Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/S5eAzloGsPrtn6aXlNu7lIexgeU.roa
File:                     S5eAzloGsPrtn6aXlNu7lIexgeU.roa (raw, json)
Hash identifier:          1OMi963jqgMr4LSqM5UTPnPcowwJA+7uBwaqAH7VXco=
Subject key identifier:   4B:97:80:CE:5A:06:B0:FA:ED:9F:A6:97:94:DB:BB:94:87:B1:81:E5
Certificate issuer:       /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial:       0179
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/S5eAzloGsPrtn6aXlNu7lIexgeU.roa
Signing time:             Tue 30 May 2023 17:34:21 +0000
ROA not before:           Tue 30 May 2023 17:34:21 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     9605
IP address blocks:        240a:6b:2700::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 13:40:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 377 (0x179)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
        Validity
            Not Before: May 30 17:34:21 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=4B9780CE5A06B0FAED9FA69794DBBB9487B181E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:bd:e4:78:86:d4:a6:98:16:f5:88:6c:3c:4c:
                    72:8f:7b:9a:99:9f:9e:e1:29:44:1d:5b:0b:dc:3a:
                    28:3b:2f:36:8f:ad:66:57:31:2c:1f:82:bc:8a:d9:
                    35:88:ac:21:a9:51:62:da:54:de:6a:02:9f:75:5f:
                    e3:7c:19:40:5e:a2:b9:0e:e4:1e:1b:f9:3f:61:68:
                    a1:02:cb:6a:ea:b5:6b:3e:10:27:e5:e3:ab:4a:37:
                    1c:56:dc:6c:a6:bd:84:10:49:16:c5:f2:94:33:fc:
                    d7:d9:21:b1:ef:a3:c9:ec:07:b0:66:96:39:fa:1a:
                    1c:bb:6c:c4:81:5c:7a:f7:9e:44:60:48:69:11:7f:
                    c7:42:d5:99:47:9a:78:e8:bf:ae:21:76:f9:36:2b:
                    12:63:0d:ef:ab:5e:4c:b3:5b:70:f4:09:91:95:6a:
                    b5:52:e2:cd:0b:60:06:92:ed:d1:87:7e:1b:f2:da:
                    1a:de:5b:f1:5c:c6:1a:b2:13:ba:2f:1e:57:32:b8:
                    ff:21:1b:9e:8b:af:0e:c5:b5:f8:43:5d:df:27:52:
                    7d:12:6f:ba:bb:47:5c:67:9f:63:32:90:e7:45:de:
                    c9:34:3a:a0:82:21:7b:8b:87:93:f8:8e:5e:ee:a7:
                    e6:a9:9e:a1:15:fa:cf:0b:90:91:e6:70:9d:2c:08:
                    8e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:97:80:CE:5A:06:B0:FA:ED:9F:A6:97:94:DB:BB:94:87:B1:81:E5
            X509v3 Authority Key Identifier:
                keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/S5eAzloGsPrtn6aXlNu7lIexgeU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:6b:2700::/40

    Signature Algorithm: sha256WithRSAEncryption
         98:4d:9d:e3:aa:14:6b:9c:70:f6:78:1f:f4:5f:3b:35:ad:99:
         4d:8c:0c:58:c2:85:90:3e:2c:d6:fc:09:05:41:01:1e:78:66:
         17:11:98:25:86:eb:8b:b5:61:78:4b:a0:6e:1e:c6:fd:11:e8:
         96:c8:25:39:16:de:57:33:fd:60:95:ef:78:54:d2:a7:cd:89:
         a4:f6:99:46:b2:a5:03:6d:70:5e:9e:da:4b:9e:03:28:37:2e:
         6a:21:5d:ef:1d:b3:16:df:43:a3:05:91:43:cd:8f:41:d4:82:
         6c:e9:b8:9d:1b:7f:3c:7d:59:88:c2:aa:74:41:c0:1d:11:2f:
         c7:aa:c0:d8:4d:84:96:a7:9b:9d:a0:de:51:b7:bf:12:2c:3e:
         d2:07:19:55:62:00:2f:e5:ec:5f:3f:8a:ba:ec:7f:9a:84:17:
         d1:b5:22:d0:3b:92:94:0d:da:91:fa:df:30:ae:ed:e0:ca:83:
         9e:f7:5b:b2:17:be:fc:bf:68:3b:3e:d5:81:d4:14:c2:a0:6a:
         c1:1e:64:54:f8:2d:6c:7a:12:5a:21:59:50:a5:9c:41:98:89:
         04:7e:44:27:8e:a2:ac:00:29:e7:2d:f3:db:aa:49:77:3a:04:
         69:d3:82:f1:62:17:67:c4:56:a8:10:f5:53:4e:e5:aa:48:69:
         9d:0e:01:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:15:52 2024 by rpki-client on console-ams.rpki-client.org