Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/p6Qh98UNOg0hNnbGkDiB1B-Hhpg.roa
File:                     p6Qh98UNOg0hNnbGkDiB1B-Hhpg.roa (raw, json)
Hash identifier:          kyxLXJRXNV5pNI9R32V61NMj3uXOC3pjslkJry1fM4U=
Subject key identifier:   A7:A4:21:F7:C5:0D:3A:0D:21:36:76:C6:90:38:81:D4:1F:87:86:98
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0306
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/p6Qh98UNOg0hNnbGkDiB1B-Hhpg.roa
Signing time:             Tue 30 Apr 2024 01:48:12 +0000
ROA not before:           Tue 30 Apr 2024 01:48:12 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:8700::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 774 (0x306)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 01:48:12 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=A7A421F7C50D3A0D213676C6903881D41F878698
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:2c:fb:f9:63:18:a1:aa:53:a6:fa:10:b3:d2:
                    e7:b3:b9:6f:74:ed:bd:51:5a:02:a2:35:b1:93:dc:
                    b9:d4:32:b0:28:cc:d4:7d:6d:95:9b:ba:4a:e8:05:
                    f0:db:ed:8a:08:9b:ca:f1:85:fb:89:a4:87:25:8b:
                    57:0f:27:97:a4:48:de:9d:dd:c1:da:5f:a3:2a:b8:
                    1a:e8:5e:1c:6e:5d:47:69:a9:cb:03:ea:99:0c:5e:
                    97:7b:54:dc:6f:9b:45:48:f9:b1:ed:0d:a3:58:44:
                    f2:fd:16:df:da:27:4f:20:b2:39:4c:da:83:a1:e7:
                    9d:c7:b4:02:fc:8d:cd:29:41:35:ca:1c:61:dd:b6:
                    14:34:12:42:54:78:16:66:ff:0c:76:83:fc:fa:69:
                    af:53:2e:41:fb:7a:6b:76:61:5c:e4:44:d8:86:6d:
                    77:06:f0:9b:a4:1d:42:93:f0:1e:f7:7f:81:da:52:
                    af:37:9b:f6:d8:92:2e:8f:04:3a:f8:1c:bd:d9:4f:
                    47:67:36:94:6b:6d:82:35:ed:ca:55:ce:90:4b:39:
                    a2:c2:3a:f0:b2:b5:4d:56:ec:66:f0:c8:73:11:14:
                    fe:f4:35:f4:d0:85:e0:d8:f6:c5:c7:99:c6:fe:4c:
                    02:cc:63:a3:da:70:15:0c:fc:33:ac:09:d3:75:99:
                    c4:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:A4:21:F7:C5:0D:3A:0D:21:36:76:C6:90:38:81:D4:1F:87:86:98
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/p6Qh98UNOg0hNnbGkDiB1B-Hhpg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:8700::/40

    Signature Algorithm: sha256WithRSAEncryption
         61:f5:6a:f5:7b:7e:e1:03:2b:83:cf:bd:ef:2e:89:54:c8:e6:
         f3:21:5c:54:a9:5c:4f:73:5b:26:7d:f8:92:3c:77:78:8a:13:
         45:1e:94:f5:d4:67:ee:60:3c:98:d4:1e:21:28:13:e5:19:50:
         31:bf:5d:d3:44:b3:70:df:57:5c:6f:92:68:b3:b5:4b:44:e2:
         99:1c:bc:c1:18:01:3f:84:44:1b:00:77:1f:2c:d4:85:f2:44:
         37:30:c9:ba:75:a5:80:e9:8e:ac:cf:b9:6c:58:e5:9f:e7:33:
         dd:85:54:dd:db:c6:89:3b:39:4b:c5:1a:59:3c:d0:5e:86:b2:
         7a:30:de:1e:fe:9b:f2:09:37:29:0b:0b:8a:98:74:2c:46:5a:
         21:b9:22:27:6a:d6:d9:c1:07:ac:bc:31:0d:d4:e3:78:98:18:
         11:73:de:1b:0f:e1:b9:ed:3b:36:6f:ef:5a:c5:e8:3e:0a:0f:
         9d:aa:00:4a:b0:1c:20:37:ff:78:a3:b8:aa:7c:00:2b:fe:d6:
         6e:84:09:09:c6:10:7c:c2:0f:f4:7a:66:0f:30:51:ed:e2:ec:
         bc:26:ff:69:6d:11:bc:fd:31:11:28:c0:dd:1c:a6:93:a7:c0:
         8d:06:5a:62:85:09:7c:3a:e9:f0:19:81:1f:16:07:88:13:05:
         c6:6e:93:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:07 2024 by rpki-client on console-fra.rpki-client.org