Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/N4MkYc7N3HMPSf929Ent4TfrCns.roa
File:                     N4MkYc7N3HMPSf929Ent4TfrCns.roa (raw, json)
Hash identifier:          atQVtmKcT5EoT/TJlDyY5bYDbbZeBxrHHxE3OCo9g+Q=
Subject key identifier:   37:83:24:61:CE:CD:DC:73:0F:49:FF:76:F4:49:ED:E1:37:EB:0A:7B
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       039A
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/N4MkYc7N3HMPSf929Ent4TfrCns.roa
Signing time:             Wed 15 May 2024 08:40:22 +0000
ROA not before:           Wed 15 May 2024 08:40:22 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     9605
IP address blocks:        240a:61:6800::/38 maxlen: 38

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:58:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 922 (0x39a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 15 08:40:22 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=37832461CECDDC730F49FF76F449EDE137EB0A7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ef:1a:cb:42:c0:2d:9b:d1:5b:ac:42:66:0f:
                    a9:df:89:0a:b6:c6:2e:ba:16:2f:4e:47:85:98:53:
                    9b:dd:5c:f7:38:c2:df:1d:cc:22:02:10:fc:20:37:
                    9b:48:ec:64:13:62:c3:a4:a1:c3:31:d9:30:b6:ae:
                    c7:a5:f0:2f:c4:cf:3f:fb:06:f4:a0:60:a3:c0:74:
                    3e:e9:9e:7e:6a:52:f4:a8:ef:1c:71:4d:8e:3a:e8:
                    e9:9f:01:cb:07:64:77:3d:54:6c:cf:61:0f:3e:59:
                    1a:91:82:74:02:99:35:11:4a:3e:6d:f1:c7:55:cd:
                    77:74:79:de:34:a4:24:5b:a9:32:bc:f2:23:a0:90:
                    98:c8:1d:50:86:8d:3b:03:6e:de:da:77:6d:06:5a:
                    42:ad:be:27:72:c4:2a:2a:d9:9c:1f:1f:3c:10:d5:
                    20:9f:3d:e0:9c:30:3a:aa:91:8e:48:2e:5f:b7:de:
                    8c:1e:43:2b:b0:80:db:27:93:d5:cf:74:ec:c3:21:
                    09:e1:9f:77:03:56:79:2e:5f:b7:fc:3b:7c:f0:38:
                    67:f0:45:3e:98:54:97:c2:1a:bf:36:65:97:d0:75:
                    aa:b2:f0:74:ab:7e:d7:b9:16:39:66:d5:b1:2a:c7:
                    71:00:71:31:9e:3c:d9:28:e5:6e:b6:52:6a:fe:05:
                    bd:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:83:24:61:CE:CD:DC:73:0F:49:FF:76:F4:49:ED:E1:37:EB:0A:7B
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/N4MkYc7N3HMPSf929Ent4TfrCns.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:61:6800::/38

    Signature Algorithm: sha256WithRSAEncryption
         5d:19:54:39:14:d2:25:f6:d1:6d:21:4c:1d:9a:30:5f:d9:73:
         1b:b4:ac:40:b3:79:39:a3:5a:7f:4c:03:cc:bf:a7:67:f8:59:
         16:d1:cf:d3:96:ad:27:78:93:d0:39:86:ca:d3:77:cf:05:e3:
         19:c7:62:2e:b0:f8:fd:d1:54:a0:8d:dc:ce:b6:b6:c7:61:6a:
         cd:b5:8f:bc:6a:3d:a7:96:dc:49:b7:0f:55:eb:ba:c1:75:b1:
         f5:55:2a:60:0f:8f:62:d4:cd:3b:b8:5c:15:ca:fd:31:fc:49:
         52:4e:cc:8a:85:16:1e:ee:b4:b3:33:a5:ed:64:f0:cc:63:fa:
         c1:4c:3e:ef:2b:9e:61:72:a1:f1:03:d7:e2:a4:e7:6c:0e:b4:
         a4:14:03:48:d2:1e:dd:4a:cd:d5:8f:39:6a:a0:76:d6:df:e4:
         a0:32:ce:81:72:ba:dc:6f:55:14:bf:1f:27:f1:36:2e:1f:05:
         a8:c4:f7:4e:c4:14:df:8d:9e:43:2f:77:52:4b:97:00:8b:74:
         13:88:f1:40:c3:3b:e1:82:13:26:48:05:04:b3:08:8b:2f:79:
         10:3f:c4:47:48:5d:94:5e:80:bd:a4:5a:db:76:ab:96:10:77:
         41:bc:54:33:24:05:d0:0b:c3:d8:5b:93:4a:e7:6d:9e:b9:1b:
         29:30:21:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:21:16 2024 by rpki-client on console-ams.rpki-client.org