Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/UUPSl_Lg1IsxR6TKmdis5N0aMC0.roa
File:                     UUPSl_Lg1IsxR6TKmdis5N0aMC0.roa (raw, json)
Hash identifier:          PpVYame4YGLgpmFiKJ14dWU/Dz26tQ2tqjqZ5ONMGvQ=
Subject key identifier:   51:43:D2:97:F2:E0:D4:8B:31:47:A4:CA:99:D8:AC:E4:DD:1A:30:2D
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       02E3
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/UUPSl_Lg1IsxR6TKmdis5N0aMC0.roa
Signing time:             Tue 30 Apr 2024 01:45:00 +0000
ROA not before:           Tue 30 Apr 2024 01:45:00 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:6f00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 739 (0x2e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 01:45:00 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=5143D297F2E0D48B3147A4CA99D8ACE4DD1A302D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:69:ba:03:c8:50:51:71:6b:22:09:ec:c3:a9:
                    df:8a:53:75:08:33:db:9a:7c:06:07:fe:af:79:fc:
                    06:39:34:90:f8:10:00:db:32:8a:04:30:04:f3:5a:
                    da:b1:34:4e:1f:5a:56:cb:d1:65:52:0b:a6:0e:7a:
                    be:c5:d7:e3:96:7d:b1:7c:b7:52:c9:81:0b:1d:9c:
                    17:a0:4a:e8:3d:d1:9f:3e:b8:3d:50:7f:ef:fb:d1:
                    73:28:cb:2a:e8:b6:cd:6c:f9:12:1c:12:03:52:d2:
                    71:b2:86:2f:7d:24:2b:b0:ca:79:8d:49:35:ee:cd:
                    4d:b5:94:dd:6e:58:3e:df:0a:d0:26:7d:52:6d:07:
                    94:a5:cc:4d:5c:8e:d2:2f:1c:e4:a2:49:af:2f:be:
                    38:13:4a:9d:29:64:fa:06:b7:56:8b:f8:58:09:2a:
                    dd:15:ed:f5:dd:ff:0d:a3:6d:26:78:7f:3a:1f:f4:
                    7d:b5:24:e5:05:58:ee:a4:c3:58:58:59:2b:05:39:
                    b5:0d:39:b8:39:6e:a6:a1:49:ef:cf:3e:20:c1:7b:
                    f3:6a:ee:06:0e:44:c7:81:32:a1:a6:d2:cc:35:c4:
                    9c:6e:b6:c9:1c:3d:09:07:b3:49:1a:c2:01:2c:0a:
                    42:ab:85:63:c8:c4:35:27:2c:d9:b7:57:1f:99:ec:
                    fb:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:43:D2:97:F2:E0:D4:8B:31:47:A4:CA:99:D8:AC:E4:DD:1A:30:2D
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/UUPSl_Lg1IsxR6TKmdis5N0aMC0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:6f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         51:45:c5:0a:c9:7f:88:92:a1:81:9e:08:51:c7:0f:52:4e:81:
         0e:47:5a:db:ce:1d:15:f8:16:ba:9b:12:0a:d2:1e:4a:41:65:
         68:8f:49:da:36:b8:2b:7a:34:54:61:ec:db:26:78:33:8f:a6:
         04:d8:2e:ac:78:57:62:d0:d7:d6:db:1d:d1:84:9c:b9:e4:ff:
         9e:94:8b:e4:a5:35:31:ec:79:24:ba:06:5f:65:1d:bf:7a:81:
         76:f0:cb:1f:a4:2c:20:9f:f0:6a:8e:9b:ea:10:be:94:cc:62:
         0c:65:92:85:6a:74:58:1a:bc:97:1a:f7:61:92:da:4d:99:18:
         34:a7:74:59:bd:bc:98:4c:3b:08:4b:c1:54:8d:3f:84:16:9b:
         f4:95:88:36:ec:33:3b:92:29:a0:6e:1d:9e:7d:f6:11:47:b2:
         ec:0d:6a:4c:14:5f:32:5e:64:f1:55:23:38:75:0d:ef:df:04:
         4d:ce:06:1b:3c:1c:40:87:1c:94:12:36:17:9b:9c:9b:cc:a6:
         4a:11:b0:74:65:25:8a:d9:00:b9:b9:28:ef:94:3e:d0:84:62:
         1e:06:a9:94:75:da:4f:08:46:39:7d:ee:ec:ac:04:f8:16:8c:
         b0:7a:b1:29:24:11:f4:b4:c4:31:e7:7e:d4:8f:5e:dc:2a:f7:
         84:36:de:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:31 2024 by rpki-client on console-ams.rpki-client.org