Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/rOXBGhdQXI6RLXW8RrNzorCeseg.roa
File:                     rOXBGhdQXI6RLXW8RrNzorCeseg.roa (raw, json)
Hash identifier:          ScUSyMeAApJP6Y0fs+kncVJgVVWB/kgvgN9p3u2L71c=
Subject key identifier:   AC:E5:C1:1A:17:50:5C:8E:91:2D:75:BC:46:B3:73:A2:B0:9E:B1:E8
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       02AE
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/rOXBGhdQXI6RLXW8RrNzorCeseg.roa
Signing time:             Tue 30 Apr 2024 01:39:26 +0000
ROA not before:           Tue 30 Apr 2024 01:39:26 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:1b00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 686 (0x2ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 01:39:26 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=ACE5C11A17505C8E912D75BC46B373A2B09EB1E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:43:e3:4f:17:67:c2:e0:ee:1e:dd:5c:00:51:
                    50:a1:2b:7d:b8:c9:7e:8e:64:94:5a:f9:6d:eb:d8:
                    0d:49:47:a4:a5:a9:1b:98:89:56:a9:bc:06:59:38:
                    fb:c8:a0:a4:a9:d2:85:31:27:be:a8:26:aa:ba:12:
                    51:ed:cc:6d:c2:2d:d2:df:da:49:51:e2:36:cb:f6:
                    8d:41:f8:52:61:57:ee:2a:d1:04:b3:6a:ab:cd:ac:
                    9f:58:d3:02:95:cb:58:6b:9f:5c:e3:87:20:93:f1:
                    de:f0:de:99:9c:fc:de:c8:01:89:0d:97:79:21:af:
                    6d:8e:83:24:5b:5d:e7:86:00:83:cc:4b:45:18:8a:
                    7c:71:74:b9:07:06:ba:55:25:fe:6e:92:a1:9a:7a:
                    f6:61:43:8b:28:1f:97:19:28:4c:e7:07:a3:b3:0e:
                    b1:5c:bc:fc:20:de:71:d1:69:e5:65:6a:fa:3f:bb:
                    88:f8:4e:e9:5e:40:18:c5:03:82:6a:4d:af:37:80:
                    ca:88:97:85:c6:92:58:08:ee:1d:17:d7:a6:02:ba:
                    51:79:de:c0:dc:f6:25:b9:fe:e4:65:42:a1:e5:61:
                    b3:b3:51:0b:4c:dc:b4:5d:58:36:c4:d7:c9:9a:55:
                    43:e2:ed:76:f0:6b:8f:40:b8:9d:60:04:92:f5:75:
                    e2:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:E5:C1:1A:17:50:5C:8E:91:2D:75:BC:46:B3:73:A2:B0:9E:B1:E8
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/rOXBGhdQXI6RLXW8RrNzorCeseg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:1b00::/40

    Signature Algorithm: sha256WithRSAEncryption
         3f:7e:1d:ae:fb:21:e4:00:8a:35:b7:ce:aa:69:4d:9c:6d:b9:
         6f:0f:65:c5:4d:b8:fc:fd:13:dc:e5:74:8a:20:c4:36:fc:17:
         09:25:a7:3b:11:22:a7:2f:a6:6b:4c:77:06:69:f3:40:58:0c:
         db:7b:a6:36:71:14:1e:ca:94:36:c2:e3:84:6c:42:0a:7a:f4:
         62:57:53:9c:94:89:1c:20:00:ae:45:08:c0:d9:98:25:ad:cb:
         a3:74:18:14:a8:44:74:a9:1d:f9:6a:e1:47:1e:04:1a:4b:b9:
         9c:8b:8a:b6:d9:24:61:31:43:89:c6:ab:2e:86:f3:b4:65:98:
         df:f5:94:e2:db:12:6a:9c:c4:8e:af:6d:cb:5a:94:05:27:2f:
         62:06:71:f2:0d:b9:82:b3:fd:58:6b:3a:89:f4:f3:fa:7d:83:
         89:fa:b3:96:2e:84:47:cf:0a:11:aa:9c:d5:0d:61:ce:50:95:
         bc:61:51:0b:1d:27:8c:b1:5c:9a:bc:1d:ee:7a:97:a7:91:16:
         ec:b2:fb:f9:84:9e:00:d1:e4:96:75:d6:b2:01:2e:bd:77:89:
         9c:46:a7:11:9f:ee:1b:ee:82:cf:49:72:3a:60:20:b8:e0:21:
         e7:bb:2b:e9:a8:8f:be:86:5d:07:14:70:37:ab:62:d7:00:51:
         17:fd:08:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:34 2024 by rpki-client on console-ams.rpki-client.org