:80:ca:53:5f:4d:0a:6c:0a:56:
         cd:1d:d4:38:b3:94:35:d9:d5:36:eb:b2:69:71:8f:1d:2e:bd:
         51:d4:9e:c6:70:f5:30:c1:13:cc:1e:1a:49:55:b5:a1:b7:69:
         e8:e5:43:80:dc:09:6b:7a:22:95:7b:63:4f:8c:d0:c8:5f:ee:
         bf:c9:88:28:01:26:64:34:b4:f2:c7:19:bb:5c:3c:7b:77:8b:
         39:7a:1c:df:e4:df:d0:1d:02:2a:df:af:90:8a:66:24:94:7b:
         9a:85:7f:83:b3:53:ef:bb:32:f1:8e:c3:3f:b9:f2:8e:82:32:
         0d:17:45:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 00:11:43 2024 by rpki-client on console-ams.rpki-client.org