Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/fATXYNtI9EVv4xPtwRQC35eohxY.roa
File:                     fATXYNtI9EVv4xPtwRQC35eohxY.roa (raw, json)
Hash identifier:          tv+YCWI8f53xiAQYexrhMVFh0OayIrN0FoNRpEc3CIU=
Subject key identifier:   7C:04:D7:60:DB:48:F4:45:6F:E3:13:ED:C1:14:02:DF:97:A8:87:16
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0356
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/fATXYNtI9EVv4xPtwRQC35eohxY.roa
Signing time:             Tue 30 Apr 2024 01:56:52 +0000
ROA not before:           Tue 30 Apr 2024 01:56:52 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:61:2800::/38 maxlen: 38

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 854 (0x356)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 01:56:52 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=7C04D760DB48F4456FE313EDC11402DF97A88716
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ba:c5:d8:ec:83:82:ea:2b:12:0b:1f:dd:86:
                    af:fd:3b:3d:de:32:c2:36:70:91:8d:a5:64:fa:7d:
                    8e:f1:f7:83:65:a5:28:3a:21:74:df:cf:e7:35:e0:
                    a3:25:e6:b5:30:d7:c6:b2:b7:ae:8c:78:ed:09:20:
                    60:e8:25:23:69:0a:ba:34:e6:ba:95:88:ad:b7:a4:
                    f2:38:18:48:a7:bf:8c:eb:b5:cd:67:9e:76:49:57:
                    13:dd:4a:a7:53:6e:be:03:51:59:25:39:11:0e:3a:
                    0b:c7:90:6d:28:03:f2:77:3a:86:d0:a1:c2:57:f4:
                    56:d7:fa:5e:88:70:ed:8d:50:25:56:92:ee:ab:e3:
                    49:51:e3:27:b8:89:ff:97:d7:9e:3b:f0:fc:62:a7:
                    72:f4:52:06:6d:ee:2d:b2:8f:65:98:ae:99:f6:ef:
                    c1:76:a2:40:79:fc:03:16:f3:72:de:1d:58:be:f6:
                    50:40:a5:36:b7:84:ad:44:12:37:ef:c0:8c:fd:e5:
                    fd:14:95:34:01:87:0f:9a:8d:a9:c8:0f:d7:63:63:
                    c6:2d:ba:74:ca:d0:c2:fb:92:ac:26:b1:64:6d:53:
                    34:aa:d4:b2:b6:83:30:98:e9:4b:91:ee:cd:eb:37:
                    d1:42:d5:d8:2a:64:05:85:48:d4:09:0b:dd:cc:12:
                    41:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:04:D7:60:DB:48:F4:45:6F:E3:13:ED:C1:14:02:DF:97:A8:87:16
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/fATXYNtI9EVv4xPtwRQC35eohxY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:61:2800::/38

    Signature Algorithm: sha256WithRSAEncryption
         ca:39:d8:f9:d3:f9:2a:58:fd:26:3f:70:0b:0b:39:a1:b7:d0:
         af:f0:a1:27:2b:c8:c3:83:68:59:a3:a5:1d:7b:c1:5e:a6:31:
         61:9f:84:37:1f:d2:8d:66:fb:72:5e:56:2d:0f:99:f8:33:e3:
         e0:20:d5:4c:a3:cf:d5:0f:11:b4:03:82:6e:b2:4e:f0:ef:5d:
         ee:3b:07:f2:dc:a6:2e:a8:6a:ac:b9:b1:9a:96:a6:e8:27:86:
         a1:0a:41:dd:fe:89:83:0e:84:fa:17:de:f6:4f:17:9d:da:8e:
         7b:50:df:b0:7e:e7:69:e0:fd:e4:b1:38:9e:24:c6:2d:f7:fc:
         72:d0:ae:56:4d:8b:73:05:8b:8b:b2:71:8d:f4:1d:99:6c:47:
         b5:2c:b6:7b:06:64:fc:2b:bd:26:f0:97:dd:e3:b2:04:a8:d4:
         cd:03:35:de:b9:9f:48:6f:d5:a9:2f:c8:b9:04:5d:48:27:aa:
         ff:bf:49:7d:6b:ac:18:07:d8:ab:d5:8c:b2:bb:e7:2f:ee:f1:
         7d:f8:ba:e8:02:78:d7:c7:98:4b:d0:41:d8:14:fb:be:1c:7a:
         60:59:e3:76:33:36:68:7b:ed:b3:0d:b7:7a:60:7e:2a:f3:52:
         36:c6:ec:27:8c:1c:ea:19:e3:c8:e3:c7:a4:b2:a3:86:f5:ae:
         dd:ab:2a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:07 2024 by rpki-client on console-fra.rpki-client.org