Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/WfyXbLNZhA4YZdrUIro0E1Sbocc.roa
File:                     WfyXbLNZhA4YZdrUIro0E1Sbocc.roa (raw, json)
Hash identifier:          XfoCRDm6GtCXPCaiqa1vbB0HOvRjQA/emoDWPH1zUJg=
Subject key identifier:   59:FC:97:6C:B3:59:84:0E:18:65:DA:D4:22:BA:34:13:54:9B:A1:C7
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       02C9
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/WfyXbLNZhA4YZdrUIro0E1Sbocc.roa
Signing time:             Tue 30 Apr 2024 01:39:38 +0000
ROA not before:           Tue 30 Apr 2024 01:39:38 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:c00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 22:26:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 713 (0x2c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 01:39:38 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=59FC976CB359840E1865DAD422BA3413549BA1C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:78:0f:ad:40:cb:25:c2:d4:9e:fd:e0:04:98:
                    b8:7e:d9:ac:58:b4:23:76:fb:b2:de:2b:92:9e:ab:
                    d2:81:45:ff:0f:d5:9e:27:a2:ac:a6:76:95:4b:9b:
                    b2:3b:f2:f0:9a:fd:96:22:c0:da:2e:58:6e:88:af:
                    80:95:91:fd:12:db:4d:59:a4:52:24:8e:f7:df:52:
                    95:8a:f4:4c:ca:20:9e:fb:f9:d3:73:85:2e:0f:66:
                    18:65:3c:09:37:af:4d:8e:50:db:c9:c5:b2:df:3d:
                    82:66:b4:82:6d:75:ed:7b:e0:38:08:d0:84:23:7f:
                    ae:1d:fb:b6:38:ad:1b:ce:32:47:1f:bd:54:66:66:
                    6d:88:1f:e5:4f:8f:c2:60:75:99:cd:dc:21:e7:59:
                    99:97:a1:70:a8:e9:bd:7f:f1:9d:0b:36:6a:5c:44:
                    bb:ac:b8:7b:24:b4:27:b9:92:2d:e3:41:98:42:05:
                    82:7b:8f:f9:c2:ab:0d:c4:ff:0e:25:ce:4a:e8:44:
                    61:be:37:3b:58:33:0c:a9:f3:48:3a:fe:43:f3:49:
                    e8:a2:e5:1b:74:64:dc:e2:c3:13:5e:a0:44:fb:01:
                    cd:a2:fc:38:39:1c:5a:45:0d:f7:26:c4:25:d3:25:
                    ca:63:2f:fe:98:a1:e0:3d:ca:f5:d8:71:3f:68:b7:
                    8a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:FC:97:6C:B3:59:84:0E:18:65:DA:D4:22:BA:34:13:54:9B:A1:C7
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/WfyXbLNZhA4YZdrUIro0E1Sbocc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         3a:c6:18:35:5a:e8:8b:ce:1c:2d:07:36:6d:e1:8c:2d:4b:42:
         97:b2:d3:31:10:b0:6d:1c:8f:bb:b2:2f:24:38:cf:54:ec:6e:
         70:79:7f:ab:10:4e:7b:c4:da:b8:81:2c:69:ef:42:66:4c:85:
         36:c5:48:29:32:0a:a5:e3:44:f9:3f:67:17:5b:64:0e:f3:d8:
         55:51:45:d7:ad:c7:da:46:8d:63:ea:2e:51:3d:98:12:53:d8:
         8e:54:c7:69:89:50:bd:e8:33:4d:bc:ca:c9:53:aa:7e:d0:d1:
         6f:3c:c8:fb:9f:ed:6d:4f:35:bd:cf:3a:77:a4:d4:11:b8:b2:
         df:4f:c6:d7:1a:35:0f:b8:a5:23:5e:c4:38:af:89:62:65:2c:
         ad:1b:6e:0f:89:fa:f7:85:3b:0a:86:87:0e:d3:85:af:17:10:
         10:e5:eb:84:7e:fb:0c:42:72:3a:7a:6e:d9:8e:eb:42:5a:d4:
         dd:02:a8:8d:35:dd:34:50:fe:55:62:b1:1e:24:01:fe:d9:52:
         d5:62:a4:58:67:2b:8d:a4:8c:3b:ce:ef:7d:23:2a:62:14:94:
         b8:59:b9:9f:45:6d:30:f9:1c:3d:e1:97:38:b4:4b:46:96:cf:
         4d:fb:28:07:94:f7:7b:00:fa:71:bc:2d:63:f3:fd:70:5a:60:
         63:63:3a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 00:11:43 2024 by rpki-client on console-ams.rpki-client.org