Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/kvlJgK5vs_Xr2bnpObfsz7cNSGU.roa
File:                     kvlJgK5vs_Xr2bnpObfsz7cNSGU.roa (raw, json)
Hash identifier:          e04NcGcZZxepXhED4rWIBE+A8RCSzzf1NZEzUA9OZHU=
Subject key identifier:   92:F9:49:80:AE:6F:B3:F5:EB:D9:B9:E9:39:B7:EC:CF:B7:0D:48:65
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0159
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/kvlJgK5vs_Xr2bnpObfsz7cNSGU.roa
Signing time:             Tue 30 May 2023 17:32:29 +0000
ROA not before:           Tue 30 May 2023 17:32:29 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:6100::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 13:40:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 345 (0x159)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:32:29 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=92F94980AE6FB3F5EBD9B9E939B7ECCFB70D4865
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:49:4c:19:3a:c9:da:1f:70:2f:cc:0d:f3:df:
                    92:23:4a:70:0e:f9:a9:4f:1b:9e:85:82:b4:ad:4d:
                    e1:a4:e2:ae:16:52:1c:c5:f4:86:d7:74:19:5b:7b:
                    05:ab:30:4d:84:a0:21:35:00:77:20:87:fb:0f:ad:
                    22:b0:07:ac:54:33:53:3d:e7:45:f3:ee:f3:dc:86:
                    1d:ac:31:05:80:a0:6a:9a:3c:86:d4:4f:0c:e9:d3:
                    e7:49:ad:7a:6f:02:f7:4d:60:58:0d:b6:e4:54:99:
                    10:b3:49:f7:7f:0e:93:38:2c:54:9f:ae:9d:39:8c:
                    e2:a2:4c:8b:79:e7:2e:e3:60:a3:68:9f:bc:5e:7a:
                    3d:fd:01:36:21:48:5e:b6:44:4d:84:c1:ec:bd:d6:
                    4a:07:90:c2:cc:87:84:59:1b:e8:40:85:82:cd:91:
                    1d:ea:63:2d:ba:63:b4:f7:7c:b2:99:f9:01:cd:e8:
                    2a:e6:f4:1a:77:a2:df:b6:b2:80:df:80:1c:a2:72:
                    fa:23:89:53:ee:26:a0:ab:2d:53:4a:a9:0f:4f:dd:
                    df:16:4f:67:46:b6:0d:ee:95:db:ab:43:c0:49:22:
                    cf:9e:2b:4d:bc:ed:bb:78:a2:c4:9b:77:4d:ad:fe:
                    4c:a9:e8:e5:ae:c6:74:70:c7:39:65:d4:9c:7d:36:
                    42:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:F9:49:80:AE:6F:B3:F5:EB:D9:B9:E9:39:B7:EC:CF:B7:0D:48:65
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/kvlJgK5vs_Xr2bnpObfsz7cNSGU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:6100::/40

    Signature Algorithm: sha256WithRSAEncryption
         c0:6d:f4:f7:69:67:1f:ef:10:39:98:5d:97:67:90:93:f4:8f:
         42:5b:4b:15:df:50:4d:d8:67:63:8b:b5:3e:96:38:5d:8c:38:
         42:fd:49:55:d0:54:d0:d3:31:c3:e0:23:ff:aa:58:18:a4:d7:
         6c:5e:6d:1e:10:c8:af:ed:0d:a3:69:77:e2:ca:98:2b:77:dd:
         f4:18:e6:7f:c7:a8:53:37:42:cc:e3:f5:77:ba:41:ed:c5:f1:
         ee:3a:0c:6e:b6:0d:b1:c6:32:13:be:94:ed:1e:19:e4:55:7d:
         ef:ed:02:59:09:73:18:cd:bb:36:1a:54:6a:9f:d1:9e:93:f5:
         c4:ad:45:1d:5c:f5:4d:26:b1:e4:d0:b3:02:6b:6b:52:06:b6:
         b4:74:2e:ec:4e:70:02:08:6f:9f:b3:7b:ea:f8:73:40:fe:6c:
         42:ae:e4:63:41:be:3d:ed:75:90:fb:d0:67:1a:24:a2:b4:5e:
         c7:25:42:75:c2:e4:c1:80:20:3c:66:4a:88:a8:87:2a:83:48:
         67:38:07:3a:4d:b6:97:74:4f:cd:83:da:39:22:f1:37:98:1f:
         35:ef:5a:02:ef:d6:21:fb:74:3e:ff:95:9f:52:f8:31:03:f0:
         c6:13:fb:af:76:0a:fe:ad:27:df:d5:a2:99:99:78:9c:c5:79:
         bf:e2:44:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:15:53 2024 by rpki-client on console-ams.rpki-client.org