Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/XRBdA-jF0TQr1_bjs3Zhp3wX2vs.roa
File:                     XRBdA-jF0TQr1_bjs3Zhp3wX2vs.roa (raw, json)
Hash identifier:          IvoGH//RMqKXxIkMQ5Md2dZeg7QTP+/URoaX5TqWc1M=
Subject key identifier:   5D:10:5D:03:E8:C5:D1:34:2B:D7:F6:E3:B3:76:61:A7:7C:17:DA:FB
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       035C
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/XRBdA-jF0TQr1_bjs3Zhp3wX2vs.roa
Signing time:             Tue 30 Apr 2024 01:56:54 +0000
ROA not before:           Tue 30 Apr 2024 01:56:54 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:3a00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 860 (0x35c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 01:56:54 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=5D105D03E8C5D1342BD7F6E3B37661A77C17DAFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:02:26:a3:f6:cd:f0:ed:e7:7d:e2:98:32:c6:
                    38:66:77:f2:6b:c7:d7:02:34:78:6a:6d:cc:0c:89:
                    cd:ba:0a:ff:9c:76:52:6d:96:df:1c:73:66:94:60:
                    a6:89:1b:70:bc:dd:09:e4:d6:2d:51:0f:e2:9f:d6:
                    ae:9e:d5:0c:87:29:0a:21:20:54:a5:20:da:fb:b7:
                    69:3f:42:ce:9f:4a:0f:a4:d6:47:03:4c:46:98:2f:
                    38:55:d9:32:0b:0d:e2:86:fc:22:05:60:b1:43:0e:
                    0d:7c:b7:ca:a6:9c:0c:31:23:6b:95:15:59:3e:e9:
                    53:83:fd:f0:e3:99:d0:a5:d2:15:2c:a1:48:6b:d2:
                    e8:50:9d:0e:10:56:86:3b:f9:40:79:a4:78:51:52:
                    e6:cd:5e:3c:06:76:74:75:4e:f9:14:c7:ab:48:cb:
                    c5:27:b9:4d:3a:56:fa:34:17:7b:d3:29:ed:ca:37:
                    82:72:f8:47:cb:f6:58:5b:e4:94:ea:51:82:be:c3:
                    78:62:00:57:2f:d4:be:67:9c:f3:aa:4b:9f:33:81:
                    87:9c:52:c9:43:ba:a3:5c:08:20:53:29:90:24:74:
                    d6:22:e9:f7:8e:5a:1a:00:3e:9e:4b:e3:70:bd:3d:
                    79:60:b4:bb:ca:76:b1:7a:cd:d3:aa:52:9c:c3:77:
                    ea:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:10:5D:03:E8:C5:D1:34:2B:D7:F6:E3:B3:76:61:A7:7C:17:DA:FB
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/XRBdA-jF0TQr1_bjs3Zhp3wX2vs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:3a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         b6:88:b7:03:6f:4e:ce:1e:70:0d:a6:cb:e0:26:fb:67:46:d2:
         24:68:50:26:62:4a:2c:67:95:0e:2a:d7:88:b6:2c:64:7e:80:
         dc:c7:58:80:74:9f:6d:3f:54:b0:17:91:05:e0:f3:90:c5:53:
         e4:5d:34:8a:a6:b0:0e:3a:67:7b:09:0b:a9:f3:b2:90:a7:82:
         54:8e:06:ca:9c:fd:69:19:56:5b:56:19:f9:08:78:e2:9e:27:
         09:97:14:d0:f9:16:f5:c9:a5:7d:d8:30:01:7d:4b:3b:94:5e:
         14:13:e2:2f:02:5c:46:97:57:6d:ee:dc:a0:10:b1:72:c6:cb:
         0f:e6:cf:a8:ee:b3:db:01:b6:4b:9e:e2:36:d8:2c:9b:01:f6:
         46:29:da:65:41:bd:dd:29:9d:15:56:b4:2a:e7:6a:1c:a9:91:
         8b:03:47:9d:ad:9b:52:b4:00:92:cb:2d:38:0b:3e:ff:f8:06:
         2c:91:e4:0e:13:d9:c8:d4:ae:89:09:72:62:0e:45:d2:3d:b8:
         a4:a5:3c:c0:b9:55:d5:46:2a:00:29:23:da:be:98:15:9a:1b:
         6f:6e:58:01:a1:6d:0b:d0:43:1b:9f:5a:f7:74:97:62:3d:19:
         8d:29:09:3e:f0:3d:c3:67:b1:69:e9:d6:22:0e:8b:1c:ea:5d:
         e0:1b:00:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:07 2024 by rpki-client on console-fra.rpki-client.org