Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Y9rkGzg9PU8cMlJGRB11geh-F4M.roa
File:                     Y9rkGzg9PU8cMlJGRB11geh-F4M.roa (raw, json)
Hash identifier:          EyT9JRF85VrWZzKH1LTzRRWW+Bw08Uxn1llqS9fgQaU=
Subject key identifier:   63:DA:E4:1B:38:3D:3D:4F:1C:32:52:46:44:1D:75:81:E8:7E:17:83
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0133
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Y9rkGzg9PU8cMlJGRB11geh-F4M.roa
Signing time:             Tue 30 May 2023 17:30:02 +0000
ROA not before:           Tue 30 May 2023 17:30:02 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:c200::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 13:40:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 307 (0x133)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:30:02 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=63DAE41B383D3D4F1C325246441D7581E87E1783
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:3d:91:55:d5:33:20:b1:e5:41:22:58:5c:a9:
                    cd:33:a0:20:16:61:58:3b:bb:e5:0e:7e:b8:08:01:
                    e5:a6:88:bb:61:81:34:28:99:ff:c4:bb:8a:37:6b:
                    09:c3:2a:2b:90:7a:33:5d:8b:d3:53:52:27:7f:29:
                    17:25:06:05:c2:fe:f5:42:fc:d8:fc:70:21:eb:c0:
                    c6:47:e2:c7:77:27:04:52:d9:03:b5:ad:c0:e2:ee:
                    99:aa:4e:e2:f9:80:dd:9c:f0:b7:51:54:b7:fc:9a:
                    f9:49:f9:61:03:0d:63:da:18:3c:21:3d:81:42:ba:
                    50:48:a1:63:c6:6c:d5:5b:c2:65:f1:78:c7:ea:00:
                    d3:7d:1a:51:fa:40:46:38:82:48:5e:9a:c6:0d:2c:
                    87:44:fb:24:10:60:5c:ba:cc:84:5f:4e:2b:e6:7a:
                    18:4e:96:11:b8:58:fc:9b:75:dc:6a:a8:b5:c3:a9:
                    33:cb:7c:2f:22:21:08:86:06:84:ed:94:f7:69:fe:
                    ee:3b:d4:3d:c9:31:1f:f7:f2:02:79:70:70:c2:5a:
                    1f:d3:43:1c:b7:ff:8a:fc:d4:e3:20:25:7e:b4:0a:
                    76:af:a7:df:21:4f:8a:72:55:97:bf:42:08:97:b4:
                    1e:f2:56:9a:5c:db:3b:5d:89:cb:c8:c6:f5:c3:19:
                    99:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:DA:E4:1B:38:3D:3D:4F:1C:32:52:46:44:1D:75:81:E8:7E:17:83
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/Y9rkGzg9PU8cMlJGRB11geh-F4M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:c200::/40

    Signature Algorithm: sha256WithRSAEncryption
         19:45:c9:d1:6f:73:94:0e:43:b1:9b:1f:58:39:5b:a9:8c:07:
         b1:23:49:c3:27:49:51:1c:3c:b2:38:13:58:c6:d7:0d:7d:33:
         a8:91:fa:92:93:d8:be:dc:37:f7:73:c4:58:65:70:0f:07:8e:
         b3:c3:b9:df:af:08:44:0a:49:72:eb:88:da:65:90:cd:29:b1:
         62:09:d6:ea:16:f4:3d:57:08:fd:ff:38:1f:6e:bc:c7:2f:27:
         0a:56:50:9c:de:40:11:42:cc:0f:44:6e:b1:73:f2:b8:70:70:
         68:bb:23:e4:66:fc:8a:9c:86:79:d5:08:60:9d:29:c6:c1:3c:
         5e:0e:a0:14:b2:fb:b9:12:37:5a:4b:b1:ab:9a:36:55:97:62:
         c5:07:c9:d9:80:11:ae:4d:25:14:44:f4:c4:86:6c:c0:52:e7:
         b2:1d:1e:2a:7a:be:90:e2:97:5e:ad:32:0a:d9:d6:7f:f4:6a:
         95:da:fe:5b:65:63:74:91:ad:91:1f:ac:3f:d7:cd:d6:8f:4f:
         d8:46:3f:e9:89:8a:66:47:eb:49:98:f0:15:45:0d:b8:1d:13:
         47:ec:d9:e7:b9:54:6a:c0:70:a3:5d:5b:49:50:bd:9e:77:d5:
         d4:fd:7c:5a:ba:94:a0:9e:8d:e4:a9:e0:6f:8d:6d:64:ad:76:
         8c:c9:01:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:15:52 2024 by rpki-client on console-ams.rpki-client.org