Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/W_qKlNDa76wlh4iUhwwJ19dT_6w.roa
File:                     W_qKlNDa76wlh4iUhwwJ19dT_6w.roa (raw, json)
Hash identifier:          AanjqaR3tJBmaLwJ92keaZPIet+50rByH/t+YUXrZHs=
Subject key identifier:   5B:FA:8A:94:D0:DA:EF:AC:25:87:88:94:87:0C:09:D7:D7:53:FF:AC
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       02D5
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/W_qKlNDa76wlh4iUhwwJ19dT_6w.roa
Signing time:             Tue 30 Apr 2024 01:44:54 +0000
ROA not before:           Tue 30 Apr 2024 01:44:54 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:b500::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 725 (0x2d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 01:44:54 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=5BFA8A94D0DAEFAC25878894870C09D7D753FFAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1b:c1:59:77:3f:3b:2f:96:41:55:0d:f6:3e:
                    29:95:71:89:8a:f1:c0:fb:b2:fe:f0:6a:12:31:cb:
                    82:e8:5d:06:39:d4:fa:74:98:9c:92:af:44:97:1f:
                    ad:63:f2:fd:18:3c:19:87:c8:93:7e:3e:e9:07:f7:
                    4f:9e:60:80:53:75:e8:0f:d7:9e:f7:62:52:3c:aa:
                    73:da:2a:2f:7a:08:01:02:e6:20:1a:d8:03:45:b6:
                    fd:cd:08:32:27:77:3d:0a:63:b7:bc:07:e0:1c:06:
                    5c:05:ea:ee:04:11:85:4b:1b:bc:de:05:d4:54:a9:
                    ed:ce:01:fa:bb:2b:be:39:10:1d:0c:19:c7:53:b0:
                    c4:35:cc:e5:71:03:df:91:d6:e3:b9:ba:9e:13:73:
                    4d:8c:67:20:ac:59:e5:3b:7e:3b:e4:57:f3:e1:a2:
                    c4:28:70:ed:2f:0b:37:f6:df:77:4c:1b:cb:28:f5:
                    75:b6:32:d7:df:63:45:6b:f1:d9:5d:a3:06:b9:62:
                    ef:40:ef:38:36:61:2e:ec:49:95:ef:61:7c:c4:6e:
                    d1:16:bd:d7:97:e1:c9:26:39:0b:55:ed:9c:db:39:
                    5f:61:58:06:39:42:bf:10:10:75:3b:97:46:28:f6:
                    8c:36:99:f8:4f:f2:22:68:43:97:60:ed:58:69:94:
                    69:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:FA:8A:94:D0:DA:EF:AC:25:87:88:94:87:0C:09:D7:D7:53:FF:AC
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/W_qKlNDa76wlh4iUhwwJ19dT_6w.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:b500::/40

    Signature Algorithm: sha256WithRSAEncryption
         21:44:c2:99:71:0f:db:44:ef:4b:40:83:8f:f6:60:53:e4:92:
         2c:c0:d4:81:95:6f:b8:cf:1d:60:fa:77:8a:0c:78:00:20:a4:
         78:ed:cd:ac:85:0d:15:9a:bf:36:5f:49:dd:5f:17:13:43:0e:
         43:fd:a3:3f:18:8d:67:e5:ea:49:9d:13:2d:8b:2c:6d:8d:53:
         3a:81:b3:cb:38:a4:33:3a:99:47:aa:a0:7f:1c:46:7e:17:a1:
         30:d1:ac:ca:27:0f:f2:9a:5d:50:ae:85:60:c6:65:9d:6e:37:
         95:40:25:0a:45:1d:3f:a0:15:71:2f:93:ce:11:0c:37:c7:ba:
         f4:32:6d:42:56:53:1d:c5:48:cd:e5:fe:e6:03:1e:ad:44:16:
         07:5a:89:22:af:37:cb:f8:c1:56:a6:19:4c:62:90:2e:c2:1b:
         41:a9:d2:e3:0f:ec:c5:77:d9:40:ec:7a:20:ed:4e:0e:3e:e1:
         96:c1:8c:b3:1e:71:ee:55:e3:43:5d:d6:06:67:59:58:80:e5:
         61:37:a6:7c:db:bf:46:05:e3:92:8e:94:dc:b0:ea:61:e3:fb:
         2f:75:52:e1:9f:92:f7:da:33:87:5b:d6:26:64:b0:e9:c3:85:
         86:be:68:e7:d9:4d:0b:40:8e:d4:d6:47:66:80:20:5c:a7:45:
         0b:00:79:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:34 2024 by rpki-client on console-ams.rpki-client.org