Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/zffHajAqNR7A0BxwNUHu6Dvur4E.roa
File:                     zffHajAqNR7A0BxwNUHu6Dvur4E.roa (raw, json)
Hash identifier:          HP3yjxI2BZoZ4+Afqm2zNP6ZunVIbpQW5BQ2TfeYcGo=
Subject key identifier:   CD:F7:C7:6A:30:2A:35:1E:C0:D0:1C:70:35:41:EE:E8:3B:EE:AF:81
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       03B1
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/zffHajAqNR7A0BxwNUHu6Dvur4E.roa
Signing time:             Wed 31 Jul 2024 01:32:11 +0000
ROA not before:           Wed 31 Jul 2024 01:32:11 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:61:4e00::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 945 (0x3b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Jul 31 01:32:11 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=CDF7C76A302A351EC0D01C703541EEE83BEEAF81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:af:26:9d:85:52:19:30:ae:87:35:b7:58:54:
                    08:b1:5b:be:28:e1:ca:34:aa:e5:41:26:d9:6f:d6:
                    9f:b9:96:37:ef:02:ab:ea:82:1a:72:b9:dd:64:5e:
                    1c:fa:7f:67:d4:d8:b5:66:db:25:b7:4b:ef:ef:40:
                    09:c6:8f:a2:d2:3c:cb:14:57:a8:3c:19:c4:9c:2d:
                    8e:0e:d3:ad:dc:97:27:b1:0d:51:8a:d8:44:35:70:
                    cf:a9:8f:72:8d:34:cd:6b:07:e3:5c:b1:3a:51:50:
                    31:38:2a:8f:1e:bf:0d:63:71:9a:fb:69:04:1f:48:
                    16:c0:ea:42:6d:c0:85:69:05:0f:e0:0a:21:ff:95:
                    e8:59:18:5b:be:8b:46:ff:4c:cc:42:51:2f:d3:f3:
                    07:9f:0b:60:c3:be:b9:53:67:88:e3:49:8a:c9:a2:
                    68:f8:94:27:7f:df:b6:d5:f4:e2:08:34:95:d9:5c:
                    ef:79:2c:a5:85:de:06:92:00:47:3e:ad:1c:fc:c9:
                    26:11:8a:a6:73:57:62:f1:13:24:87:4d:94:0a:7d:
                    95:63:f5:bb:59:f6:85:12:72:d1:70:3e:eb:20:58:
                    d5:37:7c:0e:47:8b:cb:79:f9:55:5d:96:b4:8e:f5:
                    a9:fd:b3:c1:bd:59:cb:69:23:e3:63:cc:aa:61:22:
                    a5:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:F7:C7:6A:30:2A:35:1E:C0:D0:1C:70:35:41:EE:E8:3B:EE:AF:81
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/zffHajAqNR7A0BxwNUHu6Dvur4E.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:61:4e00::/48

    Signature Algorithm: sha256WithRSAEncryption
         26:bf:2d:13:5c:ff:63:88:76:41:35:4e:ec:ae:15:5e:48:be:
         33:e7:9d:46:a8:74:39:56:ad:13:35:ad:e4:52:68:22:fd:c4:
         54:6c:e9:ce:ce:76:08:44:7b:6e:ff:92:2a:a0:5f:bd:65:0b:
         a1:53:62:0d:b4:a2:3d:c0:55:b3:c4:d2:a0:51:8c:51:2c:1d:
         75:50:d8:11:35:78:52:80:1a:72:e3:bc:e3:12:f2:fa:3b:fe:
         c0:69:58:aa:80:35:c0:81:64:d1:85:1d:41:05:ff:c1:4d:3b:
         76:13:a3:3e:df:cf:4d:9e:30:ca:7b:88:db:34:ae:e5:46:ab:
         88:4e:00:06:88:0b:0e:de:da:20:58:cd:6d:14:ad:1f:bb:6f:
         b2:83:33:cf:c6:ec:74:ad:be:be:41:61:cd:0a:35:33:35:13:
         7e:6a:13:ab:13:85:e0:e0:81:93:b2:ad:ee:dd:b8:88:00:a1:
         32:b1:1e:51:29:8d:d1:59:6f:49:6c:42:51:a7:f0:32:6d:30:
         ad:e8:33:06:f5:ec:a5:dc:b9:32:c9:6d:f5:3f:2a:04:e0:25:
         7a:d1:e1:84:be:2f:2e:1c:20:40:27:10:b3:ea:18:d3:0a:4e:
         24:77:6a:e2:f3:4f:fe:e5:49:89:c4:e7:6e:46:d7:e6:e7:3a:
         bb:eb:e5:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:34 2024 by rpki-client on console-ams.rpki-client.org