Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30423/0Ixs9Qfk3jbqjlgkBaoFrcv0F7k.roa
File:                     0Ixs9Qfk3jbqjlgkBaoFrcv0F7k.roa (raw, json)
Hash identifier:          /qPyx9m/R5FjxRXRDEqSv72VpDUK3cPCYKuLkHzI8YI=
Subject key identifier:   D0:8C:6C:F5:07:E4:DE:36:EA:8E:58:24:05:AA:05:AD:CB:F4:17:B9
Certificate issuer:       /CN=B910BD9437967C7AFDD374E1EA6EBED7FA6F96B5
Certificate serial:       1D
Authority key identifier: B9:10:BD:94:37:96:7C:7A:FD:D3:74:E1:EA:6E:BE:D7:FA:6F:96:B5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uRC9lDeWfHr903Th6m6-1_pvlrU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/0Ixs9Qfk3jbqjlgkBaoFrcv0F7k.roa
Signing time:             Sun 26 May 2024 07:32:54 +0000
ROA not before:           Sun 26 May 2024 07:32:54 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     151382
IP address blocks:        2401:d20:2000::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/uRC9lDeWfHr903Th6m6-1_pvlrU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/uRC9lDeWfHr903Th6m6-1_pvlrU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uRC9lDeWfHr903Th6m6-1_pvlrU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 29 Jun 2024 06:42:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29 (0x1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B910BD9437967C7AFDD374E1EA6EBED7FA6F96B5
        Validity
            Not Before: May 26 07:32:54 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=D08C6CF507E4DE36EA8E582405AA05ADCBF417B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d0:ef:40:52:c1:f3:55:41:f7:9c:ba:f6:ec:
                    e1:8f:a8:91:e3:a5:0f:46:2c:ce:2d:c3:44:f5:9e:
                    06:5e:3c:e5:c2:2f:9d:90:bf:49:28:76:dd:b1:20:
                    8f:42:01:f8:e9:65:ac:99:88:60:37:65:1b:e3:fe:
                    cc:ad:23:75:7c:bd:4c:9e:12:47:7c:dc:d1:80:28:
                    28:3d:97:35:1e:14:98:54:ef:db:fe:9a:a6:3c:fc:
                    fd:2f:48:ae:45:af:60:7a:36:c8:a9:ba:a9:da:44:
                    28:63:9f:8d:ca:ec:85:ba:dc:04:bc:61:65:c1:06:
                    9e:1c:fa:50:a9:f4:b8:83:e6:98:0c:00:90:f8:1c:
                    c2:22:bf:dc:d3:f8:8b:45:b0:3e:ea:fe:ea:9b:3d:
                    14:07:01:18:4d:21:00:b5:af:b5:73:e6:f8:65:1f:
                    74:1a:a5:80:08:97:3c:2a:39:c6:2c:93:06:ef:32:
                    0c:a2:e5:5a:05:c2:78:3c:1a:48:d9:02:b9:77:14:
                    1e:c4:18:3c:04:75:0b:7a:e8:de:2d:15:05:2c:f5:
                    2d:86:e5:14:11:ce:54:9f:72:ec:a4:ea:26:42:13:
                    2b:42:ab:9e:0c:5e:bf:8b:4a:9a:68:74:02:67:b1:
                    a3:1c:3f:d5:d9:e5:43:80:50:11:97:6f:7d:2b:52:
                    0b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:8C:6C:F5:07:E4:DE:36:EA:8E:58:24:05:AA:05:AD:CB:F4:17:B9
            X509v3 Authority Key Identifier:
                keyid:B9:10:BD:94:37:96:7C:7A:FD:D3:74:E1:EA:6E:BE:D7:FA:6F:96:B5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/uRC9lDeWfHr903Th6m6-1_pvlrU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uRC9lDeWfHr903Th6m6-1_pvlrU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/0Ixs9Qfk3jbqjlgkBaoFrcv0F7k.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:d20:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         3d:bf:be:e3:ee:36:dc:a8:fa:55:32:97:91:c4:3b:07:b4:cd:
         79:17:97:ba:3b:7a:76:cf:50:7e:8e:15:1d:5f:23:7f:bb:97:
         1d:8a:e4:a4:55:62:f4:99:e5:9e:3c:da:fe:fa:da:99:77:03:
         8d:9a:de:55:c2:71:a8:2c:fc:7d:f4:69:9c:a2:1e:07:df:e0:
         ba:99:40:a4:26:c1:76:9a:21:d5:56:7e:9d:13:a1:87:3e:d1:
         cb:a4:32:45:32:f8:8c:ec:3b:07:66:a7:4d:7c:61:cb:88:f0:
         27:dc:40:6f:2d:dd:26:0e:7b:6d:30:ed:4a:ef:a9:ff:77:31:
         5e:68:40:ed:2c:ea:61:bf:c5:10:86:47:b5:34:19:22:81:48:
         55:a7:e7:0f:d8:00:99:62:c4:25:aa:be:7b:34:2e:99:ae:7a:
         20:4d:e1:db:9b:9b:42:28:7b:61:4f:2f:93:73:0f:43:2c:09:
         b1:cc:60:0a:68:0b:0e:80:55:d6:b0:6f:7c:45:fc:50:7b:d2:
         89:bc:28:e7:de:8b:b6:34:f3:de:df:d3:78:65:79:cb:bd:16:
         90:e4:bb:6a:80:4a:92:40:32:c8:5d:54:19:2d:0d:9e:33:c8:
         24:f1:65:ce:d8:18:d8:c6:d4:14:94:ff:48:39:6b:ca:2f:fb:
         30:ee:d8:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 13:59:02 2024 by rpki-client on console-fra.rpki-client.org