Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/za6Ogk5U2wekDgCH0JMY2TlweHc.roa
File:                     za6Ogk5U2wekDgCH0JMY2TlweHc.roa (raw, json)
Hash identifier:          D+TWTFH/H+khLLTtCc1/NigPbS6orq6PUDvAPGXcz1M=
Subject key identifier:   CD:AE:8E:82:4E:54:DB:07:A4:0E:00:87:D0:93:18:D9:39:70:78:77
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       038B
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/za6Ogk5U2wekDgCH0JMY2TlweHc.roa
Signing time:             Tue 30 Apr 2024 02:02:43 +0000
ROA not before:           Tue 30 Apr 2024 02:02:43 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:61::/37 maxlen: 37

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 907 (0x38b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 02:02:43 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=CDAE8E824E54DB07A40E0087D09318D939707877
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:7e:d2:5d:ec:0d:30:04:07:29:97:a5:3c:d6:
                    2b:bb:25:db:3a:20:37:17:da:bf:07:12:f0:1f:51:
                    51:59:5e:dd:d7:c1:8c:b4:ac:c4:a3:ce:01:c9:01:
                    7a:4d:df:99:35:ed:c8:81:bd:88:a9:f8:2c:0f:ed:
                    a9:87:50:62:00:80:96:fb:e2:d5:81:2e:f4:b9:fd:
                    98:24:b5:94:c3:e8:35:90:f2:13:d0:c0:64:17:85:
                    9a:ee:8f:56:38:4c:2e:61:94:83:62:7a:0c:07:02:
                    de:27:4c:e0:6b:8d:cf:75:20:1e:0b:28:90:e4:41:
                    1b:59:ae:b8:df:4e:b8:e9:c3:bd:30:c3:4a:67:b9:
                    f3:97:85:b1:02:5c:84:3a:49:bc:29:ed:e0:1f:1d:
                    7b:c0:20:a7:1d:35:b0:d9:5b:60:a3:53:a0:00:1a:
                    7a:b0:8b:1b:02:79:82:94:b7:2e:7e:f3:09:af:de:
                    a1:e0:88:c7:9e:ca:53:7c:61:42:4e:da:6a:52:ca:
                    8b:8e:82:49:13:f7:75:c5:4b:eb:af:bc:f9:b9:ca:
                    da:b3:e3:93:c9:57:24:f3:76:93:a9:ec:61:ac:cd:
                    59:0c:a2:10:69:55:f8:b3:3f:f5:79:96:7a:0f:00:
                    36:85:3a:34:f7:42:d6:d7:a0:28:3d:85:94:38:e4:
                    0f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:AE:8E:82:4E:54:DB:07:A4:0E:00:87:D0:93:18:D9:39:70:78:77
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/za6Ogk5U2wekDgCH0JMY2TlweHc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:61::/37

    Signature Algorithm: sha256WithRSAEncryption
         11:94:13:11:e3:72:92:f8:55:cb:95:a4:25:96:7a:f9:1f:37:
         e3:cb:42:b4:0f:7b:88:84:9c:03:a9:eb:dd:c0:33:51:27:21:
         3b:2b:bb:b3:15:d3:b5:89:9e:f9:7b:19:80:15:c6:67:58:31:
         45:93:cc:8d:82:53:5f:b4:92:c4:87:56:a4:ea:54:1f:80:6f:
         86:11:a5:c0:c3:95:fe:50:3c:6b:cf:f6:d1:3a:91:97:b5:77:
         b4:8b:c8:d9:11:2f:31:c5:d3:fa:46:59:2f:9c:d2:58:eb:8c:
         07:a3:df:07:e2:b6:89:b2:7a:0e:e1:83:38:0c:99:6d:c9:b3:
         49:18:ed:fa:6b:7f:88:3d:5d:30:18:b7:23:3a:f6:8e:e5:93:
         35:aa:71:04:fb:8f:ad:17:53:77:1f:f8:f2:03:22:33:5d:c0:
         f6:9f:89:80:4a:33:ad:1c:a1:15:dc:f4:88:fe:c6:17:38:c5:
         bf:ab:2b:c5:85:f7:ee:e0:15:77:0f:03:bf:dd:18:ae:43:fb:
         0f:06:a3:61:de:d5:2e:3b:c8:b5:43:e3:d7:50:30:4d:ba:98:
         ce:e7:f1:f5:e0:af:81:33:a0:93:67:b4:ce:1a:a6:24:5f:1a:
         95:de:16:c6:58:a6:ee:93:e3:09:fe:7e:f3:25:1f:4a:51:1c:
         97:3a:75:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:45 2024 by rpki-client on console-fra.rpki-client.org