Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/uL2D5YGQPb9NGJ1tF3XVKLjTtXE.roa
File:                     uL2D5YGQPb9NGJ1tF3XVKLjTtXE.roa (raw, json)
Hash identifier:          T4TAflUJ9600FjsV9+aSVRx5Yod7D0G/u0VExXovWG8=
Subject key identifier:   B8:BD:83:E5:81:90:3D:BF:4D:18:9D:6D:17:75:D5:28:B8:D3:B5:71
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0326
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/uL2D5YGQPb9NGJ1tF3XVKLjTtXE.roa
Signing time:             Tue 30 Apr 2024 01:50:57 +0000
ROA not before:           Tue 30 Apr 2024 01:50:57 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:ae00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 806 (0x326)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 01:50:57 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=B8BD83E581903DBF4D189D6D1775D528B8D3B571
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:44:22:78:f2:bc:43:64:f6:1e:61:a9:50:bb:
                    8c:48:5a:d3:80:7f:38:a7:fa:d5:32:26:41:fa:d9:
                    c3:8e:e3:fb:db:89:ad:d4:2a:a7:8e:73:78:ec:8a:
                    b3:95:7d:cc:18:84:46:de:21:75:95:04:d5:34:e7:
                    0e:a0:25:3f:1b:b7:c6:1d:87:ef:b3:4c:d9:d6:44:
                    58:e3:cd:c1:33:74:63:ec:8e:27:bd:60:56:33:f3:
                    9f:0f:85:7c:c0:d8:6c:6f:d7:cb:a4:11:6b:47:77:
                    09:7d:98:40:b5:62:15:a1:f7:fd:c7:f7:e7:a5:e8:
                    ea:e7:b8:08:76:31:70:c9:0a:99:46:54:68:2a:c5:
                    bd:78:17:7a:fe:17:10:b9:b0:7c:03:3a:f1:4e:c3:
                    d1:25:a6:6b:f4:7a:bc:bb:7a:8f:3d:8e:e0:81:7e:
                    78:54:97:d8:25:a2:46:45:77:65:f5:79:03:2f:3c:
                    56:fb:d3:45:b5:11:a9:02:85:66:30:e6:35:25:fb:
                    30:25:6b:e8:b3:df:88:f7:d7:e4:62:11:e8:a5:fa:
                    af:70:b9:a8:2c:12:bf:11:4c:b6:c6:26:23:51:2c:
                    bd:96:c1:28:29:33:95:a4:18:49:17:e6:34:9b:bb:
                    68:8a:23:7b:2a:dc:26:eb:76:55:99:11:1d:41:4b:
                    b2:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:BD:83:E5:81:90:3D:BF:4D:18:9D:6D:17:75:D5:28:B8:D3:B5:71
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/uL2D5YGQPb9NGJ1tF3XVKLjTtXE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:ae00::/40

    Signature Algorithm: sha256WithRSAEncryption
         8c:56:25:6d:e0:f7:bc:59:ab:81:a9:61:89:e1:62:df:06:62:
         ad:4e:46:99:58:fa:5c:78:17:f8:2e:e9:bd:9f:68:7e:b7:d9:
         4b:2e:7b:38:d4:43:16:73:f5:f2:d0:b7:65:0b:49:bd:2f:e5:
         43:3f:4d:14:50:14:35:f8:cd:52:c2:d0:cc:c9:6f:0a:12:02:
         24:51:c3:4a:88:ac:8a:cc:c9:37:5e:a7:80:1b:db:86:f7:62:
         50:03:8a:3f:77:11:4e:53:31:c5:a5:a4:91:8c:0a:42:aa:63:
         80:5e:82:0a:1e:33:b6:7e:11:5b:01:83:bb:51:0c:55:7d:c6:
         c7:ae:9d:f1:30:b9:1e:79:d5:10:a8:31:1f:d0:ac:42:cf:c3:
         9c:33:6e:46:35:80:7b:ce:0c:55:79:6a:25:7d:49:4a:99:b1:
         4f:cc:28:72:3f:1c:e7:f9:56:6f:0c:92:1f:2a:84:5e:c5:7b:
         b5:4b:95:4d:dd:36:da:2a:6e:bb:83:78:a3:63:dd:ed:6b:fe:
         7c:ce:a3:70:62:dc:62:63:50:c9:6b:b6:57:c0:45:83:02:d7:
         e7:86:c6:83:2e:bd:2f:55:16:98:c6:c6:64:28:ff:ea:66:ac:
         c1:af:17:d2:a8:e3:8b:4c:57:b5:49:8d:d0:04:3e:bc:83:a3:
         2d:1c:da:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:34 2024 by rpki-client on console-ams.rpki-client.org