Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ylSZuLILZkPIawFOfYhZnz9XgAo.roa
File:                     ylSZuLILZkPIawFOfYhZnz9XgAo.roa (raw, json)
Hash identifier:          AX7ZhVxn+LhVGGZGzvqVQZfBNO/TE5rkTgR3ed6mSg8=
Subject key identifier:   CA:54:99:B8:B2:0B:66:43:C8:6B:01:4E:7D:88:59:9F:3F:57:80:0A
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0175
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ylSZuLILZkPIawFOfYhZnz9XgAo.roa
Signing time:             Tue 30 May 2023 17:34:20 +0000
ROA not before:           Tue 30 May 2023 17:34:20 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:4e00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 13:40:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 373 (0x175)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:34:20 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=CA5499B8B20B6643C86B014E7D88599F3F57800A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f6:ce:c3:5c:f0:0c:11:ee:4c:c3:9f:e1:ba:
                    d2:66:e9:d5:9e:87:5e:df:d8:5f:0d:2e:66:61:53:
                    07:2e:50:d5:87:12:b2:1a:be:56:dd:19:1b:6b:ec:
                    a5:1c:39:4c:91:7f:a2:76:16:63:60:bd:69:2d:3a:
                    e8:80:bd:2c:fa:8f:1d:35:f4:c6:28:b3:79:82:97:
                    55:95:90:9d:41:0e:d3:db:26:d6:c0:ba:e8:df:4e:
                    38:50:88:7e:3c:ad:bb:2c:75:1b:a8:69:a3:5d:d3:
                    f9:3d:89:8f:ff:d7:67:18:f1:0b:50:77:20:77:8a:
                    0e:24:58:bc:49:68:1b:31:13:21:58:0c:72:a6:b1:
                    e5:62:09:11:47:c9:a9:87:d7:1e:97:06:ac:2b:a5:
                    66:2c:89:0a:bf:d5:2d:27:36:b3:3b:a7:9e:0f:9b:
                    51:a1:07:54:e1:3d:94:94:21:25:a4:43:c7:ef:4a:
                    6b:c2:de:b7:ff:01:21:17:89:6d:f1:55:c4:f5:7a:
                    d8:15:70:33:f3:33:84:e0:0f:cf:5a:a8:b9:b5:86:
                    0b:29:1d:b5:66:47:1a:79:90:65:d7:b7:b7:d7:e7:
                    d4:a4:15:9e:6d:7c:f1:7e:e2:b8:b5:2b:54:30:a3:
                    fc:99:38:b9:58:ca:04:4c:b7:ad:fd:b7:76:5c:3c:
                    95:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:54:99:B8:B2:0B:66:43:C8:6B:01:4E:7D:88:59:9F:3F:57:80:0A
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ylSZuLILZkPIawFOfYhZnz9XgAo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:4e00::/40

    Signature Algorithm: sha256WithRSAEncryption
         19:dd:d8:ea:0e:b3:a7:bf:5c:a6:6d:80:ad:4f:35:9f:5c:9b:
         c1:75:8b:72:a4:4b:19:af:d9:81:0a:8e:f1:a7:4e:0c:b7:89:
         54:e1:c3:14:3d:fa:a3:d9:05:b3:cc:a8:1e:df:b8:4e:b1:3e:
         a0:e5:b9:e3:44:c6:bd:70:9d:8c:7b:81:55:66:f8:64:82:3d:
         ba:0e:8a:b7:e8:84:c1:24:a4:20:38:5c:ac:c8:77:13:e1:0f:
         6e:ad:c5:46:95:de:3b:0b:78:19:0a:ff:88:a6:48:44:00:b4:
         36:f6:0e:f8:f0:75:14:8c:97:64:3d:c1:35:35:b9:86:b7:bc:
         e2:f1:2a:60:cb:f5:f5:a2:5b:9b:2c:57:d9:8b:59:17:50:98:
         ae:b2:cd:d3:3e:2c:76:23:4b:5a:fa:34:2c:8e:27:28:a6:bf:
         dc:b6:d8:e9:f7:a8:11:97:c4:3c:e2:26:3d:10:b4:51:36:1e:
         20:72:3b:fd:80:e5:7c:ab:c7:ab:e1:3f:1b:e1:ac:af:18:3b:
         dc:56:20:63:6d:24:0f:da:41:ac:b2:51:3b:aa:e8:e8:c0:73:
         c9:05:cf:96:46:19:65:cb:0b:ae:57:f2:ea:1f:8a:14:3c:22:
         50:75:cf:4d:42:80:0a:b1:22:0d:15:55:bc:e3:18:b4:e0:5c:
         51:bc:0a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:15:53 2024 by rpki-client on console-ams.rpki-client.org