Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/hulsxVwoe9r4wSACc5HSjBcix4Q.roa
File:                     hulsxVwoe9r4wSACc5HSjBcix4Q.roa (raw, json)
Hash identifier:          NX1jhUTtJIEE2AmnRKa2eLR/Kk+2JlPcmKoDIqLInz8=
Subject key identifier:   86:E9:6C:C5:5C:28:7B:DA:F8:C1:20:02:73:91:D2:8C:17:22:C7:84
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0301
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/hulsxVwoe9r4wSACc5HSjBcix4Q.roa
Signing time:             Tue 30 Apr 2024 01:48:10 +0000
ROA not before:           Tue 30 Apr 2024 01:48:10 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:e600::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 20:52:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 769 (0x301)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 01:48:10 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=86E96CC55C287BDAF8C120027391D28C1722C784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e0:96:92:86:ba:b8:86:5d:cc:1a:86:52:41:
                    6e:96:1f:0e:7a:15:58:25:18:b9:54:38:59:de:01:
                    b3:90:40:40:63:c9:5f:2d:d4:f7:92:15:99:9e:a7:
                    5b:20:dd:5f:67:53:68:a2:3b:55:04:f0:d8:cd:73:
                    ef:71:8e:ea:49:5d:2f:d2:40:5b:01:53:c2:62:5f:
                    5c:83:30:24:c2:63:1d:f5:82:63:ef:48:d5:aa:c0:
                    d4:5f:37:29:41:f8:45:53:65:a8:c6:2e:f9:e7:56:
                    9e:d5:10:92:6d:9d:49:a2:a6:34:06:27:7b:44:ca:
                    08:84:ca:bd:24:b8:db:d0:04:d6:ee:ef:5c:c5:56:
                    0d:6a:d5:c4:11:6d:00:9e:66:37:a6:7e:14:e2:36:
                    03:8b:c9:e2:1d:c0:d7:54:85:1f:31:dc:35:51:df:
                    19:ea:38:ea:b2:ec:18:9a:6b:97:54:44:4c:fe:e4:
                    74:f1:64:52:25:78:47:d1:5e:46:ec:b2:fa:e7:a6:
                    77:a2:6a:6a:25:be:7f:30:ad:fe:76:a5:14:b6:c0:
                    86:f3:c4:0e:0e:62:f1:f7:c6:17:df:c7:98:6c:7b:
                    06:9c:94:18:02:c0:c7:c5:75:b8:62:21:0b:f6:e9:
                    76:06:ea:41:9b:03:d4:83:a3:88:0c:df:f2:2f:f3:
                    5f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:E9:6C:C5:5C:28:7B:DA:F8:C1:20:02:73:91:D2:8C:17:22:C7:84
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/hulsxVwoe9r4wSACc5HSjBcix4Q.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:e600::/40

    Signature Algorithm: sha256WithRSAEncryption
         81:bb:7d:00:20:e5:39:05:36:17:f8:fc:10:4a:c1:e4:57:71:
         fd:fd:8c:f2:b3:64:92:25:bc:e3:11:77:52:55:1a:e4:7d:d2:
         3e:7f:bc:8e:95:eb:95:09:68:1e:17:06:98:3b:7b:74:eb:72:
         c2:85:51:32:77:74:f4:d4:ce:ab:70:6a:51:18:c1:1f:b5:77:
         5b:4a:86:ba:50:88:d0:f6:e4:9a:d3:ad:a7:53:fb:3c:43:c2:
         82:0e:16:f9:1c:64:44:86:5d:84:b2:22:6b:bd:b2:d5:13:27:
         c1:f7:4b:b5:6e:f1:b4:0f:a6:31:d7:04:f1:89:1d:40:b6:aa:
         70:95:9c:0f:92:55:c3:bf:16:85:06:4d:7b:85:0f:1e:6c:a8:
         c8:9a:19:44:c2:6d:63:45:39:9a:c0:7a:51:29:25:73:44:55:
         e0:9a:ed:0a:50:df:bc:cb:46:2c:b0:48:34:ff:c6:c2:96:24:
         43:08:9c:e5:63:4c:cb:2c:d1:6d:2f:ba:dd:0f:68:e0:88:43:
         96:54:83:bf:c0:7b:9e:4a:62:cb:ac:e0:9c:1b:cf:b4:d4:b6:
         b4:89:84:aa:4c:69:1c:e8:e4:d6:47:f1:71:13:0b:bd:97:b7:
         75:fc:72:38:1a:b9:56:5e:b8:4e:55:66:0f:e4:ee:42:31:75:
         fd:12:5b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 21:52:34 2024 by rpki-client on console-fra.rpki-client.org