Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ljJ0OJllUTCY5x13WQsg_QHKrbQ.roa
File:                     ljJ0OJllUTCY5x13WQsg_QHKrbQ.roa (raw, json)
Hash identifier:          4J/eJRkAQnC4740+V4qPpvC1JQlsdBcx497DOIwpptk=
Subject key identifier:   96:32:74:38:99:65:51:30:98:E7:1D:77:59:0B:20:FD:01:CA:AD:B4
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0384
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ljJ0OJllUTCY5x13WQsg_QHKrbQ.roa
Signing time:             Tue 30 Apr 2024 02:00:07 +0000
ROA not before:           Tue 30 Apr 2024 02:00:07 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:ee00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 900 (0x384)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 02:00:07 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=963274389965513098E71D77590B20FD01CAADB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:08:8c:5c:33:25:86:00:90:2e:f9:78:92:e3:
                    2c:0a:7a:4a:8f:b4:10:8f:ae:21:ce:c8:77:55:43:
                    a1:4c:1b:ae:fb:f0:a5:ab:86:6b:d5:02:b7:e8:e3:
                    8b:3b:a6:b1:8b:48:2e:28:f7:8e:23:d2:15:29:00:
                    92:f8:73:8f:52:55:ef:df:dc:fa:c4:d5:b8:63:d2:
                    cd:96:0b:49:4b:a2:9d:aa:a0:29:c9:82:87:3c:cc:
                    b0:b9:62:b3:cd:a1:75:6b:81:f5:fe:8e:ae:c3:86:
                    de:62:40:5b:fd:e3:96:38:49:00:80:fe:32:04:2e:
                    9c:2a:9d:e3:f8:14:9b:01:93:6e:36:69:50:f1:17:
                    6b:a8:21:d0:71:4c:e5:d5:ed:17:da:ba:6c:c5:7e:
                    8b:64:6f:9c:22:97:6e:cd:29:ce:5b:f0:88:75:83:
                    75:06:d6:43:b5:f0:c8:56:13:38:77:b8:51:74:ee:
                    01:c1:0d:0c:3d:cd:fd:2c:b2:84:2f:62:90:fc:c8:
                    2d:a1:21:5a:e2:b6:e1:ad:dd:c7:84:77:27:a2:d5:
                    5e:9b:e2:69:0f:3f:22:83:77:fb:5f:71:26:40:e4:
                    56:c3:02:86:ca:31:86:8a:6a:3e:65:88:78:c5:93:
                    ec:4c:19:e4:03:ce:4a:62:38:4e:54:25:f9:1f:6f:
                    74:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:32:74:38:99:65:51:30:98:E7:1D:77:59:0B:20:FD:01:CA:AD:B4
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ljJ0OJllUTCY5x13WQsg_QHKrbQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:ee00::/40

    Signature Algorithm: sha256WithRSAEncryption
         5e:a0:5d:85:7d:f7:08:d3:12:f1:80:29:59:74:04:00:4a:a6:
         4e:98:6f:98:ff:34:89:93:8f:e7:38:3c:07:aa:83:97:b8:db:
         72:9e:9b:51:19:09:33:bc:f0:b1:91:a0:2b:9e:e6:b6:8f:bf:
         34:f9:9c:9d:cb:dc:ed:bc:44:77:e3:4a:35:45:59:9f:4e:65:
         ae:a6:29:3e:62:45:c0:77:b2:8c:a3:fd:5e:3d:ed:2f:50:54:
         c7:ef:1b:d9:bc:3b:97:e5:10:da:1a:34:a6:f6:f3:ad:61:70:
         0b:73:1c:af:bf:c6:0a:4a:e3:e2:2a:92:e9:08:71:32:eb:61:
         e7:af:07:28:38:f0:f9:50:13:5e:a4:32:bc:d3:38:fa:fb:70:
         b6:15:1b:7c:bc:05:0c:e6:ef:80:bd:9d:63:55:c3:60:5b:e6:
         f4:ea:bf:06:2c:35:34:c0:f8:13:20:b2:f7:77:40:c9:ca:56:
         15:6b:db:6d:08:e5:6b:49:03:db:57:4c:cb:33:84:5b:fc:e6:
         53:87:7b:dc:b3:1c:d2:b6:f5:6e:71:da:f8:be:d4:9a:71:4c:
         d4:d2:3c:2e:b9:da:5d:ad:0b:79:17:9d:ae:8c:e5:fb:29:af:
         03:23:e0:5d:08:35:56:08:81:e0:9c:a8:51:1c:5e:91:06:6d:
         df:fa:8d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:34 2024 by rpki-client on console-ams.rpki-client.org