Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/yUGJm-bU-w7pcEc8npVSzLPD8eo.roa
File:                     yUGJm-bU-w7pcEc8npVSzLPD8eo.roa (raw, json)
Hash identifier:          CiVyugJBm9cvZySN+OTaZNJ8T0iLg3kqGPBi0ZynYSk=
Subject key identifier:   C9:41:89:9B:E6:D4:FB:0E:E9:70:47:3C:9E:95:52:CC:B3:C3:F1:EA
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0396
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/yUGJm-bU-w7pcEc8npVSzLPD8eo.roa
Signing time:             Tue 30 Apr 2024 02:02:47 +0000
ROA not before:           Tue 30 Apr 2024 02:02:47 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:d200::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 918 (0x396)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 02:02:47 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=C941899BE6D4FB0EE970473C9E9552CCB3C3F1EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:9b:46:2f:52:7f:1e:8b:4d:30:10:e3:26:e9:
                    05:f8:13:2b:22:9a:75:a5:46:4d:86:19:c1:13:74:
                    af:6b:9f:86:8f:50:96:14:e0:62:2a:9c:8d:e7:50:
                    5d:f0:c2:73:59:e7:db:da:5e:e5:5b:03:1c:b2:60:
                    e9:11:3c:78:e1:97:e6:37:86:33:b6:64:4f:42:d6:
                    64:f6:fb:ac:6f:8d:54:2a:3c:fa:80:74:f9:37:76:
                    68:c8:64:19:4d:2e:c4:30:07:b2:94:4b:df:1a:7c:
                    ac:1e:8d:1f:e7:37:8b:be:97:3a:8d:8c:68:04:e1:
                    8d:b8:7c:37:9b:e3:81:c5:a7:5a:6a:4c:36:79:a3:
                    27:b9:26:b2:70:a1:57:0c:cb:4a:6c:0d:89:4a:ad:
                    d1:9c:d0:9b:f5:31:42:b4:e7:ca:0f:19:d1:5a:9e:
                    e2:86:d6:96:3a:44:1b:ff:27:5c:72:34:5e:68:56:
                    ca:2c:9a:f7:05:e8:a0:5d:8d:ea:0b:71:21:29:6d:
                    63:8f:15:62:4b:6a:2d:5f:a3:f7:6f:20:86:fe:fe:
                    34:b2:4e:9e:96:90:44:3b:13:bd:89:f0:ae:49:05:
                    82:5e:ec:e2:3b:18:78:f2:59:df:dd:fc:73:1f:df:
                    ba:71:a9:e2:22:14:a9:d9:c2:c9:50:97:a2:59:10:
                    d7:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:41:89:9B:E6:D4:FB:0E:E9:70:47:3C:9E:95:52:CC:B3:C3:F1:EA
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/yUGJm-bU-w7pcEc8npVSzLPD8eo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:d200::/40

    Signature Algorithm: sha256WithRSAEncryption
         7a:cf:58:53:fd:8c:a7:aa:24:f2:7d:8e:6b:c1:2e:f0:2d:3f:
         a8:fe:6f:ab:30:ce:fa:c6:4f:68:42:35:5c:27:37:61:fb:df:
         ae:da:01:37:08:fd:af:fc:ab:0d:e2:81:9c:74:83:58:7c:22:
         9e:0e:10:75:8d:3b:cf:7a:81:42:d5:e6:78:57:1b:3c:9f:fd:
         d9:54:cf:fd:92:b8:f1:44:d3:23:14:5a:f3:80:b7:54:b7:3d:
         b6:6d:8d:96:9b:f4:8f:e4:90:fb:ef:cb:b1:de:4e:c9:66:6a:
         22:41:b5:5c:4c:1e:a6:ea:eb:d2:31:1b:34:7d:df:19:b9:ff:
         e2:40:8b:87:8a:89:ce:56:b9:80:1d:56:73:13:17:c4:c9:7f:
         f8:10:c9:5c:4a:55:05:6a:24:8f:cc:97:46:b0:1b:c2:61:40:
         93:07:f8:f3:c6:78:f2:ff:8b:4b:9e:7e:28:c6:dc:c8:d0:34:
         f8:89:44:58:a2:8c:1a:36:5a:79:fd:6c:4e:61:d0:5a:b2:60:
         8a:d5:87:35:58:3e:cf:92:cc:29:80:74:3d:9a:b9:da:e3:c7:
         03:8f:4c:ec:a2:45:e4:51:35:a5:08:3c:5e:db:ab:8d:78:0d:
         e9:62:67:49:53:35:a6:ae:3a:da:49:09:78:f2:28:2a:6b:fb:
         ff:a1:90:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:07 2024 by rpki-client on console-fra.rpki-client.org