Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/5M-CX_36fbBpD7tm_iTULguGy1g.roa
File:                     5M-CX_36fbBpD7tm_iTULguGy1g.roa (raw, json)
Hash identifier:          koyEOT+pep6tXFzzvA4GmWqV3BhZiAyUsNnMTsvUcVU=
Subject key identifier:   E4:CF:82:5F:FD:FA:7D:B0:69:0F:BB:66:FE:24:D4:2E:0B:86:CB:58
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0395
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/5M-CX_36fbBpD7tm_iTULguGy1g.roa
Signing time:             Tue 30 Apr 2024 02:02:46 +0000
ROA not before:           Tue 30 Apr 2024 02:02:46 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:1500::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 917 (0x395)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: Apr 30 02:02:46 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=E4CF825FFDFA7DB0690FBB66FE24D42E0B86CB58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:cb:29:37:fc:a1:86:44:f3:d3:c7:d6:d2:63:
                    06:f5:d0:58:84:98:69:fd:6e:44:cc:b8:33:f7:76:
                    bc:fa:31:7e:5c:8d:91:a9:88:69:c1:f8:98:36:23:
                    03:d4:fd:a8:b7:74:92:0d:fb:40:4d:31:2d:d4:1b:
                    a1:e6:46:30:79:e7:5c:a3:f0:63:df:97:42:75:35:
                    82:32:23:7e:a7:ef:d8:d9:fb:70:63:88:c5:3a:81:
                    52:eb:04:48:42:51:cf:9c:98:da:07:cf:12:08:81:
                    33:ee:cc:12:48:0c:37:10:a6:36:b9:46:08:da:79:
                    12:5f:82:e8:13:42:d7:99:17:ae:87:a0:99:d1:a1:
                    90:8f:4d:ec:76:ee:f9:09:41:09:c3:10:bc:f9:de:
                    0a:28:2e:21:57:1d:68:c8:99:d5:b3:49:8d:ad:f0:
                    36:83:9b:6c:e8:ad:76:a3:28:90:9b:e9:9d:d7:b4:
                    93:83:4c:54:ab:85:5f:ac:92:ac:e2:58:8e:c5:4f:
                    07:a6:ac:f8:30:32:1a:28:16:16:a1:78:66:76:09:
                    f3:28:cb:68:12:f6:9e:54:72:fd:4f:ee:ab:ab:ed:
                    ac:ee:77:23:39:73:d4:c2:18:6a:ae:af:e8:eb:24:
                    f4:a9:af:dd:a4:16:27:21:01:f4:fc:0e:fa:26:6f:
                    12:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:CF:82:5F:FD:FA:7D:B0:69:0F:BB:66:FE:24:D4:2E:0B:86:CB:58
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/5M-CX_36fbBpD7tm_iTULguGy1g.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:1500::/40

    Signature Algorithm: sha256WithRSAEncryption
         3c:0c:03:35:b6:42:29:f7:d1:2b:b8:b7:8e:60:c9:c1:b8:3a:
         6e:05:19:9f:e0:1f:6e:ba:fe:db:f8:39:06:84:35:36:3b:fa:
         f3:ec:d3:95:e2:35:6c:fd:5e:15:2a:52:0e:21:ae:7f:cc:8c:
         ba:fd:fb:f7:d8:25:e5:1c:f6:fe:1f:ad:2a:95:4c:62:af:92:
         67:aa:39:92:22:a5:1b:92:ae:d7:85:2d:87:1a:7f:06:77:a7:
         e6:9c:1f:82:74:59:03:4b:95:5e:c2:b0:bd:ea:ee:5c:ef:49:
         20:0d:03:2c:3e:eb:55:7b:2f:d5:98:c5:06:69:0d:7b:e2:64:
         2d:d8:52:11:60:c5:e5:d7:35:82:77:18:08:5c:61:da:05:2e:
         48:fc:ea:c5:b5:85:5b:f9:44:af:48:30:53:5a:f4:00:4c:d8:
         bd:b7:c4:c2:43:b4:1a:84:fb:25:40:5e:fc:f9:50:5c:60:71:
         84:57:98:12:c7:bd:e9:6c:18:4e:5b:17:73:d7:b4:87:33:7f:
         2d:86:25:7a:da:a8:33:1d:1b:0e:a7:ab:79:39:d6:12:73:c8:
         6a:22:94:7b:6b:98:c3:47:82:0c:76:ef:a3:9c:b7:00:a8:61:
         2c:d7:b9:04:4e:8c:44:b7:13:bb:2e:0b:c4:16:1d:57:57:11:
         f2:7a:79:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:30 2024 by rpki-client on console-ams.rpki-client.org