Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/N_nmKLvSP-7voGIXn8BpYMaeeTQ.roa
File:                     N_nmKLvSP-7voGIXn8BpYMaeeTQ.roa (raw, json)
Hash identifier:          a9QDaPJNZZgtP0neNDph+Rno1biQygKMqpL8+CCnCCc=
Subject key identifier:   37:F9:E6:28:BB:D2:3F:EE:EF:A0:62:17:9F:C0:69:60:C6:9E:79:34
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       020A
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/N_nmKLvSP-7voGIXn8BpYMaeeTQ.roa
Signing time:             Tue 30 May 2023 17:40:25 +0000
ROA not before:           Tue 30 May 2023 17:40:25 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:61:3000::/37 maxlen: 37

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 13:40:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 522 (0x20a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:40:25 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=37F9E628BBD23FEEEFA062179FC06960C69E7934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4c:fe:44:d0:a0:b5:e8:80:d8:0e:d2:38:0d:
                    42:b2:8e:03:9c:fd:63:bb:dc:e1:04:2c:4b:5e:5e:
                    bd:dc:ff:00:2d:aa:c9:e1:c2:ce:a8:c7:a1:16:7b:
                    23:6f:4f:c8:87:a8:3a:a2:78:3e:5a:8f:0b:b2:03:
                    41:ec:6d:be:e1:0b:ea:c8:9c:d9:21:d3:60:9e:fe:
                    4d:52:04:2d:88:d7:06:98:ff:82:be:9a:9b:5f:cd:
                    2c:73:04:a3:e1:d4:3d:40:89:71:9c:49:c2:e5:e3:
                    0d:82:c5:f7:b5:60:71:51:ea:99:88:9b:9b:5f:4a:
                    e7:bd:70:3f:6b:c4:f7:ba:c9:96:5f:28:7c:05:c7:
                    78:97:00:56:01:ad:10:ef:5b:cc:58:2c:dc:7a:92:
                    ab:04:80:dd:0d:f4:b5:9b:b8:ff:0f:23:69:b7:6d:
                    cf:8e:cb:8f:44:29:f6:69:5c:dc:e3:07:2a:7e:20:
                    1e:33:70:23:46:39:19:f4:eb:af:55:ef:5e:0b:46:
                    f3:84:83:f5:40:b8:d5:a9:37:e5:83:46:86:b4:67:
                    a6:45:b5:07:c5:4e:7f:39:de:ee:ce:ab:94:ad:1c:
                    0b:ce:10:6e:f7:4f:68:7c:3c:15:9d:d5:de:99:16:
                    6e:d2:d0:84:5e:90:9d:d1:96:16:65:09:17:47:82:
                    90:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:F9:E6:28:BB:D2:3F:EE:EF:A0:62:17:9F:C0:69:60:C6:9E:79:34
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/N_nmKLvSP-7voGIXn8BpYMaeeTQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:61:3000::/37

    Signature Algorithm: sha256WithRSAEncryption
         46:59:a9:39:48:b7:5c:ae:1b:cd:c2:8c:43:d5:b2:65:64:93:
         86:f4:90:b4:70:e9:52:ac:85:98:87:f6:f3:5b:b1:6e:a4:3b:
         19:ec:fc:3a:64:29:cf:97:25:6a:5f:f8:d3:70:a7:8e:20:ac:
         ef:92:38:c8:b6:e8:69:36:8b:fb:7b:c8:de:d2:ff:5b:e3:b1:
         84:bf:26:01:5a:cb:c5:b4:87:fd:dd:fe:06:33:17:c4:c8:88:
         59:3f:f4:d8:f5:5b:38:6b:04:a1:60:b6:0a:ca:1f:f1:63:1c:
         9f:c3:98:90:7a:78:07:55:80:79:90:59:dc:8b:58:0f:6b:d1:
         a0:da:88:91:ef:92:9f:64:86:a7:96:fe:f5:6b:1d:2a:db:6b:
         95:28:12:dd:1f:b9:84:15:c5:34:dc:d8:21:93:2c:ab:5c:68:
         cf:b5:d5:5e:85:be:57:9a:b4:ae:fb:cb:4a:fc:db:d4:ba:33:
         e1:70:48:9c:b0:b6:02:18:a9:99:c5:76:38:6f:24:de:67:fc:
         a5:df:da:e7:6b:6e:10:67:a8:47:c4:b1:a3:43:30:c9:c3:8a:
         2a:4d:fe:d2:f4:10:fa:e1:d7:81:16:c2:e6:1b:a4:31:2c:9e:
         47:3a:30:ee:82:a5:37:ac:2f:49:a6:4a:ad:cb:10:f3:30:b9:
         73:cd:89:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:15:52 2024 by rpki-client on console-ams.rpki-client.org