Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/npKGIxYgfJRZ41nPQDeLy3YeGb4.roa
File:                     npKGIxYgfJRZ41nPQDeLy3YeGb4.roa (raw, json)
Hash identifier:          H5xI2p6vhsN/J+UaFN3fyGYfUu5H6F5LvDPhdxtEh1E=
Subject key identifier:   9E:92:86:23:16:20:7C:94:59:E3:59:CF:40:37:8B:CB:76:1E:19:BE
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0281
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/npKGIxYgfJRZ41nPQDeLy3YeGb4.roa
Signing time:             Tue 30 Apr 2024 01:32:18 +0000
ROA not before:           Tue 30 Apr 2024 01:32:18 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:300::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 641 (0x281)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 01:32:18 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=9E92862316207C9459E359CF40378BCB761E19BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:46:6b:b8:95:19:dd:39:49:b2:88:b2:5e:52:
                    37:d2:b4:5a:c7:62:c6:3d:a1:18:f5:80:76:35:b6:
                    b4:02:8d:28:3b:c1:31:3f:a2:03:2b:bc:84:f8:6b:
                    1f:91:d1:da:ae:6f:70:49:eb:50:aa:0c:0c:5e:01:
                    6a:67:e0:c5:9e:9d:22:d5:4b:30:e5:04:68:06:91:
                    89:9b:42:9c:ad:38:77:99:e3:82:cb:25:a5:03:85:
                    6a:b6:98:94:54:7d:cc:62:dc:f9:1d:aa:0d:90:55:
                    0c:44:da:76:4f:74:58:e2:3a:22:b2:7c:65:36:f5:
                    88:e6:0b:ad:51:a9:99:ed:b9:8e:26:8e:0f:de:96:
                    5e:a8:06:d3:00:d5:51:9b:1c:22:b3:08:13:1d:e1:
                    3a:d1:b9:cd:87:3f:81:1c:c3:d1:1d:5a:81:33:31:
                    d1:6e:90:87:58:9a:38:6e:00:ae:5c:8d:33:4c:fb:
                    9b:84:72:89:00:1e:6b:43:b2:af:72:63:02:e3:10:
                    2c:38:3b:6b:e7:c9:3e:79:b8:5d:9c:1d:91:5e:bf:
                    f3:d4:21:c8:70:82:b6:91:d9:bf:53:1a:78:99:dc:
                    3f:6d:59:51:46:ea:5a:b3:c0:55:82:c0:72:47:9a:
                    c4:ad:9d:f8:28:23:d4:a5:d9:7b:57:f4:3b:84:1e:
                    1e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:92:86:23:16:20:7C:94:59:E3:59:CF:40:37:8B:CB:76:1E:19:BE
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/npKGIxYgfJRZ41nPQDeLy3YeGb4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         75:35:d9:7d:d1:e0:53:41:ed:60:5d:e1:c9:2d:a7:c4:fb:e8:
         b9:54:ce:bc:bf:59:16:fc:de:df:e9:3c:db:a9:ef:a3:dc:e7:
         47:17:b5:23:72:2e:29:ee:d5:da:b9:bc:5a:61:15:e3:67:cc:
         3e:8c:7c:4c:c7:38:fa:ec:87:f0:07:6b:53:ed:d2:63:0f:29:
         24:ec:05:05:14:37:33:39:73:4c:d1:26:91:0f:38:45:a6:f3:
         7f:54:7a:12:69:6b:19:2e:55:c6:18:89:ca:53:af:af:44:5c:
         1f:67:fb:42:07:24:53:3c:64:97:f6:de:5f:fb:87:bc:4d:56:
         a4:ba:87:aa:37:7a:71:74:03:17:4b:d7:ec:e9:11:d2:43:2b:
         d9:d5:da:c7:d3:6d:5f:5e:3d:5f:49:c0:1a:d2:64:ac:2f:63:
         df:44:b1:9b:80:41:3d:c8:34:83:50:4b:9c:2c:5b:d4:cf:63:
         36:cd:0e:d5:7a:76:56:7b:5a:65:20:31:6d:48:6e:06:70:05:
         26:82:62:72:f7:c8:83:51:bc:d6:81:85:e0:2a:2f:f7:39:a3:
         30:69:ff:54:4d:b5:c0:75:02:4c:ff:07:8f:eb:b1:ea:14:bd:
         bd:22:eb:ec:ee:40:a7:ff:2a:02:d2:a5:bc:1c:77:ba:71:1c:
         13:74:81:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:07 2024 by rpki-client on console-fra.rpki-client.org