Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/T_GK7BX6sr7vR4FTNsS5dApNtgo.roa
File:                     T_GK7BX6sr7vR4FTNsS5dApNtgo.roa (raw, json)
Hash identifier:          r2fQ0zsiuuOZvTCDJIzJwhPFNoeDRbA9lbTrZjYY/0c=
Subject key identifier:   4F:F1:8A:EC:15:FA:B2:BE:EF:47:81:53:36:C4:B9:74:0A:4D:B6:0A
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       015C
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/T_GK7BX6sr7vR4FTNsS5dApNtgo.roa
Signing time:             Tue 30 May 2023 17:32:30 +0000
ROA not before:           Tue 30 May 2023 17:32:30 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:dc00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 13:40:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 348 (0x15c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:32:30 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=4FF18AEC15FAB2BEEF47815336C4B9740A4DB60A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7d:6e:15:41:6a:ed:1d:2e:17:61:a2:5c:6d:
                    d5:38:4c:12:1a:bd:5a:83:d4:91:4b:7b:93:57:bf:
                    3a:98:0a:4b:67:bc:ea:6c:8d:a6:52:f3:bf:9b:38:
                    ba:10:cc:80:f0:c6:71:be:1b:d3:eb:20:0b:23:03:
                    32:29:9a:1a:a9:9b:5d:42:ab:77:6c:3b:c5:fd:78:
                    45:13:57:00:5d:57:70:7f:89:16:af:5b:0b:36:5d:
                    02:c1:7e:e2:f2:fe:78:97:b9:4d:bf:15:45:c1:28:
                    fa:fa:35:ff:2d:1e:a7:c6:e1:8b:47:35:4e:17:20:
                    90:2d:99:52:1d:96:08:b9:57:ca:cc:a4:7a:52:c2:
                    8e:07:33:a4:42:b3:69:e0:9c:91:e4:8d:87:1e:81:
                    cd:e9:9f:ca:e3:ec:bb:91:0a:48:ef:15:a2:53:1d:
                    52:3b:29:df:ca:bb:02:95:8c:ed:99:07:9f:39:26:
                    fe:4a:79:e0:10:c9:50:fe:80:84:53:14:dc:5c:71:
                    71:2f:a8:7a:13:cd:c4:f4:f6:93:7b:19:63:3b:a4:
                    fe:df:c6:9a:14:d5:bb:f2:98:19:12:1d:38:51:bf:
                    f5:6d:21:b2:49:35:5c:99:33:5f:fa:c3:3c:57:d3:
                    e2:7b:8e:e7:95:5a:98:29:ab:be:b5:c0:04:27:d3:
                    4d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:F1:8A:EC:15:FA:B2:BE:EF:47:81:53:36:C4:B9:74:0A:4D:B6:0A
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/T_GK7BX6sr7vR4FTNsS5dApNtgo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:dc00::/40

    Signature Algorithm: sha256WithRSAEncryption
         c4:75:42:7b:2a:b1:f6:dd:4c:12:a1:7c:c5:fd:99:32:fc:a5:
         58:bd:c4:1e:29:5c:cc:54:ec:2f:35:c0:42:5c:74:25:7c:0d:
         d8:fd:d1:aa:36:a9:a5:7c:f9:c9:98:1a:a8:58:d3:67:6f:50:
         c7:4f:ec:64:f5:a0:a2:78:7a:03:7f:b7:49:98:f9:42:02:72:
         ea:28:35:f2:b2:2a:1e:a6:6a:0b:13:2c:5b:1e:23:f8:6c:4b:
         11:ff:89:22:1b:d5:1c:40:6f:54:fb:4e:6b:a4:dc:98:9f:77:
         ad:3b:02:41:0c:5b:70:e5:56:7f:60:3b:4b:04:b8:21:56:c9:
         c3:da:34:16:9e:cc:b0:24:cf:8b:28:d5:c9:08:cc:af:6d:e6:
         a2:c4:3c:cd:81:06:5b:5e:04:6a:aa:dd:55:39:ec:6f:06:ed:
         ec:b0:a5:bf:7d:08:e9:19:0d:68:c7:c6:60:73:ad:bd:bf:04:
         f2:4b:8e:3c:ae:3f:d7:34:d5:44:22:ff:f7:6d:61:d3:9b:f3:
         bd:a3:36:e6:4f:47:63:86:c5:b2:b2:a5:b8:8b:54:b6:2d:18:
         c7:bf:6c:97:54:4a:6f:6d:c4:7f:c4:b8:86:f0:13:e3:df:96:
         43:34:07:40:c3:cd:3f:d0:e6:f6:3a:a7:31:6f:59:6b:75:58:
         52:ff:b3:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:15:52 2024 by rpki-client on console-ams.rpki-client.org