Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30423/5jd22wW7lUs6yxR59cI-JwY3BVU.roa
File:                     5jd22wW7lUs6yxR59cI-JwY3BVU.roa (raw, json)
Hash identifier:          ZEce7lYapkaeJRDq5qrnxwjpguYSe5Wp+NQsHWk9Bq0=
Subject key identifier:   E6:37:76:DB:05:BB:95:4B:3A:CB:14:79:F5:C2:3E:27:06:37:05:55
Certificate issuer:       /CN=B910BD9437967C7AFDD374E1EA6EBED7FA6F96B5
Certificate serial:       1A
Authority key identifier: B9:10:BD:94:37:96:7C:7A:FD:D3:74:E1:EA:6E:BE:D7:FA:6F:96:B5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uRC9lDeWfHr903Th6m6-1_pvlrU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/5jd22wW7lUs6yxR59cI-JwY3BVU.roa
Signing time:             Tue 30 Apr 2024 17:07:59 +0000
ROA not before:           Tue 30 Apr 2024 17:07:59 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     151381
IP address blocks:        2401:d20:a::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/uRC9lDeWfHr903Th6m6-1_pvlrU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/uRC9lDeWfHr903Th6m6-1_pvlrU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uRC9lDeWfHr903Th6m6-1_pvlrU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 29 Jun 2024 06:42:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26 (0x1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B910BD9437967C7AFDD374E1EA6EBED7FA6F96B5
        Validity
            Not Before: Apr 30 17:07:59 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=E63776DB05BB954B3ACB1479F5C23E2706370555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:5f:58:81:f1:75:50:23:44:33:7d:00:0e:d8:
                    b7:c5:01:79:68:43:c4:8e:92:25:fe:05:33:c7:c5:
                    dc:d7:6a:b9:35:88:bf:9d:a7:ca:3a:e0:b5:2a:a0:
                    d6:5c:64:55:48:27:55:6e:69:ae:89:5d:d7:7d:59:
                    b7:86:7b:f8:01:5b:87:ca:b1:eb:c3:8f:f4:23:25:
                    66:19:59:33:94:50:6b:8b:7e:93:77:2b:b8:e7:3f:
                    09:d7:6e:a4:b0:ae:bf:78:bf:54:b5:ff:9c:8a:56:
                    9a:55:ef:a2:ca:04:29:9e:2a:75:16:fc:5b:bf:3e:
                    5b:8f:8d:2f:9f:f9:0a:e6:d0:6a:2a:79:79:80:db:
                    6a:0a:38:60:f9:8e:be:bf:50:97:11:68:18:94:7c:
                    d8:c2:1c:ac:e3:a5:df:57:95:58:89:f6:92:d6:62:
                    a3:37:08:3a:6d:02:53:ad:27:93:7d:bc:d6:8d:3c:
                    5d:99:26:3c:0c:38:85:c9:be:27:07:f7:db:6c:16:
                    27:f3:d6:11:8b:73:e5:79:7d:7f:04:9f:d1:41:2d:
                    2e:e6:67:ca:5a:80:52:ab:71:06:5f:b8:30:71:58:
                    81:76:e9:ef:a2:e6:8e:a2:a5:90:05:3f:40:32:09:
                    6a:f9:55:77:6e:61:61:af:86:f3:9f:30:b0:7e:2a:
                    1c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:37:76:DB:05:BB:95:4B:3A:CB:14:79:F5:C2:3E:27:06:37:05:55
            X509v3 Authority Key Identifier:
                keyid:B9:10:BD:94:37:96:7C:7A:FD:D3:74:E1:EA:6E:BE:D7:FA:6F:96:B5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/uRC9lDeWfHr903Th6m6-1_pvlrU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uRC9lDeWfHr903Th6m6-1_pvlrU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/5jd22wW7lUs6yxR59cI-JwY3BVU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:d20:a::/48

    Signature Algorithm: sha256WithRSAEncryption
         1b:a8:42:e8:cb:86:97:8e:a6:3b:1f:eb:ab:c5:18:80:f3:ea:
         02:97:00:dd:5f:7b:43:95:a5:87:69:dc:12:c1:c9:26:ec:e5:
         94:d9:aa:27:7e:c9:23:f2:2f:16:fe:0b:c4:2d:df:4f:71:9e:
         e9:d3:f3:d3:9f:16:b9:fb:aa:b1:93:19:ee:5d:5f:08:18:d1:
         f7:ff:3b:7b:e4:25:31:de:a5:9a:c2:a8:d3:f3:7a:2c:95:97:
         2b:d7:f3:74:de:72:4d:e5:a7:b0:05:be:3a:b6:e1:a0:06:ca:
         93:5e:f3:ee:79:3f:f4:01:0c:ca:68:62:2d:b3:9a:fa:8c:22:
         67:ce:79:1a:54:e0:74:b6:cc:9c:f0:3a:fb:8a:4f:12:a1:4e:
         6b:98:46:d9:3c:19:04:78:96:40:51:0f:67:fa:95:07:4c:c4:
         26:92:10:56:a8:36:0d:85:3e:20:7c:48:32:a3:b6:08:c7:0f:
         73:1f:56:15:50:a6:d8:8c:11:b4:c0:13:5a:8d:dd:22:1f:1c:
         97:d3:ff:19:8e:a6:84:13:b7:2b:2d:e5:4a:c2:af:0c:66:93:
         2e:d5:54:63:32:d0:b7:0d:20:9f:6c:d6:84:5e:46:68:0b:97:
         c6:d8:ec:3b:f8:ca:d7:4a:67:99:eb:5a:3d:1d:31:06:7e:28:
         8d:d6:99:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 14:22:07 2024 by rpki-client on console-ams.rpki-client.org