Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/k7qzBu2aHn5m1admmSU4X6dC8yk.roa
File:                     k7qzBu2aHn5m1admmSU4X6dC8yk.roa (raw, json)
Hash identifier:          kkpyIaFseOREw9Nx2fGoNFUujgCIiCSdAAnAEz2b3Eg=
Subject key identifier:   93:BA:B3:06:ED:9A:1E:7E:66:D5:A7:66:99:25:38:5F:A7:42:F3:29
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0347
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/k7qzBu2aHn5m1admmSU4X6dC8yk.roa
Signing time:             Tue 30 Apr 2024 01:54:05 +0000
ROA not before:           Tue 30 Apr 2024 01:54:05 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:61:2c00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 839 (0x347)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 01:54:05 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=93BAB306ED9A1E7E66D5A7669925385FA742F329
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:b2:c0:ae:d0:47:18:5c:fc:ad:4f:f2:1a:d2:
                    0d:08:12:a5:3d:cf:95:89:32:98:53:ec:84:75:ba:
                    1b:d7:9b:f0:72:5b:94:b5:f8:13:57:7b:80:4d:cb:
                    35:bc:3d:83:cc:a4:26:1a:55:c1:cf:87:37:e8:ce:
                    a6:bb:8f:f7:b6:91:7a:9b:27:6c:34:36:4f:b7:b6:
                    3e:4f:b7:df:41:5c:b9:1e:d9:df:c0:47:e9:81:14:
                    0f:76:5d:87:3d:4b:0b:cd:87:1e:31:69:4e:63:cf:
                    89:a5:f8:f7:2f:64:83:48:f1:74:c8:c6:ae:77:68:
                    8c:49:5d:e7:ba:fd:d7:c0:30:4c:45:35:f1:07:30:
                    3d:9b:c5:0a:5b:88:dc:7c:86:d0:48:07:c8:1c:3f:
                    a7:1c:12:5c:17:25:af:07:28:55:35:3a:49:24:8c:
                    5f:64:92:be:40:b3:ee:01:7d:71:1c:df:d0:d2:fc:
                    c6:e2:32:ec:70:01:fb:17:12:d8:4d:8a:ab:67:79:
                    4b:7e:7f:dd:b8:9f:e2:39:01:2a:7e:e5:bd:6d:28:
                    1d:51:26:7e:f9:b2:9f:38:38:9d:57:6c:a9:e2:ea:
                    5b:1f:1f:3d:eb:28:d9:c2:8c:5b:06:c7:a3:6b:54:
                    4a:37:8b:fe:ba:2a:18:41:fa:43:b7:a1:c1:68:a0:
                    74:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:BA:B3:06:ED:9A:1E:7E:66:D5:A7:66:99:25:38:5F:A7:42:F3:29
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/k7qzBu2aHn5m1admmSU4X6dC8yk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:61:2c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         0f:05:b3:2f:ad:84:5a:26:68:61:d0:7b:36:46:8a:d3:3a:78:
         2d:11:5f:d5:0c:ac:9c:53:03:a2:98:a1:a0:b2:cc:27:4c:92:
         11:bf:42:61:21:4a:9d:af:aa:53:ef:6a:16:c3:4d:f2:94:3f:
         1e:c1:80:94:e7:5b:18:c8:11:1a:c7:41:a9:fa:0d:ca:2d:7e:
         23:7d:86:ce:92:c4:c3:df:47:74:88:44:b7:68:b9:78:a5:cd:
         03:86:16:0c:d4:0f:37:a9:6c:4e:a3:7f:bb:ac:38:36:23:2b:
         47:60:77:3f:4b:f5:8c:73:10:e9:b9:be:68:0a:dd:4e:12:91:
         d3:44:f9:e2:e0:7a:b0:9a:c7:ec:f8:29:16:a9:38:21:9c:b9:
         f6:02:68:d4:84:1a:d5:5e:ab:9a:77:83:ce:4b:9a:50:1b:bf:
         c3:e0:50:8a:8c:18:67:f8:58:e4:18:62:a6:2d:4c:5a:5d:33:
         0e:c9:bf:45:4c:60:6d:5a:f2:f5:06:e3:52:c0:ad:91:6b:a5:
         ff:eb:cf:39:fb:3e:e4:40:be:b9:68:36:37:ee:00:27:b0:40:
         eb:1b:90:f4:f5:37:a9:c4:fa:eb:8e:72:ad:ac:e8:c2:fb:b5:
         81:21:75:ee:7b:5d:31:0c:88:41:ec:ed:6f:89:3a:fc:f8:41:
         bf:8f:b7:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:45 2024 by rpki-client on console-fra.rpki-client.org