Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/wFgVc5hAIkF9aLkx2dNSN8ol_9c.roa
File:                     wFgVc5hAIkF9aLkx2dNSN8ol_9c.roa (raw, json)
Hash identifier:          8onc4SUZSdLM9Eivi37cvThImLfM24g6npFlq8PgVGU=
Subject key identifier:   C0:58:15:73:98:40:22:41:7D:68:B9:31:D9:D3:52:37:CA:25:FF:D7
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0307
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/wFgVc5hAIkF9aLkx2dNSN8ol_9c.roa
Signing time:             Tue 30 Apr 2024 01:48:13 +0000
ROA not before:           Tue 30 Apr 2024 01:48:13 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:1e00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 775 (0x307)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 01:48:13 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=C0581573984022417D68B931D9D35237CA25FFD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c7:a2:ef:0f:a9:f6:a1:0e:9d:ff:08:d7:be:
                    53:b0:c4:fb:8f:d6:d1:f6:cb:91:ec:1d:91:6f:ed:
                    08:9d:75:81:af:b8:c3:d8:95:09:9f:60:ec:2b:61:
                    65:7a:56:44:81:a1:ed:4c:48:7a:9f:d7:1b:c5:13:
                    c3:13:ff:01:65:c4:1b:ac:c2:94:76:df:d8:cd:b8:
                    80:c0:28:58:eb:fe:17:78:b9:a2:74:e9:45:36:c6:
                    9e:4c:a4:74:cf:68:ef:e8:d9:1c:e7:47:6c:77:94:
                    93:1d:65:3b:8f:3c:48:10:eb:96:e9:a4:5b:8c:9a:
                    84:77:e1:7b:ec:33:85:4a:6d:55:7f:93:ad:4c:70:
                    eb:9e:9e:0a:05:aa:38:91:26:59:f8:a2:a6:41:03:
                    71:7c:7f:81:3b:c4:c0:03:66:06:b1:36:f0:ed:ca:
                    db:91:68:87:dc:af:b3:42:d9:7a:c5:58:8e:c1:47:
                    80:ce:f9:9f:7a:4c:46:5f:35:1e:2d:23:3a:62:be:
                    25:f5:dd:77:49:f9:77:cf:42:82:fe:ee:bc:90:f3:
                    f9:b6:b8:63:92:c8:9e:6a:46:6f:a4:70:7d:3c:40:
                    d4:a8:5c:07:c7:9f:82:92:86:60:64:b8:fb:9f:d4:
                    34:af:9d:dd:c1:c3:d6:b5:92:75:8c:0c:2f:37:49:
                    af:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:58:15:73:98:40:22:41:7D:68:B9:31:D9:D3:52:37:CA:25:FF:D7
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/wFgVc5hAIkF9aLkx2dNSN8ol_9c.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:1e00::/40

    Signature Algorithm: sha256WithRSAEncryption
         42:45:4e:c0:61:6a:24:13:f8:5f:a3:11:be:8b:ac:3a:f2:fe:
         d7:f1:21:1e:f7:61:80:7f:0a:71:9d:77:97:65:13:5f:8d:01:
         6f:be:c2:0c:36:86:0e:cb:09:9f:e1:39:f5:ff:15:9d:4e:bf:
         bf:59:3d:f3:15:3a:85:9c:cf:81:c5:5b:01:b4:2f:10:82:58:
         1d:a1:12:49:6e:30:bf:40:80:41:7b:bd:fb:dd:06:dd:e3:c5:
         3b:1f:0b:2d:fa:06:e7:78:09:28:55:35:99:24:71:56:01:ae:
         31:22:7f:78:c7:8d:51:64:e6:ab:2a:57:e4:8c:31:4a:39:f1:
         83:6d:53:31:a1:97:f9:ef:35:3c:3b:1e:5a:64:91:4d:16:ec:
         3a:c4:70:98:ef:4e:08:02:66:34:49:e0:61:a0:c8:c8:a2:2c:
         0f:90:ea:e3:2f:f9:5a:1d:2f:ef:bd:2f:52:92:2e:51:08:be:
         eb:76:71:09:5c:b0:a2:69:62:f5:44:73:29:c0:db:58:51:a1:
         54:7f:60:11:9d:82:af:b7:e0:d0:9a:bf:c2:23:13:e8:78:1c:
         92:ff:3d:88:5c:ce:cb:b8:74:5c:75:df:a0:b5:0b:6f:e1:0c:
         98:5e:9a:5a:c0:1b:ad:84:3c:33:15:b8:0c:95:f3:b6:08:28:
         3f:f9:15:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:45 2024 by rpki-client on console-fra.rpki-client.org