Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/qqCjqy3SwMvUkpaY3uLTkbylVPY.roa
File:                     qqCjqy3SwMvUkpaY3uLTkbylVPY.roa (raw, json)
Hash identifier:          zzVpGVlQjhjQ9fZSkvxQBRgLX4cn6Rh7Fa7ieJ39Sn4=
Subject key identifier:   AA:A0:A3:AB:2D:D2:C0:CB:D4:92:96:98:DE:E2:D3:91:BC:A5:54:F6
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0327
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/qqCjqy3SwMvUkpaY3uLTkbylVPY.roa
Signing time:             Tue 30 Apr 2024 01:50:57 +0000
ROA not before:           Tue 30 Apr 2024 01:50:57 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:2:c90::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 22:26:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 807 (0x327)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 01:50:57 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=AAA0A3AB2DD2C0CBD4929698DEE2D391BCA554F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7d:a2:2b:a6:f7:06:25:ad:b1:bc:a6:74:37:
                    b6:88:81:0b:30:a6:fa:31:2f:0b:af:96:b2:5f:d1:
                    d4:24:55:99:f6:19:ae:4d:30:bb:0b:e9:0b:09:13:
                    21:a5:a6:28:91:7e:83:29:20:e1:05:13:2c:59:7f:
                    70:a6:76:f5:53:8b:75:e1:5d:d9:3d:05:f9:28:30:
                    6d:fb:6e:47:ea:8b:bb:ab:eb:99:b3:b3:c5:62:47:
                    8a:b1:08:61:ca:7d:dc:b7:56:2e:91:80:fe:3a:35:
                    ca:9e:3f:16:9b:31:b9:a3:32:77:21:12:f0:dd:90:
                    6f:6b:88:a7:29:ec:f1:f8:76:34:80:32:55:ac:e5:
                    b6:01:02:65:b4:76:2e:67:5d:42:8e:a5:d3:e9:88:
                    85:77:03:2d:1b:5a:64:23:53:77:9f:c4:03:b2:db:
                    37:56:b7:2f:4a:2d:81:f2:6d:ec:a5:f1:1d:16:0a:
                    b0:36:b1:bb:1b:76:59:a7:57:c7:1f:cb:97:a8:49:
                    fc:3f:a9:66:98:f0:c6:96:b3:8c:38:6d:bc:00:18:
                    e7:c0:0f:ab:4c:93:e2:17:7e:8d:e0:e3:40:49:b3:
                    35:77:10:58:88:cd:64:79:e2:ac:7c:5d:d9:6d:a7:
                    3a:f7:0e:06:34:6d:7c:03:55:1d:6e:6c:35:44:89:
                    b5:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:A0:A3:AB:2D:D2:C0:CB:D4:92:96:98:DE:E2:D3:91:BC:A5:54:F6
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/qqCjqy3SwMvUkpaY3uLTkbylVPY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:2:c90::/44

    Signature Algorithm: sha256WithRSAEncryption
         42:19:54:99:a8:e4:4b:bb:b2:f0:4b:7e:4b:a5:1c:bf:5a:f0:
         34:1b:13:3d:82:fa:ff:b1:f0:4e:8a:49:05:05:9d:1b:1b:c6:
         22:c3:fb:81:14:b6:76:fd:af:2b:c2:b6:76:f2:e5:d4:4a:07:
         3b:4a:d6:89:c7:56:3d:b3:b7:c7:25:07:8f:a3:29:e8:e4:35:
         9b:b6:e8:9e:2f:21:46:a5:69:2b:56:ac:67:0a:5e:97:27:4d:
         2b:7a:2f:b6:2b:98:7d:88:f4:ff:24:39:57:7f:8a:93:9a:65:
         e0:a5:ab:c7:39:08:2e:2b:39:d0:84:31:2b:72:71:e9:26:1d:
         60:19:fc:06:14:8f:a5:63:94:2e:14:44:51:31:66:7b:a9:9c:
         c3:16:72:ee:01:cf:2c:59:69:14:72:6a:13:b4:21:67:f0:de:
         dc:ce:73:eb:80:33:62:92:2c:b8:be:73:5b:f9:28:df:44:bb:
         c6:58:99:a8:03:77:c9:4f:d7:7c:cd:23:86:c8:a1:e3:03:15:
         4d:ba:8b:6d:c3:ec:e6:45:ef:33:ee:4e:8c:14:c3:6d:47:ce:
         4c:04:ba:b3:35:47:f2:92:cc:d2:dd:1b:02:06:da:19:a1:bb:
         a2:d4:12:74:3e:48:7c:0f:4b:81:5b:37:19:c8:dc:ed:0c:ca:
         28:15:ca:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 00:11:43 2024 by rpki-client on console-ams.rpki-client.org