Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/d7aD83BFKy6__VS0QqmrpMOabKA.roa
File:                     d7aD83BFKy6__VS0QqmrpMOabKA.roa (raw, json)
Hash identifier:          iKqbDxIfMBbedwgDi7TFnpvNSrKuNv4D/rEIW7Om0Pc=
Subject key identifier:   77:B6:83:F3:70:45:2B:2E:BF:FD:54:B4:42:A9:AB:A4:C3:9A:6C:A0
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       01B6
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/d7aD83BFKy6__VS0QqmrpMOabKA.roa
Signing time:             Tue 30 May 2023 17:36:30 +0000
ROA not before:           Tue 30 May 2023 17:36:30 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:e600::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 13:40:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 438 (0x1b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:36:30 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=77B683F370452B2EBFFD54B442A9ABA4C39A6CA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:08:2c:75:27:27:e3:10:64:c5:10:43:e0:fa:
                    c4:0b:77:8e:a4:7f:9c:8c:b6:5e:bf:b1:13:54:fb:
                    3b:b1:10:54:54:bd:a8:5c:18:de:7d:9e:f1:a6:7a:
                    22:41:2e:70:51:40:d9:7d:1e:9f:21:db:b8:f9:82:
                    4b:74:88:f3:56:ed:5c:14:93:f4:d1:fd:95:35:3e:
                    3b:27:bf:06:0c:55:4c:ac:2e:94:f4:2e:d8:e6:7d:
                    b4:c0:72:f4:c9:b7:43:19:c6:86:76:10:d4:10:67:
                    19:c1:7a:e5:48:21:b5:07:f2:9d:ef:fd:2c:2a:f4:
                    18:8a:a5:a9:d7:28:33:ef:4c:57:89:98:70:5c:73:
                    4b:db:1d:04:4e:92:55:86:2e:bc:ed:9c:d6:b3:db:
                    f6:d7:29:0e:f7:bb:fd:dd:31:35:bf:88:f5:30:6d:
                    39:18:dc:13:c3:75:7d:20:42:b8:b3:75:49:e8:17:
                    63:64:e3:23:59:c8:13:d2:c4:31:25:e5:cf:88:24:
                    cc:4f:1d:9c:df:31:94:b4:87:e7:35:d9:63:45:b4:
                    38:13:ea:c8:e2:0f:78:5f:05:5b:23:96:9f:ab:57:
                    58:84:2f:40:3b:b9:b0:6f:41:c4:33:2b:78:d9:6f:
                    64:85:b9:f8:20:97:2e:dd:53:6f:fa:f7:44:5e:cd:
                    e3:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:B6:83:F3:70:45:2B:2E:BF:FD:54:B4:42:A9:AB:A4:C3:9A:6C:A0
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/d7aD83BFKy6__VS0QqmrpMOabKA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:e600::/40

    Signature Algorithm: sha256WithRSAEncryption
         b9:fd:9e:cd:6d:41:4c:ff:81:37:98:77:63:e9:c7:ca:14:8f:
         26:01:78:10:db:39:1e:3f:30:e6:af:4e:bb:b8:5d:c5:53:4a:
         a0:2c:25:38:2a:21:1f:92:4e:7a:ec:88:01:c4:42:b3:d3:87:
         11:b7:83:30:9c:5c:bd:1e:fd:b0:d1:e0:9f:87:fb:72:04:8b:
         a8:61:8e:32:64:aa:f8:6e:b6:89:16:d5:b3:c3:e9:6f:2a:01:
         b3:f4:23:d8:29:03:be:0d:3a:ff:9e:e1:26:9d:62:a8:34:9d:
         a1:a6:42:c0:b0:3f:01:33:47:80:a0:18:2f:69:48:af:66:e1:
         0b:86:0e:80:ea:d5:29:f1:86:46:d7:72:a3:67:27:0f:b1:b0:
         e5:0c:c0:5f:15:3f:d7:42:3f:c3:1e:ec:35:dc:44:f1:b3:fc:
         2f:d4:e0:29:4d:fa:6b:e8:da:6f:bf:31:1a:37:06:3c:d1:39:
         4d:a6:9c:16:9e:2f:86:f5:c4:d6:f5:29:09:83:a8:92:fe:86:
         34:f3:19:ec:a8:18:22:e8:64:9a:d6:04:93:b9:b2:63:fe:c0:
         4b:88:7b:57:78:f7:86:f5:21:20:e3:0f:73:4b:2f:1d:de:73:
         2f:30:d1:ef:50:e0:db:e9:c8:c7:bc:fa:8c:00:c4:c2:94:dd:
         18:09:89:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:15:53 2024 by rpki-client on console-ams.rpki-client.org