Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30272/k79FLBJh_uZi6YxkONidK5wjVmg.roa
File:                     k79FLBJh_uZi6YxkONidK5wjVmg.roa (raw, json)
Hash identifier:          p1hD58DH/VY5lKfEqjS+75bshR9BH5FSs2j8AbgUVRU=
Subject key identifier:   93:BF:45:2C:12:61:FE:E6:62:E9:8C:64:38:D8:9D:2B:9C:23:56:68
Certificate issuer:       /CN=5F468B31DB275A5DDAE7A549AC058DC20D7F8C9C
Certificate serial:       1E
Authority key identifier: 5F:46:8B:31:DB:27:5A:5D:DA:E7:A5:49:AC:05:8D:C2:0D:7F:8C:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/X0aLMdsnWl3a56VJrAWNwg1_jJw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30272/k79FLBJh_uZi6YxkONidK5wjVmg.roa
Signing time:             Wed 31 Jul 2024 01:32:01 +0000
ROA not before:           Wed 31 Jul 2024 01:32:01 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     17682
IP address blocks:        2402:1580::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30272/X0aLMdsnWl3a56VJrAWNwg1_jJw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30272/X0aLMdsnWl3a56VJrAWNwg1_jJw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/X0aLMdsnWl3a56VJrAWNwg1_jJw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Oct 2024 13:37:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30 (0x1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F468B31DB275A5DDAE7A549AC058DC20D7F8C9C
        Validity
            Not Before: Jul 31 01:32:01 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=93BF452C1261FEE662E98C6438D89D2B9C235668
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:0c:84:f6:00:77:02:2f:88:03:c2:b2:49:d9:
                    4a:f4:ea:f9:d9:1e:13:e7:51:d1:16:bf:cd:8d:4c:
                    b6:93:98:83:1c:3f:e0:17:bc:01:79:eb:cf:a2:4c:
                    14:bb:2c:a6:09:94:72:0c:2e:98:41:29:63:42:2c:
                    2d:9a:b9:7a:49:0b:b2:ea:fe:7a:68:00:a5:14:50:
                    fa:bf:16:1b:3f:72:34:61:84:f0:d7:05:82:c3:f0:
                    f9:69:93:08:86:aa:27:02:28:6f:f8:56:5f:19:f8:
                    5c:dc:dd:9d:fe:c6:79:2b:38:9c:dd:f4:b9:9a:c1:
                    20:5a:b3:cd:8f:50:4d:28:a8:5f:ab:5b:fd:a5:71:
                    23:50:fd:5b:59:ad:ff:f2:c5:eb:54:90:c7:40:3f:
                    bd:f2:9a:cd:d5:b9:eb:dc:ad:51:f4:fa:03:64:54:
                    53:51:36:a4:bb:0a:12:4e:a0:f0:0f:cb:ae:69:75:
                    b8:ef:cc:fd:aa:13:16:1e:66:f6:a6:3f:e3:34:ca:
                    0f:9d:e3:8f:aa:ed:13:5d:84:da:54:9a:0e:89:fb:
                    78:62:8f:55:4b:6b:8c:97:bb:47:24:48:cd:54:9e:
                    40:df:bd:38:45:a8:46:e4:5f:07:da:ce:7d:de:7d:
                    ee:aa:3a:c8:e2:21:f3:e7:e4:19:33:8f:08:f6:e9:
                    fd:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:BF:45:2C:12:61:FE:E6:62:E9:8C:64:38:D8:9D:2B:9C:23:56:68
            X509v3 Authority Key Identifier:
                keyid:5F:46:8B:31:DB:27:5A:5D:DA:E7:A5:49:AC:05:8D:C2:0D:7F:8C:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30272/X0aLMdsnWl3a56VJrAWNwg1_jJw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/X0aLMdsnWl3a56VJrAWNwg1_jJw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30272/k79FLBJh_uZi6YxkONidK5wjVmg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:1580::/32

    Signature Algorithm: sha256WithRSAEncryption
         a8:13:07:22:85:79:6c:c3:d3:fc:a6:5e:56:f4:2d:c4:f1:b5:
         9e:9f:21:03:24:4a:e5:00:63:e8:0e:ad:38:f7:c4:d2:b6:3f:
         60:64:cf:36:7e:f1:98:45:c4:06:59:6c:f5:22:f3:b2:09:09:
         e1:60:de:2c:1b:a0:7e:4e:33:15:6b:3a:9c:02:9c:57:5c:d3:
         7b:4b:29:7f:2e:83:fa:d1:8a:97:31:f4:5a:e2:b4:b6:9a:38:
         9e:d9:f7:32:3b:da:16:08:aa:7c:96:41:02:8e:62:45:a2:6f:
         28:06:35:1a:1e:5e:3b:73:22:52:87:d2:5f:2b:81:7e:f3:bf:
         1c:04:8d:ec:87:19:b1:f6:b8:2d:e0:8d:3c:ef:2e:b9:67:5c:
         93:be:07:a2:df:74:19:7d:47:aa:90:b7:6c:5e:f5:49:50:c4:
         f6:2c:f6:0e:5e:1b:79:4b:13:1f:eb:24:39:c0:14:4f:5f:b2:
         31:61:5d:08:81:7f:dc:4c:0e:4a:1b:09:84:e3:bc:96:ca:13:
         14:a6:b4:19:00:c3:ee:2d:67:b2:b3:1c:05:f1:26:95:2c:27:
         6c:40:8c:38:4c:62:fd:79:0b:78:36:d3:9d:b4:3c:64:12:33:
         42:14:cc:0a:94:c3:a3:2b:ac:9f:2b:06:36:7d:58:ba:c5:04:
         64:2d:d9:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 05:00:17 2024 by rpki-client on console-fra.rpki-client.org