Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30367/8b3IqYH3D6luhq_VfoDX15nWyAA.roa
File:                     8b3IqYH3D6luhq_VfoDX15nWyAA.roa (raw, json)
Hash identifier:          xzka7ezwdC121iBkjZ4ER4D+/iP9El5PBHsAb2zvluM=
Subject key identifier:   F1:BD:C8:A9:81:F7:0F:A9:6E:86:AF:D5:7E:80:D7:D7:99:D6:C8:00
Certificate issuer:       /CN=82E5B28A20F4C6A62A4612F6C5DFB7A3D64D9DEA
Certificate serial:       23
Authority key identifier: 82:E5:B2:8A:20:F4:C6:A6:2A:46:12:F6:C5:DF:B7:A3:D6:4D:9D:EA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/guWyiiD0xqYqRhL2xd-3o9ZNneo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/8b3IqYH3D6luhq_VfoDX15nWyAA.roa
Signing time:             Sun 01 Oct 2023 01:30:05 +0000
ROA not before:           Sun 01 Oct 2023 01:30:05 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     131921
IP address blocks:        2406:a1c0:100::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/guWyiiD0xqYqRhL2xd-3o9ZNneo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/guWyiiD0xqYqRhL2xd-3o9ZNneo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/guWyiiD0xqYqRhL2xd-3o9ZNneo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 30 Jun 2024 06:27:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35 (0x23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82E5B28A20F4C6A62A4612F6C5DFB7A3D64D9DEA
        Validity
            Not Before: Oct  1 01:30:05 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=F1BDC8A981F70FA96E86AFD57E80D7D799D6C800
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:63:d6:f5:35:3d:c6:f5:03:5f:fc:f7:22:dd:
                    b0:fb:f4:f6:02:1a:f5:e3:8a:47:dc:d2:ad:d9:d1:
                    fc:4a:46:75:75:e1:09:43:67:ee:ea:12:e9:4a:2e:
                    d6:b0:23:91:0f:0d:8c:a2:f9:9f:1c:6d:20:60:31:
                    c4:ac:ec:08:3c:53:76:cc:34:84:4f:67:41:37:4d:
                    0b:80:cc:3d:6a:26:59:d1:c6:d8:de:01:58:73:34:
                    b6:5b:b3:aa:db:23:74:15:17:3e:f7:84:72:cf:c7:
                    f9:12:0d:a6:ee:e0:fb:d8:8a:5b:fe:1f:f4:7d:bc:
                    58:f1:dd:86:5a:0d:a1:88:e0:a8:37:66:f4:2b:48:
                    49:d2:a2:58:24:ac:cd:35:b2:58:bd:e4:e8:5b:ae:
                    61:5f:b8:bb:e3:f1:f0:54:0a:ec:b9:94:71:23:4e:
                    33:83:b8:e5:b1:4b:37:a0:4d:d4:f3:d8:56:d6:b2:
                    05:ad:d5:69:d5:ec:ac:c7:31:51:cc:57:47:f1:d1:
                    b2:82:79:0c:49:75:58:7d:d1:c2:17:ff:aa:12:4f:
                    5e:9a:97:1c:8d:78:6e:47:68:d3:85:bf:be:95:89:
                    bf:cc:29:fa:36:bb:fc:8f:25:ef:80:6f:26:42:8f:
                    d2:58:4b:cb:7e:d6:e8:3d:10:59:4f:5f:16:c2:dc:
                    7f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:BD:C8:A9:81:F7:0F:A9:6E:86:AF:D5:7E:80:D7:D7:99:D6:C8:00
            X509v3 Authority Key Identifier:
                keyid:82:E5:B2:8A:20:F4:C6:A6:2A:46:12:F6:C5:DF:B7:A3:D6:4D:9D:EA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/guWyiiD0xqYqRhL2xd-3o9ZNneo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/guWyiiD0xqYqRhL2xd-3o9ZNneo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/8b3IqYH3D6luhq_VfoDX15nWyAA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:a1c0:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         b0:59:64:35:9b:cf:42:a1:27:a8:b9:05:11:f0:b3:00:c0:d7:
         ea:e4:3c:96:7b:95:a8:d3:e2:40:16:ec:ac:86:ca:cd:2e:8f:
         dd:ad:39:db:38:17:d7:32:95:ac:e6:cd:17:04:e1:1a:6f:10:
         9b:07:e0:b1:cb:bc:e9:46:72:07:db:1d:37:0b:7e:16:e7:ba:
         01:bc:ff:7b:f0:cf:d3:bf:21:cd:b2:04:14:ed:2a:38:27:47:
         36:62:a1:0f:34:7c:fe:c9:3b:65:37:78:b4:97:9c:be:e8:b9:
         ca:2d:99:58:3b:c5:67:62:64:32:59:40:43:b7:37:d3:58:90:
         53:49:ce:8e:10:ec:6d:e7:8c:cf:dc:ea:b6:5e:ba:13:7d:39:
         70:fb:0e:91:d2:f4:2b:be:5e:8e:86:8b:6a:09:ba:89:c7:9d:
         cc:30:cd:90:ac:ff:c9:ee:d8:0f:42:7a:86:b2:14:8f:38:85:
         11:30:b8:99:d4:da:64:50:c5:f4:9e:b6:4f:5a:36:d8:43:c1:
         73:8b:df:09:fc:78:b9:9c:e8:70:7b:31:52:cd:9b:b9:ec:fd:
         ae:e3:70:8d:2a:4c:e9:02:d9:ab:98:7c:3f:55:70:1b:81:3d:
         ca:50:9e:6d:d1:bc:ac:04:dd:fe:4c:5f:61:35:e7:26:d1:9d:
         d3:71:de:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 00:52:50 2024 by rpki-client on console-ams.rpki-client.org