Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/iFOgAi_D0gn4XDJJCAvf7gvqFmw.roa
File:                     iFOgAi_D0gn4XDJJCAvf7gvqFmw.roa (raw, json)
Hash identifier:          dwFaby2fFENf2WZTpO7t0GmVnuZ3OrDP2+EjkXdGNdU=
Subject key identifier:   88:53:A0:02:2F:C3:D2:09:F8:5C:32:49:08:0B:DF:EE:0B:EA:16:6C
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0336
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/iFOgAi_D0gn4XDJJCAvf7gvqFmw.roa
Signing time:             Tue 30 Apr 2024 01:53:57 +0000
ROA not before:           Tue 30 Apr 2024 01:53:57 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:3:b90::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 22:26:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 822 (0x336)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 01:53:57 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=8853A0022FC3D209F85C3249080BDFEE0BEA166C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6c:90:e3:06:c9:47:c1:7c:60:ce:c7:94:3c:
                    e9:b9:5f:cd:ba:26:19:ba:6b:76:a2:2e:d3:fe:18:
                    05:f4:e9:1b:7a:16:41:b3:a6:d4:b2:45:39:57:63:
                    e7:a1:42:ff:d9:91:22:64:26:cf:4a:94:8d:0a:a8:
                    bb:dc:dc:a6:a4:7c:19:ce:34:cd:11:c7:0d:4b:3e:
                    e6:eb:01:cf:90:c4:a3:66:f0:2b:f5:a4:43:c4:cb:
                    c4:42:6d:e2:8b:13:db:0c:e3:eb:14:04:e3:f4:7d:
                    43:05:c7:ae:69:ef:fa:1a:e3:c5:8a:a6:cf:db:5e:
                    f9:7b:20:16:44:88:80:03:86:07:0b:bb:1f:eb:59:
                    d0:26:19:45:f8:1c:3f:04:ac:b0:e9:c7:7a:17:f9:
                    59:2f:62:d7:20:a4:7c:38:c3:54:04:8c:31:87:00:
                    98:49:50:49:89:be:9e:22:3e:10:f3:45:bd:b6:0e:
                    6c:52:cd:a6:de:2b:ae:36:6d:d1:f6:8f:1f:b2:45:
                    50:a0:13:b3:aa:13:5e:49:4f:26:ca:13:b5:d0:ae:
                    94:a9:d9:99:64:da:c2:58:f9:36:51:54:fb:99:c0:
                    27:4a:47:97:b2:20:91:6c:8c:92:fa:3f:c9:5c:f6:
                    24:0c:57:4b:80:c5:53:03:d8:59:02:9b:e5:70:4c:
                    b5:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:53:A0:02:2F:C3:D2:09:F8:5C:32:49:08:0B:DF:EE:0B:EA:16:6C
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/iFOgAi_D0gn4XDJJCAvf7gvqFmw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:3:b90::/44

    Signature Algorithm: sha256WithRSAEncryption
         1d:d7:89:95:8f:a3:f5:1e:d3:74:47:c9:bc:2d:50:5a:5c:5b:
         88:43:95:f4:65:6c:9f:6e:db:80:c4:be:c3:fe:79:16:b9:90:
         89:e8:64:8b:11:3e:b4:da:20:15:b4:db:0d:51:28:26:2f:78:
         c6:6c:29:d6:52:f9:58:b7:1a:5f:51:f0:ad:83:86:cf:9f:d8:
         34:71:9b:77:a8:13:d0:4d:bd:54:25:66:0c:99:39:db:84:38:
         ca:30:f6:63:bd:fc:0b:05:a5:65:81:b8:a3:20:4c:67:65:9a:
         bf:2e:52:01:aa:b9:87:11:92:e9:12:23:5b:3a:66:11:7b:b9:
         c2:a4:0e:77:7f:21:5d:be:44:f1:8d:6b:9c:22:30:a8:fb:d5:
         12:34:27:20:02:77:b1:dc:57:ce:6c:02:71:49:55:30:bf:6f:
         58:50:11:52:83:e9:72:38:d9:a0:a3:de:36:b2:15:6d:4a:be:
         d7:ed:a7:90:ee:da:6d:fe:41:74:ed:3b:26:0b:be:da:9e:cc:
         83:81:6a:e3:2b:f4:d4:31:6a:7f:c2:39:e5:f9:32:08:7e:44:
         e0:c6:38:c9:e7:57:95:ff:83:7e:6a:cf:3a:a6:ce:cd:17:52:
         4a:84:16:b2:98:d1:d4:a4:29:5a:99:9d:b4:bb:35:b3:8b:74:
         d8:fb:9e:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 00:11:43 2024 by rpki-client on console-ams.rpki-client.org