Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/nZFPdhDlcvL3ShnEpi0kdkAptQQ.roa
File:                     nZFPdhDlcvL3ShnEpi0kdkAptQQ.roa (raw, json)
Hash identifier:          xTks25ZP14D9t0Azwki++adn3jvDJ5x3agv2UGJ6CHc=
Subject key identifier:   9D:91:4F:76:10:E5:72:F2:F7:4A:19:C4:A6:2D:24:76:40:29:B5:04
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0376
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/nZFPdhDlcvL3ShnEpi0kdkAptQQ.roa
Signing time:             Tue 30 Apr 2024 01:59:59 +0000
ROA not before:           Tue 30 Apr 2024 01:59:59 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:7500::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 20:52:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 886 (0x376)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 01:59:59 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=9D914F7610E572F2F74A19C4A62D24764029B504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ec:60:c1:c1:ca:a9:bb:36:09:78:30:4e:e8:
                    21:07:85:50:03:98:fb:70:c5:e7:a4:ba:9b:6e:ba:
                    ec:b6:c2:56:c4:c9:b8:e3:83:95:c6:14:f3:33:d7:
                    9f:5a:7f:68:7a:e0:3a:54:37:5b:f6:a5:22:fc:02:
                    a2:b7:12:b5:f5:d5:b0:71:05:83:cc:9d:e6:39:ab:
                    59:59:ef:3c:94:c8:e7:79:7c:28:02:29:c2:82:07:
                    dc:a4:97:0a:35:b7:6f:43:c6:10:be:c6:2b:9e:6d:
                    bb:a4:83:1c:19:4d:23:50:70:6d:f3:bd:6f:d1:e6:
                    1a:6c:44:92:76:3b:eb:85:f7:13:d2:f3:4a:e2:b4:
                    26:d3:a7:33:27:21:0d:9c:e6:27:65:52:d6:e5:e2:
                    28:e8:21:2c:a0:ac:30:33:b7:8d:8e:d5:94:03:0c:
                    4d:ee:0f:bd:1e:cd:39:40:0a:66:9c:b3:eb:63:c7:
                    51:78:19:43:98:29:8e:a0:f8:fe:a7:74:ae:a4:32:
                    c6:64:b8:a2:63:fa:45:f9:aa:4c:ee:5a:e6:3c:9a:
                    3c:f8:8c:80:e2:38:a8:55:bf:e6:0c:39:2d:c4:52:
                    33:57:25:db:55:d7:ef:61:88:df:21:d7:e5:73:35:
                    05:50:04:8c:de:2a:46:88:6e:56:a1:77:fe:fd:a2:
                    b2:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:91:4F:76:10:E5:72:F2:F7:4A:19:C4:A6:2D:24:76:40:29:B5:04
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/nZFPdhDlcvL3ShnEpi0kdkAptQQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:7500::/40

    Signature Algorithm: sha256WithRSAEncryption
         b1:96:41:ea:fd:71:18:bf:a4:b5:b6:61:9a:c2:e4:e7:9c:c4:
         49:3e:7e:a5:54:ef:d2:4f:62:17:e1:4e:09:da:15:72:1d:61:
         2a:0e:6a:ff:19:3c:e2:1c:78:8a:b9:06:b7:d4:b1:c6:73:a1:
         bf:e9:2e:61:de:8f:2c:cb:30:2d:65:58:25:3e:0f:eb:a2:49:
         5c:3b:ee:b9:1c:42:e2:f2:ec:4d:55:a2:e8:d9:65:09:1e:43:
         f4:80:b8:ea:ef:3b:a6:b0:b0:7e:10:37:58:7d:e7:c8:13:a4:
         fe:2b:2d:c3:30:50:70:39:31:95:f5:41:28:7f:62:be:8b:ef:
         f1:4f:4b:2b:7a:3c:44:9b:7b:e7:b5:8f:8e:c6:49:28:b5:8b:
         d0:ea:40:95:9a:fe:68:c7:90:9f:77:33:6b:c6:43:65:96:64:
         72:bc:84:f5:76:54:13:bc:b2:77:b7:83:95:90:60:5e:4e:f1:
         4b:77:55:28:41:de:42:60:2d:8c:6d:17:43:3c:4f:ff:8c:39:
         b7:29:b7:ab:7a:dc:9d:eb:33:ee:35:84:70:a5:4c:1b:ef:60:
         d9:17:60:72:ea:fe:5a:4f:1a:b2:97:78:7e:af:18:5f:28:d7:
         11:e5:a8:bf:3d:b0:92:cc:34:5e:65:3b:fa:32:be:69:13:5a:
         18:b6:82:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 21:52:34 2024 by rpki-client on console-fra.rpki-client.org