Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30423/g7noS9hSlblvwZv2qJdVB5bahlM.roa
File:                     g7noS9hSlblvwZv2qJdVB5bahlM.roa (raw, json)
Hash identifier:          swq0ujhH6Hf5nVS+H2jdFaBjUdvUza1vIn0oNkEDNCg=
Subject key identifier:   83:B9:E8:4B:D8:52:95:B9:6F:C1:9B:F6:A8:97:55:07:96:DA:86:53
Certificate issuer:       /CN=B910BD9437967C7AFDD374E1EA6EBED7FA6F96B5
Certificate serial:       05
Authority key identifier: B9:10:BD:94:37:96:7C:7A:FD:D3:74:E1:EA:6E:BE:D7:FA:6F:96:B5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uRC9lDeWfHr903Th6m6-1_pvlrU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/g7noS9hSlblvwZv2qJdVB5bahlM.roa
Signing time:             Tue 05 Sep 2023 05:39:25 +0000
ROA not before:           Tue 05 Sep 2023 05:39:25 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     63800
IP address blocks:        2401:d20::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/uRC9lDeWfHr903Th6m6-1_pvlrU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/uRC9lDeWfHr903Th6m6-1_pvlrU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uRC9lDeWfHr903Th6m6-1_pvlrU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 29 Jun 2024 06:42:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B910BD9437967C7AFDD374E1EA6EBED7FA6F96B5
        Validity
            Not Before: Sep  5 05:39:25 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=83B9E84BD85295B96FC19BF6A897550796DA8653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:70:bd:7d:82:6d:d1:24:a9:cf:9f:14:ba:31:
                    6c:0e:6c:29:b2:a6:6b:d4:10:3d:29:87:7e:2b:95:
                    0c:38:4c:bb:31:5b:22:d1:b8:5c:af:8b:fa:7f:ac:
                    7f:61:89:30:e9:08:cf:10:57:ea:09:62:76:a9:f0:
                    8d:0f:82:72:a8:85:38:dd:64:34:58:80:a2:ea:64:
                    ce:b9:1f:bc:49:36:77:71:b7:63:f4:f9:4f:e6:22:
                    09:cb:d4:4e:4e:58:4a:bb:4b:8b:48:9d:05:8c:29:
                    0f:a3:75:90:8b:ff:c9:07:da:4a:c5:a1:83:a6:bd:
                    a8:b5:63:53:00:61:87:8b:6e:f0:cb:a4:f5:c1:ca:
                    86:43:ba:7d:da:98:0c:70:e3:52:3f:b1:b1:09:f2:
                    7f:29:55:95:3c:47:75:3c:73:74:75:2d:b3:e2:ee:
                    b9:cc:6c:3d:f1:9a:b8:cc:3b:f6:65:90:4a:4e:98:
                    f2:12:6c:62:45:04:61:b9:31:6a:11:3f:2d:a4:ab:
                    f8:f5:fd:4f:4c:70:5e:40:b5:07:e3:25:d3:27:72:
                    06:d6:3b:a1:3f:98:f7:17:30:03:c2:55:a6:c9:45:
                    58:6e:60:7a:12:6f:96:ee:29:0d:ea:1e:1c:1a:d0:
                    5e:9f:8f:2e:54:5b:71:19:12:99:c7:e0:25:78:36:
                    8e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:B9:E8:4B:D8:52:95:B9:6F:C1:9B:F6:A8:97:55:07:96:DA:86:53
            X509v3 Authority Key Identifier:
                keyid:B9:10:BD:94:37:96:7C:7A:FD:D3:74:E1:EA:6E:BE:D7:FA:6F:96:B5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/uRC9lDeWfHr903Th6m6-1_pvlrU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uRC9lDeWfHr903Th6m6-1_pvlrU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/g7noS9hSlblvwZv2qJdVB5bahlM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:d20::/36

    Signature Algorithm: sha256WithRSAEncryption
         1e:1b:7e:fd:e6:a4:fe:6f:37:64:a6:b7:8b:52:c6:e3:cf:ec:
         a3:11:4e:3b:38:ad:89:45:ca:e1:5e:78:ca:c8:55:89:cc:a6:
         fe:25:15:22:0b:b3:dd:f9:9e:b0:9e:fb:27:3c:f3:3c:86:2b:
         00:c4:94:36:ee:4a:18:bc:83:e4:2d:c7:59:5a:41:80:da:99:
         10:f3:a0:3a:27:cc:b4:8f:b7:c2:b8:32:c8:24:28:7f:8b:cc:
         f8:1e:3f:90:d1:79:6b:a5:5a:39:7a:22:27:98:1f:97:0a:07:
         c9:19:b8:80:c0:aa:6c:6c:dd:e3:27:53:2d:58:f3:04:c3:7c:
         08:f8:eb:4a:70:03:75:cf:4f:a3:3a:fc:af:a6:86:61:90:d2:
         b1:bc:fd:f4:c9:71:3e:eb:ce:db:2b:8c:1d:a7:9b:c3:86:fe:
         e5:20:21:e5:c6:c5:bf:00:28:29:31:3d:06:14:02:0a:9f:e9:
         d4:54:36:00:5d:08:22:93:83:c3:fc:e3:71:fe:2f:09:95:e2:
         8b:14:49:1a:72:36:37:9f:c4:8f:6a:c2:ab:89:bb:22:a1:71:
         e9:86:ef:77:26:00:8a:02:68:e9:fb:f2:0c:54:0d:52:47:c2:
         f2:3f:53:78:e4:f2:fe:f0:ba:12:72:f5:71:67:f4:bb:59:b9:
         65:f8:be:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 14:22:07 2024 by rpki-client on console-ams.rpki-client.org