Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ZqnxkQrb6QLP3Sc8uug_Wm5ZBQ4.roa
File:                     ZqnxkQrb6QLP3Sc8uug_Wm5ZBQ4.roa (raw, json)
Hash identifier:          kVnlGabvPIVQ8uFFdp3Rljv1pe9LUeEW+6NrhBQCa5Q=
Subject key identifier:   66:A9:F1:91:0A:DB:E9:02:CF:DD:27:3C:BA:E8:3F:5A:6E:59:05:0E
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       032A
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ZqnxkQrb6QLP3Sc8uug_Wm5ZBQ4.roa
Signing time:             Tue 30 Apr 2024 01:53:52 +0000
ROA not before:           Tue 30 Apr 2024 01:53:52 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:8300::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 810 (0x32a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 01:53:52 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=66A9F1910ADBE902CFDD273CBAE83F5A6E59050E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d7:28:2f:c1:b6:d3:52:6d:6a:49:0f:53:96:
                    63:9d:28:ea:50:67:a4:bd:fb:dc:b6:d2:94:1d:c7:
                    b7:58:90:8c:2c:6c:92:81:9e:9c:68:92:67:cf:ec:
                    f6:f4:ee:b7:c2:39:93:7f:3e:97:22:b4:1f:a9:e3:
                    5b:c4:5b:83:08:58:07:69:39:e6:35:92:40:c8:29:
                    06:2e:f7:a9:9b:d5:89:27:ab:c9:9a:4e:10:fa:69:
                    2a:c5:ee:d4:10:f0:de:1a:9a:43:09:f7:03:85:7f:
                    c4:47:bb:18:db:6b:45:9f:d5:3d:d7:73:30:e0:28:
                    7a:28:cf:60:9b:1c:6a:eb:3f:8f:d4:fe:47:54:2a:
                    07:c0:4a:a1:c0:41:90:6a:10:28:0c:8e:79:3f:eb:
                    93:b5:7a:ed:70:f3:e3:5f:31:06:e2:09:ef:28:9f:
                    9e:88:ce:95:3b:f4:bb:13:ae:03:4a:e3:eb:18:92:
                    fe:6d:52:36:2d:2b:4d:7d:c2:3f:4a:e1:aa:5d:55:
                    5d:1e:bb:a4:36:1d:9c:bf:d7:f2:02:ed:e4:6e:f8:
                    f4:0d:35:d6:cb:e0:f6:2d:a9:7a:03:ad:02:7d:6e:
                    05:4e:da:6b:01:b2:4b:24:0b:97:d2:b4:8b:07:b3:
                    6c:2b:2e:61:73:0e:08:ed:61:c1:c2:25:29:c1:5f:
                    85:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:A9:F1:91:0A:DB:E9:02:CF:DD:27:3C:BA:E8:3F:5A:6E:59:05:0E
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ZqnxkQrb6QLP3Sc8uug_Wm5ZBQ4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:8300::/40

    Signature Algorithm: sha256WithRSAEncryption
         92:75:09:60:6d:bd:22:60:3b:d1:99:a7:8b:a7:d4:e3:e2:ec:
         32:e0:2a:86:75:b3:22:08:08:2c:f1:d5:4e:5d:ed:66:03:a1:
         e8:26:84:cc:31:de:5f:81:cb:97:f6:f1:3b:59:2b:3b:62:94:
         21:6e:f9:28:02:6a:92:d6:95:0e:f4:81:d9:ed:fe:bb:61:22:
         09:86:b1:f3:8f:cf:b7:77:95:1a:7b:72:12:ee:bb:4c:cc:a7:
         e2:47:50:da:57:91:4f:05:15:f6:3b:73:a9:49:23:36:c2:c1:
         db:e4:97:a9:fd:ac:c2:b8:ab:8a:a9:ed:4f:4e:78:51:3f:88:
         49:44:31:d4:0e:1b:cc:e4:37:d5:9a:12:b0:43:0a:8b:f9:f8:
         fa:59:f5:ec:42:0c:8c:8f:83:55:c4:5f:c7:b3:ff:9c:16:5d:
         40:cd:99:f8:07:5f:79:56:79:89:93:3f:c1:ee:91:17:b9:85:
         bd:a2:1f:fb:69:f1:33:fc:f4:a2:a8:d4:86:c5:22:3f:7c:c5:
         7b:58:1d:55:bd:1a:02:75:44:81:6d:55:d3:e0:43:28:e8:dd:
         d0:ce:72:51:1d:9d:3d:72:d2:2f:16:47:53:d8:2c:c9:b9:ee:
         67:b1:bc:ad:07:e6:69:99:e7:90:c0:f2:36:7b:e8:0a:5e:46:
         bd:27:d6:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:31 2024 by rpki-client on console-ams.rpki-client.org