Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30091/wTtFdPnb3AICBQTnEpQaBpqMDjc.roa
File:                     wTtFdPnb3AICBQTnEpQaBpqMDjc.roa (raw, json)
Hash identifier:          VlvpQ/nLKYR+2Gjuh5ZxxyrWajNw+INOBDPzKye8hrg=
Subject key identifier:   C1:3B:45:74:F9:DB:DC:02:02:05:04:E7:12:94:1A:06:9A:8C:0E:37
Certificate issuer:       /CN=89801DBDBE168863AB0E802F0EC90A3525C2347C
Certificate serial:       3F
Authority key identifier: 89:80:1D:BD:BE:16:88:63:AB:0E:80:2F:0E:C9:0A:35:25:C2:34:7C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iYAdvb4WiGOrDoAvDskKNSXCNHw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/wTtFdPnb3AICBQTnEpQaBpqMDjc.roa
Signing time:             Tue 07 Nov 2023 04:57:49 +0000
ROA not before:           Tue 07 Nov 2023 04:57:49 +0000
ROA not after:            Mon 14 Oct 2024 01:30:03 +0000
asID:                     38639
IP address blocks:        2402:c800:ff7b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/iYAdvb4WiGOrDoAvDskKNSXCNHw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/iYAdvb4WiGOrDoAvDskKNSXCNHw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iYAdvb4WiGOrDoAvDskKNSXCNHw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jul 2024 06:55:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63 (0x3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89801DBDBE168863AB0E802F0EC90A3525C2347C
        Validity
            Not Before: Nov  7 04:57:49 2023 GMT
            Not After : Oct 14 01:30:03 2024 GMT
        Subject: CN=C13B4574F9DBDC02020504E712941A069A8C0E37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:40:b0:50:8c:1c:d4:c5:fc:61:c7:e2:6d:2f:
                    e9:78:4c:91:de:e9:fd:09:67:1b:01:97:5e:a1:1e:
                    35:36:cc:5e:66:00:f5:20:60:95:1d:ee:9b:57:af:
                    05:75:84:83:22:74:be:c7:79:fe:5c:a5:a8:b5:ca:
                    f5:84:35:b6:f7:8f:72:f5:c4:be:bb:6b:15:f7:f3:
                    d1:03:5d:b3:18:8e:b6:dc:e9:c4:41:af:2d:ee:8c:
                    68:f2:6e:50:17:9f:fc:45:ab:7c:aa:ad:86:21:9f:
                    58:6f:b8:70:2a:e6:82:b5:0a:71:71:7d:0e:29:80:
                    96:75:60:0f:ea:7e:b8:e6:81:ac:6d:e5:0a:ac:fb:
                    10:e7:06:06:f4:43:cb:df:89:df:67:07:6b:51:b5:
                    cc:1e:47:0d:7c:02:ae:32:5b:53:60:7e:dc:31:68:
                    08:53:98:5d:fe:98:f8:7c:00:46:a7:55:1f:2e:76:
                    85:da:60:d3:30:93:8a:eb:f8:4f:2e:9e:32:0d:d9:
                    7c:80:3b:4b:8e:17:a4:64:b3:11:f5:da:52:56:c9:
                    9a:92:55:04:ac:5a:69:f3:30:5f:48:18:3f:12:f9:
                    e8:84:67:5b:16:b6:11:93:14:8b:a5:64:4f:88:30:
                    0f:14:3a:49:48:8d:11:bc:09:77:e3:a0:16:5b:d9:
                    00:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:3B:45:74:F9:DB:DC:02:02:05:04:E7:12:94:1A:06:9A:8C:0E:37
            X509v3 Authority Key Identifier:
                keyid:89:80:1D:BD:BE:16:88:63:AB:0E:80:2F:0E:C9:0A:35:25:C2:34:7C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/iYAdvb4WiGOrDoAvDskKNSXCNHw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iYAdvb4WiGOrDoAvDskKNSXCNHw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/wTtFdPnb3AICBQTnEpQaBpqMDjc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:c800:ff7b::/48

    Signature Algorithm: sha256WithRSAEncryption
         9d:b7:2f:12:c1:3a:49:7e:81:62:81:62:5d:c1:af:e9:18:3e:
         bd:d4:7b:93:a0:78:da:58:a8:ba:49:76:61:be:18:53:fd:ce:
         d1:7a:cf:bf:9d:78:d9:08:4f:8d:58:b9:c6:b3:43:ce:8c:7f:
         43:06:34:e9:9e:24:9e:13:41:c8:44:d3:33:f1:48:5b:22:2d:
         12:a0:23:a1:f1:7e:06:fc:1c:88:67:33:f9:8c:42:69:48:7e:
         70:a5:47:c7:2f:d4:24:a8:86:51:da:5c:99:9b:b3:33:a8:8d:
         59:07:2e:be:c9:6c:d0:a9:d4:8b:c4:1f:7d:0f:46:5a:19:51:
         2e:fa:de:48:e2:d1:f5:7b:dc:5c:7a:1a:3b:d6:2c:38:da:ea:
         e4:0b:a9:34:2e:88:d4:f3:f2:27:c5:ae:8d:46:6c:b3:d9:8b:
         9b:91:05:94:fc:5a:55:95:13:55:b8:d5:a9:71:55:f2:c2:bf:
         5e:02:94:70:3d:db:1c:60:7e:22:9a:a2:ae:1c:9a:14:e5:6b:
         e8:4c:ad:a5:f8:b6:5d:80:6c:17:cf:7e:a1:03:78:8d:e0:90:
         08:ef:be:24:3c:08:69:3b:2b:53:3d:9f:c4:e5:d6:17:70:37:
         e8:6f:4d:c3:2c:e4:5f:5c:67:14:4c:52:3b:f9:64:4d:c4:b5:
         f9:90:f3:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 08:12:47 2024 by rpki-client on console-ams.rpki-client.org