Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30073/iVf74UYpaD1qYLLZokZuHiX2ORg.roa
File:                     iVf74UYpaD1qYLLZokZuHiX2ORg.roa (raw, json)
Hash identifier:          m9jhTXyivsGkVYH3rfTgkdWpbr5vmuyz+Qz5hq6+1tw=
Subject key identifier:   89:57:FB:E1:46:29:68:3D:6A:60:B2:D9:A2:46:6E:1E:25:F6:39:18
Certificate issuer:       /CN=B3C7A19804F728E8FF5E45BEC8DA582105A3DA9D
Certificate serial:       47
Authority key identifier: B3:C7:A1:98:04:F7:28:E8:FF:5E:45:BE:C8:DA:58:21:05:A3:DA:9D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s8ehmAT3KOj_XkW-yNpYIQWj2p0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30073/iVf74UYpaD1qYLLZokZuHiX2ORg.roa
Signing time:             Fri 31 May 2024 01:28:07 +0000
ROA not before:           Fri 31 May 2024 01:28:07 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     4713
IP address blocks:        2400:4000::/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30073/s8ehmAT3KOj_XkW-yNpYIQWj2p0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30073/s8ehmAT3KOj_XkW-yNpYIQWj2p0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s8ehmAT3KOj_XkW-yNpYIQWj2p0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Oct 2024 13:35:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 71 (0x47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3C7A19804F728E8FF5E45BEC8DA582105A3DA9D
        Validity
            Not Before: May 31 01:28:07 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=8957FBE14629683D6A60B2D9A2466E1E25F63918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ad:6b:a4:c3:e4:12:04:46:23:9c:78:b2:0e:
                    f0:4c:f9:59:2e:dc:a2:55:e6:96:e7:9b:2a:2b:3a:
                    f0:ec:30:52:e5:68:84:1c:42:dc:de:d6:d7:76:3f:
                    95:fa:05:62:6e:1b:fd:58:ae:d2:41:d5:ca:43:64:
                    e7:09:b6:29:1e:69:48:f9:59:c2:7b:6a:76:55:8c:
                    7e:61:4b:bc:33:8f:af:ea:1e:7b:ff:42:fb:05:30:
                    00:48:8e:db:d4:a9:54:da:16:05:2e:41:12:f2:ea:
                    8e:f6:98:e9:dd:6b:b9:91:4e:8e:85:ee:1f:37:3b:
                    6a:3f:84:61:09:59:89:64:f7:1b:e0:68:a7:11:8b:
                    5d:c1:48:81:2b:2d:c1:bf:81:37:88:b0:4b:e6:4d:
                    63:70:38:0b:c0:62:e5:ad:07:7f:7c:b1:76:6a:ee:
                    70:c5:bd:7f:34:47:c2:64:40:8c:99:e0:a6:f8:3f:
                    25:ca:cb:a2:8e:f0:77:c5:60:23:88:72:3f:b3:83:
                    d1:de:04:0f:25:ce:8b:d3:67:ce:9b:b5:c6:9e:e5:
                    17:a1:c5:6f:84:cd:ba:0d:0c:d3:ee:85:41:13:47:
                    f4:57:6f:c0:46:b6:e2:53:b5:03:62:0b:1d:e9:20:
                    72:5b:2c:26:01:0b:4a:80:38:b3:cd:d6:45:10:23:
                    ae:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:57:FB:E1:46:29:68:3D:6A:60:B2:D9:A2:46:6E:1E:25:F6:39:18
            X509v3 Authority Key Identifier:
                keyid:B3:C7:A1:98:04:F7:28:E8:FF:5E:45:BE:C8:DA:58:21:05:A3:DA:9D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30073/s8ehmAT3KOj_XkW-yNpYIQWj2p0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s8ehmAT3KOj_XkW-yNpYIQWj2p0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30073/iVf74UYpaD1qYLLZokZuHiX2ORg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:4000::/22

    Signature Algorithm: sha256WithRSAEncryption
         10:c3:81:e8:33:b2:bd:c7:5b:e2:f1:9f:c4:c5:e0:25:6f:91:
         0a:d9:3e:3a:f8:20:02:af:59:54:5e:63:3c:12:5e:44:d5:ac:
         ab:9c:de:7c:5f:26:d7:11:31:ec:71:98:26:5f:c6:bd:ad:27:
         7a:f0:49:a1:66:20:3b:91:ed:43:3c:f4:27:bc:39:7e:66:6a:
         c3:6d:22:42:c2:cc:63:cf:4a:13:d8:47:19:87:4c:79:e1:48:
         d5:c1:55:3b:61:f7:47:e4:5c:7d:80:28:cf:9d:73:4a:88:f1:
         e9:20:75:7d:c0:ea:9f:86:ca:32:d8:8f:d8:da:8c:0f:dc:38:
         d5:2d:92:2b:4d:bb:e4:38:46:fd:8b:a9:8e:76:17:f1:7c:f1:
         f8:e1:cd:6e:fe:8d:a2:d7:99:0d:18:08:01:59:f0:c0:27:e7:
         3b:0c:57:67:0c:95:a2:eb:1d:66:ba:11:f1:4f:55:bd:c5:09:
         31:ce:35:65:56:01:d3:b2:fc:6a:97:b4:00:1e:97:8e:e4:57:
         66:f0:72:03:3b:d5:17:cb:e3:19:4f:a9:c4:99:b8:9f:f3:18:
         1b:24:7e:4c:be:83:fa:43:d7:5a:84:f8:92:8e:ef:2c:86:0e:
         1f:b5:44:61:0d:8e:2e:7c:28:d5:4a:3d:d8:13:5f:f6:b0:8c:
         63:c3:8c:87
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Sep 27 06:21:54 2024 by rpki-client on console-ams.rpki-client.org