Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ypCRgqxGc5ooILU2I36imjHNXxs.roa
File:                     ypCRgqxGc5ooILU2I36imjHNXxs.roa (raw, json)
Hash identifier:          kiyP2rnZff/FARjnYINo705AwL4cmWY19ZKh1GZwmWY=
Subject key identifier:   CA:90:91:82:AC:46:73:9A:28:20:B5:36:23:7E:A2:9A:31:CD:5F:1B
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0342
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ypCRgqxGc5ooILU2I36imjHNXxs.roa
Signing time:             Tue 30 Apr 2024 01:54:03 +0000
ROA not before:           Tue 30 Apr 2024 01:54:03 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:5600::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 834 (0x342)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 01:54:03 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=CA909182AC46739A2820B536237EA29A31CD5F1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:10:c3:81:a8:fb:a7:ed:c2:6c:58:70:eb:87:
                    c2:8a:82:04:fb:81:d0:04:d8:20:3a:8c:f4:36:29:
                    28:f3:4b:b2:43:39:14:d4:7f:e3:9e:d6:9f:51:23:
                    4a:9b:06:12:c0:64:7d:6e:cd:f0:b9:23:77:05:99:
                    b0:7c:c6:1c:f9:28:38:4f:87:b3:19:78:51:f6:e5:
                    6e:eb:5c:1c:25:85:67:43:a9:f8:76:e2:0c:aa:71:
                    2c:5f:44:ca:81:0b:e0:ca:ef:3e:ba:79:37:4e:09:
                    31:3b:03:4c:66:dd:75:d3:22:88:1c:37:b5:52:0d:
                    16:82:6b:f3:da:24:67:03:01:f1:a6:b6:bc:e5:ac:
                    54:80:61:54:b2:f8:9f:08:9f:9d:53:8f:9a:40:c8:
                    58:70:40:40:4a:05:70:8a:1b:56:54:02:52:77:cf:
                    15:d8:65:6a:8a:14:ac:97:21:6c:72:f2:8d:4c:fc:
                    ed:2a:bc:88:3c:b5:83:2a:5c:af:3d:05:3f:4d:9b:
                    86:80:2e:fe:e3:4a:18:41:63:23:82:42:f9:15:f2:
                    5d:bd:b5:a1:7d:af:6d:8a:1d:db:71:d9:bc:d5:60:
                    cb:44:e1:f4:1b:f2:7e:01:da:c0:e0:7f:f8:82:9f:
                    03:9d:1c:54:2d:db:00:a0:eb:44:f8:26:c7:c0:89:
                    1f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:90:91:82:AC:46:73:9A:28:20:B5:36:23:7E:A2:9A:31:CD:5F:1B
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/ypCRgqxGc5ooILU2I36imjHNXxs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:5600::/40

    Signature Algorithm: sha256WithRSAEncryption
         56:bc:ef:2c:f4:dd:ec:4b:d5:81:53:fa:e9:2e:f2:6e:70:3c:
         c0:a2:64:c3:20:c5:19:c2:0b:1f:97:ff:96:2f:23:62:fc:53:
         26:d9:38:16:0f:34:bf:9f:d3:72:6d:e2:e4:47:a0:3f:6a:83:
         98:ee:97:98:f9:90:9f:8a:37:54:7d:2e:55:1a:be:a1:b0:51:
         bf:de:2a:3e:28:97:15:7f:b9:70:22:e2:b8:77:03:93:5f:26:
         b4:c0:e8:b7:49:6e:92:f1:d2:1d:fc:d7:b3:34:fb:73:ce:81:
         dd:d1:a4:ae:58:35:77:0f:98:4c:e9:55:2e:f0:74:19:c0:d8:
         bb:83:6d:76:1e:05:a8:10:73:87:84:12:2f:be:57:53:03:b0:
         d7:8a:41:5c:6a:f3:04:66:56:75:b5:f2:29:54:45:1f:50:02:
         c9:df:df:66:a0:49:a5:61:2b:aa:79:2d:f7:01:77:04:46:b5:
         97:19:35:91:6f:f2:dd:29:89:b8:2c:de:63:6f:47:f9:f4:65:
         e8:41:c7:62:57:1b:02:30:50:57:78:70:8b:c4:52:03:a7:5e:
         ac:fc:cc:ed:3f:cd:bb:b1:df:d8:0f:6c:d5:f0:33:40:5a:7b:
         99:38:d7:a1:ed:3e:1d:ee:68:57:71:43:5d:4f:f5:04:c7:fb:
         2a:bc:ee:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:21 2024 by rpki-client on console-ams.rpki-client.org