Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/QHDJq_NfKNbF0dEJB13G5Pq3CiI.roa
File:                     QHDJq_NfKNbF0dEJB13G5Pq3CiI.roa (raw, json)
Hash identifier:          aFDsf4GM+2npVXFT7byZAYTaeeQRNdOl19odI3bDtMs=
Subject key identifier:   40:70:C9:AB:F3:5F:28:D6:C5:D1:D1:09:07:5D:C6:E4:FA:B7:0A:22
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0265
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/QHDJq_NfKNbF0dEJB13G5Pq3CiI.roa
Signing time:             Tue 16 Jan 2024 05:36:18 +0000
ROA not before:           Tue 16 Jan 2024 05:36:18 +0000
ROA not after:            Tue 14 Jan 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:61:5000::/37 maxlen: 37

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 613 (0x265)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Jan 16 05:36:18 2024 GMT
            Not After : Jan 14 01:30:02 2025 GMT
        Subject: CN=4070C9ABF35F28D6C5D1D109075DC6E4FAB70A22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b3:b4:2f:a4:b0:b4:2c:5d:b9:94:08:8e:d8:
                    9b:3c:bf:90:08:0a:39:02:07:75:b1:8a:1f:40:d0:
                    0a:4e:cb:1a:9a:7d:6b:9a:ea:a5:3b:cb:85:b1:74:
                    5c:22:55:a4:c8:7b:9a:09:2c:d1:c2:75:0d:9d:49:
                    e6:c2:d0:8f:6c:ef:30:2f:d1:05:97:af:a6:26:9b:
                    23:a3:27:a8:b7:ef:2a:6d:ce:35:48:31:3b:3a:22:
                    71:54:95:0e:90:d5:fa:18:33:71:12:e0:16:78:ee:
                    d4:a0:41:bf:16:c2:a1:01:e7:82:80:fc:ed:28:e3:
                    70:c4:85:23:bd:d7:cb:75:a2:f1:84:75:90:4d:5b:
                    d0:d2:1e:e4:7e:a3:c2:dc:1b:92:91:1e:d6:6a:ef:
                    d9:49:2f:05:36:a6:7f:8c:4b:e4:17:18:10:ce:d3:
                    29:ca:ac:33:97:a1:c6:58:ae:df:10:39:ec:2d:01:
                    4e:9a:ab:70:a0:6d:29:12:8d:e3:14:45:cf:d8:3c:
                    39:b7:1c:07:5f:ed:e1:56:b7:6f:fd:65:e1:f0:79:
                    4c:c5:88:2d:6d:51:f9:8d:df:55:e2:65:c8:8b:76:
                    9a:78:8d:84:9c:73:c7:8a:e5:b2:1a:18:b3:e6:cb:
                    29:85:6b:ff:ab:4f:bb:3f:71:65:92:34:92:f6:20:
                    58:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:70:C9:AB:F3:5F:28:D6:C5:D1:D1:09:07:5D:C6:E4:FA:B7:0A:22
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/QHDJq_NfKNbF0dEJB13G5Pq3CiI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:61:5000::/37

    Signature Algorithm: sha256WithRSAEncryption
         93:9f:96:3a:c9:1a:9d:ba:3e:87:f1:61:ab:5b:7f:20:89:6f:
         3e:02:51:60:6f:9e:ba:28:3b:58:12:be:81:a1:7d:0e:2b:bf:
         d3:47:e3:48:27:35:2f:50:f1:2f:83:b6:ff:85:37:c6:93:63:
         72:d0:95:e4:9b:97:f9:ad:80:3a:97:1c:37:11:20:60:a8:39:
         a8:e3:e7:28:a2:0e:92:1f:98:f5:95:e5:5c:88:b1:fe:fd:dd:
         04:4c:7f:b8:72:47:ae:67:b1:6e:52:25:ef:94:10:19:00:3c:
         9f:25:ba:fc:eb:fa:24:f8:c3:f2:b2:49:f1:dc:72:71:09:37:
         dc:1e:8e:1d:98:9c:92:ba:95:01:30:59:87:fd:d9:2e:0a:fe:
         67:7b:5c:bc:f2:ab:c5:e8:6f:dd:53:e2:5d:18:e8:35:3a:50:
         31:dd:af:42:73:c4:74:d8:e8:62:c4:47:11:0a:2c:63:a1:49:
         84:fa:67:98:59:3f:47:0b:ad:51:ff:a0:48:bb:7b:60:88:24:
         cb:71:54:c5:8a:98:7b:07:01:61:eb:77:69:4e:32:cb:7d:a6:
         93:b0:78:b6:69:2f:89:b6:de:3d:49:2b:36:8f:a0:a7:ec:95:
         7b:f2:a7:44:8c:e9:ff:93:37:b6:55:a2:63:f4:ee:09:96:45:
         69:5c:40:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:13 2024 by rpki-client on console-fra.rpki-client.org