Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30260/qV6CFpMCiv8sXZbSf2gPzxcL2B4.roa
File:                     qV6CFpMCiv8sXZbSf2gPzxcL2B4.roa (raw, json)
Hash identifier:          dfhi/q6o8FpMvIun3mvDvcXfkREkPNorc24fflJql1M=
Subject key identifier:   A9:5E:82:16:93:02:8A:FF:2C:5D:96:D2:7F:68:0F:CF:17:0B:D8:1E
Certificate issuer:       /CN=97F2B4B8FE25A0C0C7F4D6FD4FA1BA7CAE612A12
Certificate serial:       31
Authority key identifier: 97:F2:B4:B8:FE:25:A0:C0:C7:F4:D6:FD:4F:A1:BA:7C:AE:61:2A:12
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/l_K0uP4loMDH9Nb9T6G6fK5hKhI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30260/qV6CFpMCiv8sXZbSf2gPzxcL2B4.roa
Signing time:             Wed 01 Nov 2023 01:29:50 +0000
ROA not before:           Wed 01 Nov 2023 01:29:50 +0000
ROA not after:            Mon 14 Oct 2024 01:30:03 +0000
asID:                     7514
IP address blocks:        2001:2f0::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30260/l_K0uP4loMDH9Nb9T6G6fK5hKhI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30260/l_K0uP4loMDH9Nb9T6G6fK5hKhI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/l_K0uP4loMDH9Nb9T6G6fK5hKhI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 30 Jun 2024 06:27:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49 (0x31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97F2B4B8FE25A0C0C7F4D6FD4FA1BA7CAE612A12
        Validity
            Not Before: Nov  1 01:29:50 2023 GMT
            Not After : Oct 14 01:30:03 2024 GMT
        Subject: CN=A95E821693028AFF2C5D96D27F680FCF170BD81E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a7:19:0e:2c:bd:14:7c:22:4f:10:ff:45:b0:
                    1e:63:74:a2:d1:cf:f5:27:64:24:3a:e8:58:90:31:
                    f1:c6:29:4e:60:59:5f:4b:30:46:7a:03:f8:80:9e:
                    33:b2:d3:ca:92:ec:89:42:f2:cf:cd:ef:bf:10:d2:
                    ee:1c:de:ed:75:c5:c6:36:35:f8:c4:89:a3:98:fc:
                    51:db:1b:ee:df:f1:09:42:c4:04:7f:eb:80:9c:0b:
                    94:eb:3f:85:1f:77:b3:b1:52:5d:94:de:8b:0e:6d:
                    65:5f:d0:1a:41:41:ef:0d:82:58:c8:f2:82:bf:34:
                    fb:76:5f:27:24:c1:ad:0d:91:d6:af:1e:c9:4c:1d:
                    5c:0b:c4:35:da:c7:33:20:34:ad:84:cb:81:0e:32:
                    b6:fe:84:cc:85:c0:19:b9:1c:54:6e:50:a5:7c:4f:
                    f9:09:2c:53:45:9c:be:6f:c4:ca:e3:3a:d8:fe:77:
                    d4:56:27:dd:ed:fb:6b:1c:1c:0d:d9:5b:06:de:e7:
                    7d:24:9b:3b:2f:cd:0e:66:1e:f1:ba:40:91:ab:d0:
                    64:a6:c7:89:54:e5:eb:f3:aa:2f:aa:30:96:b2:41:
                    c0:28:56:e2:4b:ca:56:4b:0d:cb:bd:3b:98:e8:d7:
                    2b:92:96:57:45:87:6f:b1:de:92:62:ba:3d:cb:c1:
                    70:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:5E:82:16:93:02:8A:FF:2C:5D:96:D2:7F:68:0F:CF:17:0B:D8:1E
            X509v3 Authority Key Identifier:
                keyid:97:F2:B4:B8:FE:25:A0:C0:C7:F4:D6:FD:4F:A1:BA:7C:AE:61:2A:12

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30260/l_K0uP4loMDH9Nb9T6G6fK5hKhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/l_K0uP4loMDH9Nb9T6G6fK5hKhI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30260/qV6CFpMCiv8sXZbSf2gPzxcL2B4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:2f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:53:c2:51:b6:84:d3:d4:43:5f:c0:cc:ef:09:d7:6a:c9:a8:
         2b:3e:2c:98:f4:ca:6d:43:0f:f8:19:69:8d:b6:ac:41:49:09:
         6e:70:c6:41:bf:5d:13:53:4f:e0:f3:ca:4e:76:42:69:82:17:
         95:d1:1f:96:34:b4:00:35:77:90:3b:04:cc:fc:c6:71:34:da:
         59:25:ea:9c:8d:b8:4f:4f:86:61:50:67:8f:4d:73:8d:be:fa:
         3b:7b:d8:de:30:e9:86:de:c4:8a:55:9b:b1:51:79:77:cd:7b:
         1b:7c:31:a8:ba:54:f2:0b:eb:d5:5d:c8:a3:db:d9:0b:92:45:
         99:42:16:dd:97:95:5e:9d:62:c2:70:70:a3:39:05:9a:59:cd:
         1e:17:da:c5:ff:25:16:9f:f9:88:ed:ef:b7:28:f8:18:46:97:
         bf:75:62:de:1c:e8:91:67:32:ff:60:b1:89:67:bd:51:87:fb:
         16:76:ec:e1:44:0f:ed:cb:15:16:be:e6:c6:1d:53:83:a6:74:
         1d:59:3b:43:01:8e:ce:18:62:9f:09:d1:72:b1:4f:0b:9c:4c:
         32:5c:40:ac:ab:71:10:70:cf:53:96:85:9f:bd:aa:91:bc:e6:
         ae:32:13:38:d8:41:e0:0f:42:ad:b6:27:11:70:9b:0d:24:58:
         04:ae:fa:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 00:52:48 2024 by rpki-client on console-ams.rpki-client.org