Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/rWpyLNDGop39YFA7jBxaKA-HmGQ.roa
File:                     rWpyLNDGop39YFA7jBxaKA-HmGQ.roa (raw, json)
Hash identifier:          1YYWnHvwECRzDCLLoybSYjkVxkh2zgVokDSjvjjH5xM=
Subject key identifier:   AD:6A:72:2C:D0:C6:A2:9D:FD:60:50:3B:8C:1C:5A:28:0F:87:98:64
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       027B
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/rWpyLNDGop39YFA7jBxaKA-HmGQ.roa
Signing time:             Tue 30 Apr 2024 01:32:16 +0000
ROA not before:           Tue 30 Apr 2024 01:32:16 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:ea00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 20:52:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 635 (0x27b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 01:32:16 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=AD6A722CD0C6A29DFD60503B8C1C5A280F879864
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:76:f0:e0:be:8b:54:b3:05:94:d0:43:5b:b4:
                    da:9b:aa:76:1b:16:4e:59:36:48:5e:c8:b1:b3:3d:
                    7f:fc:3a:1f:1f:d2:c7:c9:e5:98:6a:c3:b8:e6:4c:
                    e5:10:98:98:60:98:9d:69:c2:72:a8:1b:c2:ee:0d:
                    c0:e8:e5:4b:54:d8:f3:38:f1:3c:3a:ca:38:d8:e4:
                    5c:22:02:f9:20:43:f3:98:2b:8b:a3:c5:a2:b6:4c:
                    fa:0d:f9:04:67:59:c5:cb:4a:4f:b6:c9:a6:ad:58:
                    fe:fa:96:1d:24:74:49:38:7d:cc:a6:4b:fb:e1:3a:
                    70:14:f8:67:05:e2:94:bd:40:28:29:b4:5e:66:57:
                    d5:9d:c6:01:46:71:bb:7b:fd:a5:33:d7:ed:b3:68:
                    82:ab:6f:f7:d3:40:e9:6b:7b:fe:9a:ce:e7:de:96:
                    40:11:c5:c7:b5:ef:c1:c6:7b:c8:e9:c7:3e:1c:0a:
                    4d:02:8b:59:23:be:d8:09:30:b7:cd:f8:67:fa:35:
                    0c:7c:d3:02:9a:06:18:86:90:15:f1:ab:b4:42:1b:
                    d9:ea:c1:f2:4b:b0:e1:aa:39:33:9d:89:67:e8:c0:
                    79:fc:09:d7:2c:d6:4b:56:f0:95:87:c7:af:f9:a7:
                    99:ce:bb:cd:ad:0d:be:82:57:30:4c:70:39:c5:75:
                    7f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:6A:72:2C:D0:C6:A2:9D:FD:60:50:3B:8C:1C:5A:28:0F:87:98:64
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/rWpyLNDGop39YFA7jBxaKA-HmGQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:ea00::/40

    Signature Algorithm: sha256WithRSAEncryption
         05:8b:28:61:3f:b2:70:3a:3d:03:27:96:40:9d:dd:0e:1b:21:
         ad:0e:47:01:9b:e3:db:de:36:82:85:f8:9e:b5:ce:2a:71:22:
         2c:c6:c3:18:21:c0:cd:00:9a:ca:e0:1a:44:45:d8:7c:5c:37:
         a9:39:a4:03:70:dc:cc:eb:90:d2:89:f9:f6:9f:7d:c7:fa:c4:
         97:00:fd:d4:25:3d:a6:46:a9:51:94:c4:ff:06:12:02:25:ac:
         15:c9:75:a8:d5:93:78:5b:0b:c1:c6:6d:90:2f:8c:8b:02:2a:
         95:21:f6:7a:71:08:13:fd:80:76:17:f0:db:85:07:65:09:90:
         b9:f8:f9:ab:a5:92:f7:c6:87:65:05:d7:3c:23:4a:28:86:b6:
         1e:27:72:dd:4f:df:a7:51:bc:bf:d1:ff:e1:95:d6:4d:4b:d3:
         52:4f:d9:c5:6b:12:29:f7:e2:b0:92:4c:89:4f:31:1d:2d:de:
         ae:81:11:c7:df:63:54:da:4d:2d:b5:85:91:0d:b1:71:06:34:
         a8:bd:77:a7:d8:2e:3a:ce:f8:35:c6:ce:bb:fe:9c:ba:f3:47:
         68:a9:21:be:bc:51:fd:15:52:e1:bb:82:13:b4:80:9c:76:a4:
         74:6c:81:f1:1e:cb:3f:65:ca:71:64:d6:53:ac:87:27:7b:5d:
         f7:83:47:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 21:52:34 2024 by rpki-client on console-fra.rpki-client.org