Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/wOzfxTCA9wbwBSJAfdHpyDxaKss.roa
File:                     wOzfxTCA9wbwBSJAfdHpyDxaKss.roa (raw, json)
Hash identifier:          x9ZercVHjxNZHRVBBlvYpD6l+ACL6sPqgdzMZdUeKG8=
Subject key identifier:   C0:EC:DF:C5:30:80:F7:06:F0:05:22:40:7D:D1:E9:C8:3C:5A:2A:CB
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       02B1
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/wOzfxTCA9wbwBSJAfdHpyDxaKss.roa
Signing time:             Tue 30 Apr 2024 01:39:27 +0000
ROA not before:           Tue 30 Apr 2024 01:39:27 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:c800::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Dec 2024 00:11:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 689 (0x2b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 01:39:27 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=C0ECDFC53080F706F00522407DD1E9C83C5A2ACB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:dd:bb:e8:ad:6c:bf:ca:35:81:b8:10:4b:db:
                    fc:a2:da:aa:da:3e:3e:fb:a5:43:57:8c:fe:f8:61:
                    8a:6b:33:a9:67:6a:69:5d:0a:5a:18:4d:7f:2e:04:
                    7a:de:73:5f:82:95:6d:07:f4:c0:b6:b9:6f:8d:35:
                    0d:cf:9b:3c:99:99:d4:18:d1:10:f0:39:11:59:67:
                    88:91:cd:f9:e4:8b:dc:ef:87:05:8a:4e:43:fc:76:
                    65:f5:dd:fe:5c:b6:af:55:cc:aa:f9:47:a0:20:aa:
                    2a:8c:30:6f:ef:cd:7a:f1:d2:e6:9b:4c:da:b9:f1:
                    00:ff:bf:7b:50:bb:b1:31:73:7d:88:d4:87:1e:c1:
                    b9:29:2f:d0:2d:d1:29:72:ca:d0:88:d0:ad:7a:29:
                    2b:97:d7:a6:01:2c:89:68:33:e5:60:ed:39:58:c8:
                    4f:f5:bf:b7:87:53:01:91:0c:4e:95:60:55:c4:62:
                    bc:91:54:4b:c8:2f:0c:33:49:a6:3c:6e:80:6a:1c:
                    ed:85:74:48:dd:a2:0b:65:1f:23:0b:f0:cf:a7:c0:
                    51:8c:27:84:5e:b7:24:12:40:22:77:1c:78:bf:ed:
                    c5:d9:f4:72:11:cd:9c:c7:45:1d:e5:89:e4:9d:40:
                    65:2f:75:5f:a7:53:28:c0:2c:4d:bd:f6:5d:ad:ca:
                    71:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:EC:DF:C5:30:80:F7:06:F0:05:22:40:7D:D1:E9:C8:3C:5A:2A:CB
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/wOzfxTCA9wbwBSJAfdHpyDxaKss.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:c800::/40

    Signature Algorithm: sha256WithRSAEncryption
         03:2b:da:e3:da:f6:5c:3a:e6:a6:db:88:ec:6d:af:5f:e8:89:
         1e:a9:9a:df:ef:94:61:71:18:84:14:f0:14:29:9d:47:26:dc:
         d2:ee:cc:4a:95:7f:26:a9:92:5c:b2:91:80:53:e6:4b:83:91:
         f3:34:1a:fa:87:81:65:a5:33:e1:5c:3d:99:a3:79:65:ba:e9:
         66:1d:87:b2:7a:4c:e2:b3:10:c1:75:6f:e9:8a:ee:22:df:2b:
         a2:37:99:6f:fb:41:bf:31:5b:53:bc:5d:fa:df:c2:37:52:16:
         59:15:da:83:63:dd:26:6f:61:91:d0:29:58:38:c7:a4:d3:57:
         ca:d9:7a:07:fd:00:85:1f:6f:14:63:ef:97:27:3e:08:d6:b0:
         f5:a3:9e:b9:c4:70:f4:bc:8f:27:4e:a4:ba:ef:a8:fe:e1:08:
         9c:cd:d9:9e:c4:77:0d:a1:14:ae:9a:2e:7f:86:6e:b8:11:d3:
         a1:7a:13:2a:4c:de:69:3d:83:86:73:f5:1f:05:2d:e2:a7:ce:
         b8:36:e5:53:63:3e:8d:f0:fc:78:df:3b:9b:f6:65:1c:52:5b:
         79:d8:ac:37:bd:c9:18:50:8a:f8:85:98:51:51:52:c6:e3:56:
         f6:88:db:2c:5c:c6:73:a9:3b:5a:df:c2:c6:91:f4:90:04:71:
         67:44:bf:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:27:05 2024 by rpki-client on console-ams.rpki-client.org