Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/WOKz34jhklhup_PnzcHKpShIKNo.roa
File:                     WOKz34jhklhup_PnzcHKpShIKNo.roa (raw, json)
Hash identifier:          /KakSuboU020pSeWtQa+AqaHEfq7DGHdBRzjhHJKAkk=
Subject key identifier:   58:E2:B3:DF:88:E1:92:58:6E:A7:F3:E7:CD:C1:CA:A5:28:48:28:DA
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0197
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/WOKz34jhklhup_PnzcHKpShIKNo.roa
Signing time:             Tue 30 May 2023 17:34:31 +0000
ROA not before:           Tue 30 May 2023 17:34:31 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:5e00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 13:40:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 407 (0x197)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:34:31 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=58E2B3DF88E192586EA7F3E7CDC1CAA5284828DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:32:0b:12:43:d2:09:ea:09:4d:c8:b1:0b:00:
                    da:39:62:2f:29:cc:06:dd:3c:76:4b:62:76:08:ec:
                    25:d7:09:63:63:c5:d6:6b:ff:2a:a8:6f:66:a9:c7:
                    03:8d:30:fa:e2:7a:d1:93:cc:9c:6a:a5:b8:24:aa:
                    79:53:33:ec:be:33:99:01:fb:cd:68:6e:1f:0b:d8:
                    09:a7:f4:04:77:30:40:e5:22:71:a4:9f:94:c0:52:
                    c3:d6:dc:01:5a:c5:c6:a1:cb:f1:63:b0:42:cd:e8:
                    02:5c:54:58:38:53:e4:0d:39:63:34:7f:18:11:67:
                    6f:d9:af:68:a1:35:3c:61:13:cf:17:4c:c0:83:17:
                    07:3d:b2:96:a2:a6:30:da:59:69:ba:97:b9:ba:4d:
                    6e:bc:38:93:7d:f2:a7:54:92:14:69:00:b6:7c:c3:
                    e0:bd:5a:32:83:65:7f:ef:1f:15:e7:24:40:20:7c:
                    28:84:05:3b:dd:38:58:b3:86:bf:31:94:89:52:37:
                    eb:db:c4:93:73:ed:0d:94:ab:e8:f9:c1:f9:62:32:
                    e8:1b:be:b4:8f:24:34:93:6f:97:93:67:88:b9:d5:
                    ba:55:1e:4f:a2:e1:6a:1b:25:f6:99:c1:cc:80:1f:
                    99:d4:5a:35:44:65:b5:97:9c:a8:bb:94:d4:e4:5c:
                    15:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:E2:B3:DF:88:E1:92:58:6E:A7:F3:E7:CD:C1:CA:A5:28:48:28:DA
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/WOKz34jhklhup_PnzcHKpShIKNo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:5e00::/40

    Signature Algorithm: sha256WithRSAEncryption
         77:bf:ef:7e:0b:9e:85:9d:22:00:78:48:e6:10:96:b0:e1:5e:
         a1:3f:b8:21:e2:64:cf:92:76:7a:06:ef:b5:3f:46:8f:0d:d8:
         1d:61:6d:31:ec:ce:fc:c2:cb:4a:70:c7:d4:74:39:78:07:e6:
         2e:5c:68:1d:5a:6c:e2:1a:e6:8a:14:0a:21:a0:bd:b9:b9:fc:
         dc:2f:e6:b2:d3:ba:3e:ce:42:d8:9a:f9:32:7f:a3:0a:4c:0d:
         0d:09:2f:b0:f4:3a:b4:21:c7:fd:92:df:ef:d0:13:6a:3d:e8:
         e6:42:b3:a3:5d:90:69:8a:fe:7e:15:51:4e:50:b7:bc:41:54:
         4d:bb:38:44:5c:6a:3e:93:6c:72:24:66:19:62:1f:dd:22:51:
         38:8c:08:50:1b:5b:8e:34:8d:19:bb:c6:38:1b:28:2a:e3:e7:
         58:a9:ca:82:b7:56:34:04:bd:35:13:6a:66:af:72:84:33:a4:
         c2:35:b4:f9:a0:27:9e:6a:ad:28:eb:21:86:25:23:b2:a2:2b:
         79:3f:86:ee:29:5b:c0:21:ce:ff:7e:5a:e7:b7:46:d3:9a:93:
         fd:4a:f3:7c:20:b0:64:c1:ac:34:49:42:66:c2:5c:1d:d4:ef:
         5a:3e:21:4b:b3:36:36:35:b2:3a:0d:a5:7f:3a:65:82:82:65:
         4e:f1:31:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:15:52 2024 by rpki-client on console-ams.rpki-client.org