Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/n9NGBFP0uB3I92gkcpPx8fb099A.roa
File:                     n9NGBFP0uB3I92gkcpPx8fb099A.roa (raw, json)
Hash identifier:          1iBTnJAznotpVnvL2Dc0eZ/axon3IcyKDYWb2hhgn7s=
Subject key identifier:   9F:D3:46:04:53:F4:B8:1D:C8:F7:68:24:72:93:F1:F1:F6:F4:F7:D0
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       033A
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/n9NGBFP0uB3I92gkcpPx8fb099A.roa
Signing time:             Tue 30 Apr 2024 01:54:00 +0000
ROA not before:           Tue 30 Apr 2024 01:54:00 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:d100::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 20:52:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 826 (0x33a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 01:54:00 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=9FD3460453F4B81DC8F768247293F1F1F6F4F7D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0b:f4:cb:53:93:95:b7:df:7b:e9:5a:ff:54:
                    8d:94:b1:87:e3:da:5b:54:3e:b6:65:c1:51:6f:85:
                    49:91:1c:b5:d7:96:2f:9f:98:90:26:ef:0f:73:a9:
                    af:fe:93:eb:71:c1:0b:be:7e:fc:82:40:57:22:24:
                    fa:6e:9d:79:c3:3b:6b:62:04:d2:4d:07:8e:dc:3c:
                    bc:6d:a9:6a:3b:00:4a:ab:40:6d:14:36:0d:db:9b:
                    3c:74:f3:5c:6c:d8:0a:2c:76:b8:92:87:7a:d6:63:
                    16:61:77:3d:71:c4:fa:15:1a:ce:82:94:f4:9f:68:
                    4a:5a:08:99:c5:df:46:46:29:2e:f6:31:34:1b:45:
                    31:4b:94:2a:58:c2:66:68:60:2c:77:3f:3c:37:82:
                    34:ab:b6:0e:12:bd:73:fd:ee:68:ff:e0:73:03:bb:
                    05:db:fa:5f:fb:11:80:87:14:65:e8:95:3b:e1:15:
                    e8:2d:04:bb:41:f7:21:a0:62:a9:6e:2c:e7:28:f7:
                    08:e1:c6:01:26:a5:b4:a0:62:a0:df:18:97:6b:e3:
                    ad:9e:72:f9:75:d9:3f:1b:4a:a7:70:90:66:69:df:
                    50:14:6f:04:d5:53:4b:4c:98:f7:aa:b0:87:e4:81:
                    e7:ea:8e:e8:19:9b:dd:22:fd:37:ef:ad:91:35:1e:
                    29:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:D3:46:04:53:F4:B8:1D:C8:F7:68:24:72:93:F1:F1:F6:F4:F7:D0
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/n9NGBFP0uB3I92gkcpPx8fb099A.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:d100::/40

    Signature Algorithm: sha256WithRSAEncryption
         37:9e:b3:96:7a:00:bc:b5:20:7b:fc:a6:14:9d:9b:ff:4c:91:
         98:2b:ad:26:da:3e:32:b0:1d:47:7d:4f:48:32:4c:dd:8e:b4:
         5b:f7:e6:1f:49:45:a2:87:e1:27:4d:36:5d:90:6e:bd:01:b1:
         cb:1b:4c:79:23:8e:cb:96:81:19:a4:1a:8f:3f:f8:d7:45:2f:
         de:3e:91:c8:71:bc:ea:c9:b8:b2:02:a9:f5:0b:1d:51:49:93:
         67:74:ea:a6:4c:6d:35:a3:db:37:be:e6:a0:2a:56:1a:a1:8a:
         b6:d6:26:d3:27:2a:47:40:2d:93:ae:0d:79:13:2a:c8:11:cd:
         3d:8a:a9:c2:8a:c4:c6:ba:50:c0:5e:24:f3:f3:27:25:aa:76:
         f2:02:6d:34:ba:dd:21:ab:65:2e:5b:ea:17:89:08:42:b2:34:
         1d:3c:cc:b3:df:f1:79:84:09:d9:a9:99:6f:55:15:65:91:c6:
         75:ec:68:87:12:a0:bf:5d:f8:e9:72:95:99:ca:a5:5d:8b:fd:
         6f:f8:0d:16:53:c6:32:39:23:27:26:2e:9d:0c:0e:37:44:e2:
         66:cd:8f:81:b8:37:fe:dc:20:30:8d:fa:82:a6:9a:c1:8d:3b:
         be:00:68:8d:18:0b:b8:78:19:07:4e:7b:3e:2d:f4:fd:c6:a3:
         c9:18:1a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 21:52:34 2024 by rpki-client on console-fra.rpki-client.org