Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/zdj9ucJwWhWdXhnlw6K0rl63KM8.roa
File:                     zdj9ucJwWhWdXhnlw6K0rl63KM8.roa (raw, json)
Hash identifier:          BYHWMhyKckXefoowuGY+ThN5T14B88rAanRR23qyJis=
Subject key identifier:   CD:D8:FD:B9:C2:70:5A:15:9D:5E:19:E5:C3:A2:B4:AE:5E:B7:28:CF
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0397
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/zdj9ucJwWhWdXhnlw6K0rl63KM8.roa
Signing time:             Tue 30 Apr 2024 02:02:47 +0000
ROA not before:           Tue 30 Apr 2024 02:02:47 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:bd00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 919 (0x397)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 02:02:47 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=CDD8FDB9C2705A159D5E19E5C3A2B4AE5EB728CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:d8:c7:91:8a:3d:02:81:4b:fa:8c:b3:0e:fd:
                    95:3b:9a:1c:1b:14:4b:7d:4c:dd:3f:a1:ac:f9:cb:
                    97:f5:71:ef:44:4a:42:5e:fd:84:c9:10:7c:f3:c7:
                    bd:ab:6d:c7:10:85:f5:c1:a5:24:b4:24:3c:c5:0a:
                    3f:2a:20:2f:80:92:ce:35:14:6a:6b:9d:8f:cf:19:
                    3d:1d:9e:78:07:b5:0e:7c:c2:ee:7b:57:cc:7c:a5:
                    bf:75:7c:e8:3a:ad:4e:41:d9:25:cb:23:81:fb:a2:
                    61:06:75:66:55:80:46:c4:43:2b:62:9f:7c:a2:5c:
                    4b:cd:f0:a2:fc:b7:e5:84:9f:1b:03:98:c9:3e:02:
                    5d:36:0a:61:46:94:4a:0e:fe:a5:85:ff:6c:5f:1b:
                    24:79:74:a6:bc:75:e7:15:87:0b:2b:1f:58:ca:a4:
                    cd:ac:39:9f:4e:e9:18:8e:5b:df:50:f7:d8:22:5a:
                    9a:e8:5d:76:24:93:11:61:29:7e:92:69:78:61:6e:
                    7b:3f:5a:80:fc:d7:b9:35:9e:c9:ef:0b:ca:dc:99:
                    29:be:b8:79:9d:56:33:78:8c:5b:e8:a8:c2:0d:98:
                    e3:59:7e:57:57:46:17:29:9f:f5:d9:e3:9f:56:16:
                    7d:12:7a:05:bc:5b:cd:8a:7c:1c:fc:b2:98:1f:6f:
                    22:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:D8:FD:B9:C2:70:5A:15:9D:5E:19:E5:C3:A2:B4:AE:5E:B7:28:CF
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/zdj9ucJwWhWdXhnlw6K0rl63KM8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:bd00::/40

    Signature Algorithm: sha256WithRSAEncryption
         7e:20:d2:f7:03:15:5f:47:9d:2b:e0:9d:f2:2b:74:03:87:61:
         37:1e:42:e8:a2:20:cf:c6:35:55:bb:ea:1f:0d:ce:83:6b:be:
         1d:92:b7:80:fa:ec:54:13:69:ff:2d:a5:2a:48:f8:09:36:49:
         cd:c4:48:10:7e:b9:96:e2:08:3d:c5:49:52:2e:5d:3b:19:18:
         8e:56:21:3e:80:8e:6a:33:4b:59:0a:37:ae:3a:f7:d5:46:b7:
         04:34:8d:d3:4f:a0:c4:92:cd:2a:ab:b3:70:14:20:36:f7:03:
         03:8b:71:30:25:47:f6:84:d3:f3:db:6e:e8:bc:b9:4a:87:5f:
         e7:ee:31:0a:dc:b7:c0:f1:16:8a:6d:e4:77:70:9d:b0:27:22:
         60:bc:43:e6:34:23:f2:bd:39:69:96:54:6d:8b:b1:8f:21:12:
         b4:c5:49:41:ca:49:df:b8:4f:6b:cc:ad:2a:c9:f1:18:69:6e:
         ee:03:e8:2c:b3:8b:15:be:9c:5f:1a:94:d8:85:45:53:29:b1:
         c9:1c:2c:b9:08:3b:e4:7a:e1:d5:2a:12:05:ef:3f:36:1e:99:
         be:7c:e8:94:be:56:90:3e:2d:69:32:d7:35:64:c6:74:93:50:
         51:b8:b2:43:04:8e:75:fb:4b:03:b9:71:45:b3:b8:81:d6:78:
         c4:d6:05:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:31 2024 by rpki-client on console-ams.rpki-client.org