Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/lPs1SBLGsaj_FKT0nK7RezXLbx8.roa
File:                     lPs1SBLGsaj_FKT0nK7RezXLbx8.roa (raw, json)
Hash identifier:          7Wr1QcQWicrNXF978lhGemIR7z68czfqpHj9koG3d/c=
Subject key identifier:   94:FB:35:48:12:C6:B1:A8:FF:14:A4:F4:9C:AE:D1:7B:35:CB:6F:1F
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       02FA
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/lPs1SBLGsaj_FKT0nK7RezXLbx8.roa
Signing time:             Tue 30 Apr 2024 01:48:08 +0000
ROA not before:           Tue 30 Apr 2024 01:48:08 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:9900::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 20:52:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 762 (0x2fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 01:48:08 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=94FB354812C6B1A8FF14A4F49CAED17B35CB6F1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:47:39:33:2b:88:76:f3:ec:cb:f2:93:2b:a9:
                    8a:59:11:6e:b6:f6:df:f5:89:94:a1:2e:ef:d3:03:
                    01:c9:65:d1:3b:56:05:0b:d5:dc:d2:29:dd:06:65:
                    06:fc:e8:97:6b:bf:ad:af:f8:c3:9a:ab:1a:c4:5b:
                    0c:21:da:08:91:80:0f:5d:30:6e:27:55:91:9d:85:
                    7b:8a:24:82:5f:7a:5b:89:ce:bd:a1:8a:62:57:28:
                    7c:a8:02:00:d7:5d:fd:f1:cf:9c:d8:0c:6d:0c:9b:
                    5f:8b:05:bf:5b:d6:43:48:6b:4c:83:8e:3a:16:ac:
                    0a:8f:90:8d:8a:f1:ad:65:bb:44:24:92:79:bc:4e:
                    28:65:8a:b8:37:98:c8:ed:51:60:a1:e4:02:4e:dc:
                    b5:ef:7e:e1:09:32:21:25:a1:49:f3:47:cf:53:e7:
                    ee:44:49:58:6d:c9:ee:71:f2:59:ec:ff:84:3d:b5:
                    80:19:f4:52:24:4d:45:2f:d5:88:d2:9b:de:d1:ba:
                    b7:8b:4a:e3:e3:c4:46:2d:8e:08:2b:02:80:fa:f3:
                    04:c4:58:4b:04:11:28:48:2d:97:55:6c:ca:5b:db:
                    b8:02:2d:10:70:42:0e:26:bf:f6:9d:e1:b9:a3:5f:
                    fa:9f:65:fa:0b:c5:6d:36:25:a5:fb:15:b5:66:04:
                    d1:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:FB:35:48:12:C6:B1:A8:FF:14:A4:F4:9C:AE:D1:7B:35:CB:6F:1F
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/lPs1SBLGsaj_FKT0nK7RezXLbx8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:9900::/40

    Signature Algorithm: sha256WithRSAEncryption
         74:2a:72:7b:fb:c1:a9:fe:3d:0b:54:97:38:66:03:a2:12:1e:
         42:ce:40:24:3f:d9:40:0e:52:c6:21:b7:47:ef:f4:89:98:39:
         f3:9b:d3:e2:12:bf:a0:3c:8a:5f:28:3e:a2:f9:b3:a0:34:f1:
         03:7f:cf:4f:ef:aa:7e:a0:b0:1c:f0:c2:cc:a0:21:49:ce:a6:
         bb:51:bf:77:d7:9b:3c:0d:ca:ad:24:a6:26:57:aa:37:24:75:
         cc:7a:8a:13:1c:6d:63:44:de:8b:c5:f6:74:55:ac:75:4e:03:
         ed:df:70:8c:71:9e:23:f5:fc:52:ee:7a:31:09:a7:c0:88:90:
         11:4b:bb:50:4f:d2:bd:1d:a2:3f:30:78:40:8f:8a:fb:fe:c9:
         30:f9:5a:f2:0c:e0:10:52:d0:90:83:1d:27:c4:95:77:a3:62:
         03:c9:d1:f4:e7:1c:17:99:b7:8d:29:1d:c0:ae:72:9b:d7:85:
         50:83:8b:3f:a8:84:71:09:d4:47:a4:bc:8f:33:22:21:72:a6:
         2d:e6:86:0b:c2:5a:47:a2:5a:57:a8:9e:fb:2a:5d:06:46:13:
         1a:ea:4b:55:5c:1a:38:de:7a:93:08:c4:b0:8a:e3:37:8c:aa:
         ed:6c:ac:6c:c5:a1:2c:7b:5a:7a:46:a3:69:71:9a:1f:f5:ba:
         07:2f:5e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 21:52:34 2024 by rpki-client on console-fra.rpki-client.org