Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/yoMHSZi4alKLaqxJyhoyvtnPySM.roa
File:                     yoMHSZi4alKLaqxJyhoyvtnPySM.roa (raw, json)
Hash identifier:          5/m6RuidCanmzSzoy2vJA/ocSTwx4shvKZV+KUrbqeQ=
Subject key identifier:   CA:83:07:49:98:B8:6A:52:8B:6A:AC:49:CA:1A:32:BE:D9:CF:C9:23
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0364
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/yoMHSZi4alKLaqxJyhoyvtnPySM.roa
Signing time:             Tue 30 Apr 2024 01:56:56 +0000
ROA not before:           Tue 30 Apr 2024 01:56:56 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:d500::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 868 (0x364)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 01:56:56 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=CA83074998B86A528B6AAC49CA1A32BED9CFC923
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:66:3f:9e:83:f9:56:40:5c:83:79:de:c7:8d:
                    95:66:87:1b:5f:5f:5a:67:81:60:5e:d1:0d:9e:d1:
                    e4:dc:7e:e1:cb:25:79:18:15:4b:05:65:a2:36:16:
                    98:95:76:b1:fc:70:02:ef:fe:14:23:81:e0:c1:00:
                    b5:b9:74:4e:aa:aa:f1:b2:48:89:b8:c1:1a:71:65:
                    ba:7e:fb:9a:bd:ce:08:d5:bd:c7:0c:83:a8:c6:6c:
                    4a:d6:4c:15:2d:1a:d3:2a:72:a8:be:1b:e3:b3:ad:
                    19:9d:92:df:d2:67:07:93:3e:af:61:c7:87:c8:7f:
                    ba:05:90:99:a9:5b:2b:b4:af:2f:1b:5e:b0:f5:a7:
                    7c:23:da:83:e3:92:93:1e:61:8d:f5:ee:38:bc:3e:
                    64:23:98:2a:90:22:c7:25:ba:19:c4:58:fb:6f:3b:
                    1d:a8:32:b8:ca:75:64:68:87:cd:1e:e4:84:c0:13:
                    81:fd:d5:82:3a:03:24:ba:0b:c3:2d:b5:f1:98:a8:
                    f1:12:c8:8c:25:c3:c5:58:60:3c:c0:2e:ef:a8:2a:
                    28:2f:c7:26:d8:18:c7:b2:8d:d1:b7:e8:97:d4:db:
                    de:93:32:d2:0c:e4:e1:a6:b4:fb:a4:7b:5b:41:b0:
                    e8:8e:db:b0:b9:98:d5:7c:85:cd:51:d7:75:0c:20:
                    71:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:83:07:49:98:B8:6A:52:8B:6A:AC:49:CA:1A:32:BE:D9:CF:C9:23
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/yoMHSZi4alKLaqxJyhoyvtnPySM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:d500::/40

    Signature Algorithm: sha256WithRSAEncryption
         b1:39:dd:c1:37:01:1b:a3:e7:0d:e0:05:4e:a8:b7:4c:11:a4:
         c0:17:ec:31:8a:80:18:ee:18:1f:83:e3:25:fb:f9:7c:73:ec:
         13:04:68:78:3a:05:c8:67:1c:aa:da:64:ea:66:7f:8c:ca:43:
         05:1f:6c:21:a6:e4:c5:36:03:55:85:84:72:e6:61:35:28:d3:
         b4:c0:9a:44:4c:46:08:c1:bd:37:5d:76:46:b3:3a:c4:84:65:
         ee:6c:b3:c5:4a:17:f1:3a:6a:1b:6e:f1:68:c4:6e:bf:8f:b5:
         57:f1:f9:ce:27:5e:4c:a4:98:f5:92:46:71:69:27:66:f1:04:
         b8:d5:f5:98:7a:89:b8:b4:d7:91:7a:1c:9e:73:1c:f1:50:0d:
         67:20:ef:60:5d:da:8f:4a:15:57:0b:ef:77:9a:a3:66:38:01:
         d2:96:9e:13:72:24:6d:67:c3:68:cc:6d:4f:1c:f8:b2:99:b4:
         fd:4d:cf:2a:df:7f:2e:0c:50:28:bb:98:f0:ad:a4:36:db:4e:
         ab:1c:f7:35:8f:1a:6a:7e:1c:9d:e1:3f:8b:70:99:19:1b:73:
         e1:8f:cd:6b:d8:5d:53:47:18:09:e2:0f:fd:8a:2b:77:e2:94:
         56:26:ec:01:2b:44:31:37:d6:3d:8e:4d:b8:e0:f7:24:25:3c:
         38:26:03:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:07 2024 by rpki-client on console-fra.rpki-client.org