Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/iTYFvBRVnN-IDxgux11KN1NuyXk.roa
File:                     iTYFvBRVnN-IDxgux11KN1NuyXk.roa (raw, json)
Hash identifier:          LUgzB51ncM+Tqf4AuLuaXsXiCVOGPhcrPPjsLh6tfxs=
Subject key identifier:   89:36:05:BC:14:55:9C:DF:88:0F:18:2E:C7:5D:4A:37:53:6E:C9:79
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0330
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/iTYFvBRVnN-IDxgux11KN1NuyXk.roa
Signing time:             Tue 30 Apr 2024 01:53:54 +0000
ROA not before:           Tue 30 Apr 2024 01:53:54 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:6d00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 816 (0x330)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 01:53:54 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=893605BC14559CDF880F182EC75D4A37536EC979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e5:79:81:98:62:ac:d3:ad:04:c9:5f:93:50:
                    bd:4a:2b:c5:2f:06:ee:d0:dc:7b:08:cf:90:dd:f4:
                    93:5d:28:da:2d:5e:59:2d:95:4e:82:da:f0:6d:53:
                    b4:46:cc:3a:52:b5:5f:2a:50:59:60:eb:4d:45:7b:
                    30:13:30:18:da:f0:89:6e:2b:a6:de:a1:2b:fc:35:
                    0e:14:db:a4:d9:2f:74:f6:c7:e9:be:b2:6f:7d:46:
                    35:c5:b9:a5:18:d0:d8:63:87:17:fb:b9:ed:0b:5d:
                    c9:5d:dd:24:1c:0e:a3:23:84:de:b9:5b:2e:3b:87:
                    50:8e:5d:4a:28:81:7d:68:8a:07:8d:15:d2:74:f5:
                    15:e3:c3:36:cd:c7:68:93:19:25:ca:6e:fa:89:89:
                    56:33:7a:6b:2f:fc:74:b9:5a:7f:a8:4e:88:6a:91:
                    a8:55:9d:f3:90:b6:b5:8e:a1:5a:32:12:89:e7:3d:
                    8e:d9:71:34:d4:32:aa:cb:97:57:bb:d1:0d:52:bf:
                    08:30:5e:85:4a:16:e4:7e:c9:3c:eb:99:df:67:2c:
                    bc:c0:f4:35:66:c5:93:57:a7:5f:2b:8d:61:0d:77:
                    22:9d:90:a3:04:62:15:60:49:61:65:b7:8a:44:36:
                    1a:ca:34:e2:7d:44:9b:ca:ed:1b:4e:92:5b:5b:30:
                    8b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:36:05:BC:14:55:9C:DF:88:0F:18:2E:C7:5D:4A:37:53:6E:C9:79
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/iTYFvBRVnN-IDxgux11KN1NuyXk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:6d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         ca:d5:79:1b:b4:b3:2c:b1:93:79:a5:b0:7b:a9:0d:c7:a6:3b:
         a4:13:ff:82:4d:53:b6:9b:b2:f6:aa:8e:c2:5a:f8:f4:81:5a:
         cd:a1:f8:c4:2b:28:66:2e:4a:9e:25:5e:01:05:d8:d6:17:5b:
         1f:60:b9:ae:ca:52:f6:10:26:b9:e9:6f:87:c9:bb:90:45:21:
         e3:a1:ce:0d:02:26:07:11:24:38:3d:39:83:41:37:73:62:a0:
         31:93:5e:3a:8c:f3:92:4d:40:b5:67:24:03:71:9c:6f:20:cf:
         ca:57:23:1b:0e:55:6f:ac:1a:03:44:53:cd:66:27:d2:b4:78:
         2b:7a:c1:1f:c3:15:d4:3b:c0:9d:80:2b:15:f3:67:b4:a7:88:
         c5:d8:8c:13:58:29:46:d9:ad:fd:ee:c4:18:58:1e:a9:ec:ae:
         d7:bb:19:78:09:10:16:83:23:94:c6:fb:fc:3d:a6:e1:65:fb:
         32:3f:89:45:c8:1b:f1:38:a0:25:e8:5a:fe:f0:de:5d:d2:e4:
         47:01:6c:37:fc:77:2b:1a:ef:44:e4:7f:fc:d0:b6:e5:d5:a5:
         f9:44:96:eb:5e:b8:41:85:35:38:b0:38:13:f4:04:f0:f4:22:
         89:d8:6b:57:c5:11:8b:2e:6c:b0:f2:42:28:0e:89:10:ad:95:
         77:99:14:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:34 2024 by rpki-client on console-ams.rpki-client.org