Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/SSOW9LKRnLFr5tG4DmmlNO-TCTQ.roa
File:                     SSOW9LKRnLFr5tG4DmmlNO-TCTQ.roa (raw, json)
Hash identifier:          rVCn5IzXy2cNCE/3/BMdJa8Wz72pZG4FEqL3HSnoQjk=
Subject key identifier:   49:23:96:F4:B2:91:9C:B1:6B:E6:D1:B8:0E:69:A5:34:EF:93:09:34
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0350
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/SSOW9LKRnLFr5tG4DmmlNO-TCTQ.roa
Signing time:             Tue 30 Apr 2024 01:56:49 +0000
ROA not before:           Tue 30 Apr 2024 01:56:49 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:61:1800::/38 maxlen: 38

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 848 (0x350)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 01:56:49 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=492396F4B2919CB16BE6D1B80E69A534EF930934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:c0:ec:bb:65:de:57:b2:aa:37:31:7f:f7:89:
                    28:45:0a:cb:71:df:8b:43:4c:27:10:04:fe:91:64:
                    f6:25:e0:50:76:91:f1:fd:bf:6b:ab:2a:b2:a0:0d:
                    3b:bc:8d:ba:7c:0e:0c:92:ea:8b:1e:dc:e2:e0:48:
                    f8:e2:be:3d:c1:ad:de:43:3e:c5:14:97:bf:89:61:
                    c2:cb:dc:1f:7a:b8:f7:c9:08:d6:eb:1b:72:5d:f3:
                    1c:d4:0e:e1:a9:63:5c:6d:21:6f:c8:15:14:24:22:
                    be:05:1b:ff:ff:33:96:01:fc:80:0f:5d:1b:ad:f0:
                    e6:97:bf:82:27:06:e6:a0:69:28:10:19:e5:ec:3c:
                    2d:b6:a0:a3:4c:72:78:d5:2d:c6:12:92:77:4d:46:
                    4a:0b:03:75:aa:0a:dd:e8:05:f8:05:6c:8e:d5:dc:
                    7e:67:0e:0d:e5:0b:b2:ce:d6:dc:79:b6:b2:66:e7:
                    00:69:99:f6:9d:a3:fb:b1:5a:cf:39:45:c6:12:52:
                    2b:f6:3c:6f:52:3e:d3:96:c8:84:17:c6:02:f1:31:
                    8d:e1:5a:14:a8:2b:25:94:f5:2d:f9:b0:13:69:57:
                    4b:6d:6f:cc:01:d0:86:2e:43:e9:e1:21:0f:62:6b:
                    34:97:d3:8b:53:58:ea:c9:bd:5a:a3:da:0d:75:5f:
                    03:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:23:96:F4:B2:91:9C:B1:6B:E6:D1:B8:0E:69:A5:34:EF:93:09:34
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/SSOW9LKRnLFr5tG4DmmlNO-TCTQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:61:1800::/38

    Signature Algorithm: sha256WithRSAEncryption
         95:8c:f3:02:50:4a:99:1d:2b:10:58:07:5e:86:3c:8f:2b:2d:
         2b:60:13:5b:c5:af:44:c3:1a:6a:77:95:42:5f:14:fb:ad:0e:
         f5:0c:b7:32:d6:0a:e6:b4:cf:06:40:01:a0:cf:3a:e5:e2:8a:
         09:94:a2:fb:39:fb:a3:ed:a5:f9:3a:30:05:f1:71:e0:bf:8e:
         2d:2d:2e:76:ff:18:d3:c3:34:3b:2a:07:13:84:dd:b7:53:33:
         c1:c5:ab:bf:4d:d0:a2:06:41:9f:f7:1c:02:db:d8:1c:31:8f:
         26:1c:66:97:69:a7:e1:23:ef:c2:0b:81:e4:01:44:de:76:28:
         50:6f:68:57:2d:19:17:13:ea:cf:65:32:e5:ea:b7:4d:24:6a:
         f9:66:f2:69:b4:c2:3c:2c:92:ae:64:1d:72:ba:a9:fc:2d:7f:
         23:75:86:78:b2:f7:70:8d:09:95:0c:55:d3:ba:56:7a:d7:16:
         5b:d5:f8:89:68:d0:0d:1d:ca:04:30:5a:c8:3e:a1:69:41:46:
         6f:97:6f:9d:5d:e5:e2:18:79:1b:19:d7:06:a8:d2:3e:2b:65:
         b8:ed:6f:6a:74:f1:75:7e:a1:5e:9d:cd:9f:bd:e9:5e:d3:f5:
         14:27:98:02:f3:ee:25:e6:d3:63:21:a4:72:e6:ab:5b:0f:79:
         61:c4:f6:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:07 2024 by rpki-client on console-fra.rpki-client.org