Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/fdYSdrVKnXs-GMk3_ZhTgjp6NZA.roa
File:                     fdYSdrVKnXs-GMk3_ZhTgjp6NZA.roa (raw, json)
Hash identifier:          /Mv0l1plQwmuClRllbmXpXuOwGKJyeGRaM5gLxbD2qk=
Subject key identifier:   7D:D6:12:76:B5:4A:9D:7B:3E:18:C9:37:FD:98:53:82:3A:7A:35:90
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       030F
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/fdYSdrVKnXs-GMk3_ZhTgjp6NZA.roa
Signing time:             Tue 30 Apr 2024 01:50:46 +0000
ROA not before:           Tue 30 Apr 2024 01:50:46 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:a300::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 20:52:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 783 (0x30f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 01:50:46 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=7DD61276B54A9D7B3E18C937FD9853823A7A3590
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c4:47:62:53:b1:84:5c:80:f2:ca:f6:f7:ec:
                    aa:de:c6:f2:85:5d:03:39:98:06:49:87:6a:c6:42:
                    cd:ea:db:7e:8d:d7:25:6a:b4:cd:7c:31:8f:8b:09:
                    47:d7:85:45:46:c9:31:79:7c:49:fc:29:2c:64:5c:
                    db:90:df:7a:20:ef:4c:68:76:aa:25:2e:92:d7:1f:
                    a6:29:a6:92:e3:de:35:10:43:d7:98:4e:aa:d4:08:
                    e8:1c:f4:2a:e6:ba:94:0b:85:34:c5:fc:bc:1b:1e:
                    36:c6:3b:92:8d:8a:b9:ae:29:0e:1b:fb:44:23:ad:
                    96:e2:9e:da:ac:5e:2a:97:27:c5:77:3b:9b:23:42:
                    b9:49:95:41:1f:99:90:5a:ee:73:99:ba:34:21:fb:
                    8c:a3:80:90:42:d2:f7:d2:2a:4d:3a:e6:03:42:33:
                    57:e4:7b:b3:75:1a:7e:c7:a4:fc:77:64:17:9f:02:
                    38:e7:03:fe:2e:34:cf:4a:6c:5c:6b:3d:c2:93:c8:
                    4d:93:89:8e:58:85:ff:42:38:62:1d:ed:22:25:35:
                    93:c6:05:6d:6a:63:33:85:c7:20:de:04:d7:7f:96:
                    ed:02:61:1c:bc:37:05:70:01:04:93:be:63:23:d9:
                    9b:6e:07:43:1a:d2:4b:91:19:9d:05:7a:7a:79:f5:
                    3d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:D6:12:76:B5:4A:9D:7B:3E:18:C9:37:FD:98:53:82:3A:7A:35:90
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/fdYSdrVKnXs-GMk3_ZhTgjp6NZA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:a300::/40

    Signature Algorithm: sha256WithRSAEncryption
         c4:3c:f3:19:8a:5f:e9:c0:5b:25:31:39:e1:4c:cc:c6:54:7e:
         dc:e5:45:59:98:33:e7:91:91:5d:bb:6b:c6:b2:51:37:4a:3a:
         44:3c:db:54:b9:97:4a:77:ca:56:f6:11:45:f6:b2:f9:4e:68:
         4a:5b:38:18:0d:51:9a:f5:d9:64:ab:b3:58:db:36:37:1e:42:
         6b:ff:f3:6a:49:2f:13:07:88:6a:f9:77:d8:88:77:00:2f:a7:
         f6:11:ae:22:8c:24:3b:e1:fb:c7:4d:2b:88:07:27:ba:c4:96:
         4b:9d:0e:18:58:fe:f2:ec:4e:b7:49:88:83:b5:ca:5e:a0:b5:
         00:06:db:04:5f:b6:ce:2b:95:29:8c:1a:7e:1f:e4:cb:34:a7:
         23:dd:ed:2c:08:63:82:d2:47:a1:b0:9e:03:7d:e2:fe:85:09:
         7f:0c:47:d6:02:ef:87:b0:fb:0d:b6:7a:ce:b2:42:18:d4:38:
         28:27:ec:9f:10:e9:00:15:8d:46:73:ea:11:45:79:94:cd:7a:
         08:e1:39:77:55:18:c7:5d:48:da:bf:d6:67:bc:24:2f:d5:7f:
         d9:27:74:e2:e4:c3:81:cd:87:7e:26:d2:b5:94:d2:c4:47:f0:
         1a:ec:e9:69:fb:a1:3e:a5:b1:82:40:5c:38:10:aa:58:39:c5:
         8e:8f:2e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 21:52:34 2024 by rpki-client on console-fra.rpki-client.org