Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/XqyCa_dhwK-I2U63nhfszClJyNs.roa
File:                     XqyCa_dhwK-I2U63nhfszClJyNs.roa (raw, json)
Hash identifier:          vLF6mN3Kx5Trw3aDRAEiR3bwNMQSmJPZYDaY1XCeE74=
Subject key identifier:   5E:AC:82:6B:F7:61:C0:AF:88:D9:4E:B7:9E:17:EC:CC:29:49:C8:DB
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       020B
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/XqyCa_dhwK-I2U63nhfszClJyNs.roa
Signing time:             Tue 30 May 2023 17:40:26 +0000
ROA not before:           Tue 30 May 2023 17:40:26 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:3a00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 13:40:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 523 (0x20b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:40:26 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=5EAC826BF761C0AF88D94EB79E17ECCC2949C8DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:38:f4:35:64:ed:27:c5:d3:f3:db:68:2c:8c:
                    d0:aa:40:1c:d2:bc:a0:a6:70:f7:64:08:a2:4b:12:
                    e8:a6:94:f3:47:aa:a2:13:b3:b8:3c:94:25:f1:49:
                    8d:3a:48:75:d4:c0:89:d1:f6:a1:85:33:a0:d0:d1:
                    57:3c:91:49:d4:3b:c2:ba:6a:30:05:0b:67:a5:47:
                    73:e9:90:51:5a:ad:31:b9:ef:88:79:b0:91:95:0d:
                    0c:db:a7:9e:a6:ef:ba:73:49:5e:77:99:f2:91:87:
                    82:70:ac:11:a0:76:01:a1:4e:13:e5:0c:48:ee:6b:
                    c8:11:53:3e:7d:12:98:af:5e:2e:cd:21:9c:cc:28:
                    9f:36:05:ff:81:87:2b:b2:f8:41:66:1f:ad:ab:8b:
                    b4:c8:d4:0f:d2:46:45:6c:e5:b1:74:ca:8f:d1:55:
                    6a:f5:34:b4:ce:28:42:da:c9:de:bb:1d:a6:3a:3e:
                    11:27:a3:f9:ff:01:47:38:1d:c1:e1:8e:70:f1:62:
                    52:84:38:98:55:b7:27:01:08:d9:73:03:b3:5c:a8:
                    0f:69:b9:88:c1:88:2d:2a:1e:b1:4a:bd:8f:f1:26:
                    a6:09:42:e8:8e:91:6e:44:5d:8a:fc:05:b4:d4:17:
                    c8:85:e7:4b:15:d2:c7:4e:e3:0f:d0:fe:97:a0:3b:
                    0b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:AC:82:6B:F7:61:C0:AF:88:D9:4E:B7:9E:17:EC:CC:29:49:C8:DB
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/XqyCa_dhwK-I2U63nhfszClJyNs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:3a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         07:65:09:bc:8d:16:25:ed:57:06:f8:44:27:15:01:ce:2b:6f:
         8d:9b:2f:33:b5:df:16:82:dd:12:c4:55:6f:0f:0a:ab:5f:9f:
         0f:03:40:e9:73:e0:43:c8:56:1b:7a:49:0c:5b:8a:fc:6a:76:
         a5:82:7f:fe:f2:7d:11:17:b3:5c:2e:3b:d8:02:00:b2:42:96:
         3b:db:49:8d:0c:00:db:ca:2f:02:32:24:3a:18:04:ff:68:dc:
         7e:df:ec:8a:81:ff:f4:31:4c:f3:fd:4f:f1:cc:9d:08:94:28:
         f6:16:ee:2d:a3:42:fd:5d:72:b8:4c:bb:2a:cf:a2:3b:b0:32:
         5e:a9:99:32:cd:e3:0d:d6:7a:d6:9c:51:de:12:98:4b:d5:a4:
         61:35:54:b1:a2:65:a7:5b:a2:54:da:6f:27:17:07:17:0c:89:
         f4:d4:00:06:ac:b7:04:72:74:ea:3d:90:db:a1:0e:9f:ed:ca:
         ec:c3:99:b6:ce:f9:da:ce:d0:2f:c5:96:52:64:90:97:6f:39:
         c5:c6:a9:95:e6:de:23:a8:93:4b:70:18:f6:1a:33:c8:cc:c9:
         d3:b0:4f:4b:2b:8c:c4:9e:7a:28:55:71:b1:6e:64:b4:0f:a0:
         16:ab:81:93:7e:83:dd:c5:29:22:92:e1:56:ee:8a:c2:31:44:
         dc:42:01:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:15:52 2024 by rpki-client on console-ams.rpki-client.org