Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Vwgc0g0SBoZeytVYqjvlR9OZfeI.roa
File:                     Vwgc0g0SBoZeytVYqjvlR9OZfeI.roa (raw, json)
Hash identifier:          YtoWF8zzPTYI+2svdx6qyyAZU2Skn1oEVQxX9em0hA0=
Subject key identifier:   57:08:1C:D2:0D:12:06:86:5E:CA:D5:58:AA:3B:E5:47:D3:99:7D:E2
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0380
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Vwgc0g0SBoZeytVYqjvlR9OZfeI.roa
Signing time:             Tue 30 Apr 2024 02:00:05 +0000
ROA not before:           Tue 30 Apr 2024 02:00:05 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:ad00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 896 (0x380)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 02:00:05 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=57081CD20D1206865ECAD558AA3BE547D3997DE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a2:65:b0:64:20:41:f4:74:7b:7a:50:21:7a:
                    54:b3:e1:38:0d:ab:9c:b5:86:b0:94:ef:47:9d:82:
                    1c:5f:34:e6:d3:69:5b:3b:d6:51:5e:9a:1c:da:0e:
                    9f:e1:7a:94:71:99:4b:6b:04:11:e3:aa:72:46:28:
                    3a:00:e3:e2:77:c4:a8:7d:b6:95:39:06:0a:77:d3:
                    e1:7b:90:8a:cf:6c:7b:4c:9f:1a:38:5e:8a:c4:9a:
                    32:05:98:33:d4:51:30:c5:d0:15:7e:7c:80:9d:d3:
                    25:90:26:02:7d:29:05:e6:7c:79:76:a6:de:16:27:
                    9f:1a:9a:2b:b7:d5:a5:2d:44:2a:e5:e0:36:33:71:
                    51:25:79:56:5f:27:c2:48:eb:1e:f4:68:0a:80:c4:
                    70:72:33:4d:de:9d:57:e5:cb:ed:6b:35:e9:03:9b:
                    76:a3:ab:08:c3:37:65:cc:a3:3d:22:b0:95:61:d0:
                    d4:40:9b:03:12:09:e2:e9:e7:26:85:cf:bc:f6:16:
                    1d:92:5b:3a:49:ff:ca:b6:74:3f:ba:9b:31:88:42:
                    00:e7:8a:d2:f1:59:67:14:32:88:24:40:e8:1e:b7:
                    23:03:96:c1:c6:ce:8c:0d:f3:fe:6e:a8:a6:19:53:
                    8a:88:cd:2b:21:3c:d0:b2:c8:2f:0a:86:08:49:21:
                    41:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:08:1C:D2:0D:12:06:86:5E:CA:D5:58:AA:3B:E5:47:D3:99:7D:E2
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Vwgc0g0SBoZeytVYqjvlR9OZfeI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:ad00::/40

    Signature Algorithm: sha256WithRSAEncryption
         a6:f2:d9:12:76:6b:ab:d7:76:6d:9f:d8:04:71:f6:34:ce:e1:
         b8:dc:0b:30:be:95:d4:de:ae:46:76:1c:4b:31:4f:67:0f:ae:
         9b:00:0b:91:64:79:50:94:a1:13:aa:ab:2f:47:a4:ec:9a:e8:
         d3:2b:4f:83:1d:fb:0b:0f:32:fe:ca:84:44:bc:4a:97:fd:8f:
         1d:d0:18:8f:7c:6e:59:cf:6d:b8:04:c0:08:b9:ce:ce:58:1c:
         68:99:dd:ea:a5:47:7a:29:e6:16:d3:83:61:70:2b:1e:3d:f3:
         93:fa:f9:09:8f:4e:59:d0:22:97:c5:e5:58:11:ef:d6:fd:82:
         ec:f3:dd:24:a7:00:42:a0:6e:0e:8f:ad:f7:22:1c:ed:16:a5:
         f7:93:90:e8:2b:76:c6:6f:f1:f4:dd:64:7e:be:43:f4:71:77:
         11:14:fa:61:72:9e:1b:ff:01:11:21:db:13:12:4f:67:8e:3c:
         c3:b6:db:16:64:e7:8a:52:de:c7:ed:ae:5a:b4:31:31:f5:d0:
         b8:e6:1e:14:82:b3:3a:09:51:3d:44:6a:83:21:b3:51:88:24:
         34:05:7c:76:95:47:70:18:ed:5b:8c:dd:16:5e:7b:1f:94:aa:
         7f:68:59:9f:a6:a8:92:6b:03:9d:d7:8a:0c:2b:03:05:89:0f:
         39:2a:f2:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:20 2024 by rpki-client on console-ams.rpki-client.org