Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/bV7BrVdJjVu2rRi55T_eZDcS2xQ.roa
File:                     bV7BrVdJjVu2rRi55T_eZDcS2xQ.roa (raw, json)
Hash identifier:          5KdkyY+12Kdghxq9+AcZYlM5oUjaRYBgCn4ZtGl6BwA=
Subject key identifier:   6D:5E:C1:AD:57:49:8D:5B:B6:AD:18:B9:E5:3F:DE:64:37:12:DB:14
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0357
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/bV7BrVdJjVu2rRi55T_eZDcS2xQ.roa
Signing time:             Tue 30 Apr 2024 01:56:52 +0000
ROA not before:           Tue 30 Apr 2024 01:56:52 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:9a00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 20:52:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 855 (0x357)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 01:56:52 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=6D5EC1AD57498D5BB6AD18B9E53FDE643712DB14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:2b:48:f3:73:44:b9:27:d8:c7:ce:ce:92:34:
                    2c:ad:92:fa:af:20:7b:ed:f6:7c:58:88:84:47:31:
                    95:be:a9:07:27:2a:1b:ba:a0:2e:ec:49:0b:3d:81:
                    c6:b7:0e:68:06:1a:66:72:77:e5:e1:be:85:97:d7:
                    9f:39:1f:87:57:04:78:81:d0:65:b2:4e:a6:d3:f7:
                    77:43:e8:bc:1f:46:b2:c6:b9:77:50:c8:8f:94:85:
                    0e:0d:06:a4:07:01:b4:91:d8:eb:2a:af:e5:60:4a:
                    d3:45:e3:fc:b5:1a:15:87:d7:c1:01:e0:1f:5a:32:
                    a1:68:3b:9f:7f:90:a2:ef:b7:16:8c:ee:42:12:ce:
                    74:3c:b9:3c:82:70:de:54:4f:2e:2c:66:90:e8:56:
                    f0:cc:bb:03:5c:28:4d:97:ec:bc:fd:ca:81:40:84:
                    ca:41:16:5e:2f:30:40:ad:20:cd:9d:99:b0:d7:cc:
                    08:40:ec:cf:2c:ba:cf:44:30:66:03:90:30:01:eb:
                    44:2e:61:1f:e8:19:b8:53:22:8c:25:0f:97:90:23:
                    3e:8d:60:d5:20:89:f0:b4:f6:e3:99:a4:19:ac:7a:
                    f1:dd:02:86:fc:c2:fb:57:9f:6e:f0:c4:a0:47:05:
                    c2:5e:f4:a3:02:c1:5e:56:fc:6f:a5:38:57:eb:9c:
                    f0:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:5E:C1:AD:57:49:8D:5B:B6:AD:18:B9:E5:3F:DE:64:37:12:DB:14
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/bV7BrVdJjVu2rRi55T_eZDcS2xQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:9a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         82:28:da:d3:32:bb:3e:6f:82:1f:29:5c:03:02:92:b3:9e:5e:
         e3:8a:88:e0:86:4c:e1:3b:37:dc:d4:23:73:d4:a8:b3:07:0d:
         91:3f:35:df:ea:1c:c2:c9:ed:b8:21:ea:db:7c:03:69:c7:e5:
         fa:d2:6f:d8:67:cb:81:ac:08:95:0c:82:28:f6:97:23:fa:f1:
         6a:e0:b9:24:3a:2a:cf:a1:e2:e5:52:d5:d6:c8:0a:7d:4f:84:
         04:b8:d0:84:d2:37:7e:11:64:9d:27:eb:e9:3c:6a:9d:20:9d:
         63:3f:ce:b3:50:d5:38:3a:a7:28:90:a2:dc:1b:8d:a8:1b:97:
         1e:53:15:e4:73:9e:b3:a1:48:20:41:64:58:8f:b2:6f:31:13:
         65:19:69:6f:a5:1f:19:b9:22:cd:fe:8a:46:0e:c9:1b:1b:aa:
         aa:c0:b2:83:82:f6:fc:d0:e0:4b:88:ad:d0:0d:9b:81:af:b4:
         e2:27:b3:3e:71:0d:ac:56:0d:81:04:82:5b:c1:6b:35:7f:13:
         91:aa:50:9c:fc:df:62:26:9a:3d:39:9b:df:5e:98:aa:49:51:
         96:77:de:5d:5d:8b:03:80:81:42:64:e0:b5:fc:65:9d:d7:97:
         12:3d:97:30:ae:4d:f3:79:fe:f0:02:5a:3f:ec:e4:e0:40:5d:
         ef:40:13:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 21:52:34 2024 by rpki-client on console-fra.rpki-client.org