Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/tw9BQQ5pUCovdT_4teS-ZXql66s.roa
File:                     tw9BQQ5pUCovdT_4teS-ZXql66s.roa (raw, json)
Hash identifier:          +YX8GRWTimvh0+rcinuKTO1hKKubpo5H1E84vZepD9E=
Subject key identifier:   B7:0F:41:41:0E:69:50:2A:2F:75:3F:F8:B5:E4:BE:65:7A:A5:EB:AB
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0369
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/tw9BQQ5pUCovdT_4teS-ZXql66s.roa
Signing time:             Tue 30 Apr 2024 01:56:59 +0000
ROA not before:           Tue 30 Apr 2024 01:56:59 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:70:8::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 873 (0x369)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 01:56:59 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=B70F41410E69502A2F753FF8B5E4BE657AA5EBAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d0:23:e9:1a:7e:84:7d:73:91:0a:1b:de:5d:
                    92:2a:fe:24:e6:ff:08:13:d1:f2:05:49:cd:bc:fd:
                    fb:fe:1a:88:cb:e7:69:16:15:11:e7:d9:5d:9a:bd:
                    b8:0a:ed:3a:4c:95:a7:9a:c4:cb:71:50:9c:e4:3e:
                    7d:a9:ef:3e:01:88:01:c3:27:92:c5:5a:a0:32:e7:
                    28:88:dd:72:57:a7:93:58:d4:4e:ee:a3:05:e5:0e:
                    ac:ba:e0:cd:4d:30:60:53:7a:47:97:26:99:0c:65:
                    56:22:93:06:28:c1:93:4b:ee:64:36:95:80:1d:bc:
                    3b:9a:44:d4:91:f9:03:55:ad:92:a8:83:42:d0:33:
                    bc:00:38:30:c7:2c:9c:d1:00:87:f5:94:27:df:52:
                    4d:bf:c0:18:ca:c6:77:3d:d2:08:ab:84:d8:78:31:
                    27:39:27:7a:da:c0:49:eb:fc:f1:c9:51:11:0a:59:
                    14:61:41:22:97:76:77:b9:a7:e9:ee:de:6a:cc:00:
                    8d:87:5a:1a:54:ef:94:2d:e8:aa:04:4c:ab:71:0c:
                    db:b3:88:58:fb:e0:53:01:c1:b2:76:1d:e1:cd:05:
                    4b:db:1b:97:47:45:33:40:7e:0a:22:b7:8c:ad:8a:
                    61:19:9e:e2:c6:26:27:4a:a4:82:ce:3b:00:52:e4:
                    9d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:0F:41:41:0E:69:50:2A:2F:75:3F:F8:B5:E4:BE:65:7A:A5:EB:AB
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/tw9BQQ5pUCovdT_4teS-ZXql66s.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:70:8::/48

    Signature Algorithm: sha256WithRSAEncryption
         b8:a5:16:13:10:f4:66:04:eb:b5:8a:b4:47:4d:87:89:0e:24:
         e0:0a:64:59:a1:d4:6d:04:3f:46:a9:34:62:d1:b1:15:f4:8e:
         92:a0:0f:e2:aa:f5:27:7d:2a:c8:48:0b:3d:3c:34:24:cb:cf:
         5a:a6:d0:ac:67:21:12:57:fe:84:ed:1e:0c:a2:a7:5b:d2:51:
         d5:a4:0b:5b:be:80:5d:61:14:89:03:4e:d7:11:87:f5:a4:2a:
         f1:26:2f:d6:a6:b6:5d:b1:04:90:0a:35:2a:6e:07:b2:d9:a4:
         56:dd:a5:0c:0a:07:af:21:fd:0a:b9:b6:a6:b5:04:2f:0a:0b:
         2a:23:e3:1d:72:35:9d:41:16:67:02:52:26:6b:90:29:ae:7b:
         21:ec:1f:a9:09:e7:c4:b2:fd:30:ed:85:d8:6e:1c:45:00:df:
         87:32:92:62:42:2f:71:75:d3:2b:8c:08:d5:31:9b:da:54:05:
         70:9a:26:30:f2:88:23:62:85:f2:e5:58:87:fc:fd:f0:be:d3:
         37:96:aa:af:97:9d:05:32:76:19:95:dd:96:84:18:c3:a6:d1:
         c3:4a:db:32:81:44:07:d5:e0:67:a8:cf:e0:78:a9:08:d6:5c:
         42:92:d5:79:71:5f:e9:6d:f1:8d:16:9a:88:87:50:91:68:f6:
         32:88:70:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:31 2024 by rpki-client on console-ams.rpki-client.org