Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/0030113/FFAEP-lNgNqp59owt4NgwNyRr-E.roa
File:                     FFAEP-lNgNqp59owt4NgwNyRr-E.roa (raw, json)
Hash identifier:          4bHlRZEbpxitugm5S/GeOmizOVbdxOFnzULenS2D3/0=
Subject key identifier:   14:50:04:3F:E9:4D:80:DA:A9:E7:DA:30:B7:83:60:C0:DC:91:AF:E1
Certificate issuer:       /CN=F27064FFE42936CDBF59E51465E023FAE4B5AFAA
Certificate serial:       3A
Authority key identifier: F2:70:64:FF:E4:29:36:CD:BF:59:E5:14:65:E0:23:FA:E4:B5:AF:AA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/8nBk_-QpNs2_WeUUZeAj-uS1r6o.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0030113/FFAEP-lNgNqp59owt4NgwNyRr-E.roa
Signing time:             Sun 30 Jun 2024 01:31:53 +0000
ROA not before:           Sun 30 Jun 2024 01:31:53 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     2515
IP address blocks:        2001:fa0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0030113/8nBk_-QpNs2_WeUUZeAj-uS1r6o.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0030113/8nBk_-QpNs2_WeUUZeAj-uS1r6o.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/8nBk_-QpNs2_WeUUZeAj-uS1r6o.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Dec 2024 00:11:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58 (0x3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F27064FFE42936CDBF59E51465E023FAE4B5AFAA
        Validity
            Not Before: Jun 30 01:31:53 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=1450043FE94D80DAA9E7DA30B78360C0DC91AFE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a5:b7:e2:8d:f6:39:1c:de:e5:b7:3b:7d:9b:
                    85:51:6f:13:8b:d3:ac:22:de:79:c4:22:2e:8f:09:
                    b5:46:8b:e7:6a:34:6f:4b:e0:f6:36:1f:c0:24:05:
                    7b:a8:a8:3c:20:f5:57:76:03:d4:07:70:bc:c6:cc:
                    1f:ec:15:27:d4:fe:f2:85:4f:d5:fa:df:cf:c3:a0:
                    04:0f:40:d9:a6:bb:7d:5f:5f:50:71:74:34:05:fc:
                    e4:4e:c9:bf:31:84:5b:2c:59:e0:88:c2:0e:82:e6:
                    b4:5c:8a:2a:51:9c:fe:90:7a:66:8a:90:85:ed:91:
                    0c:56:30:85:9c:0b:25:dd:5f:72:b7:bc:a7:22:b3:
                    c3:0d:bf:35:29:84:4f:4e:a8:af:1c:f0:f6:49:eb:
                    99:ed:e0:0f:05:c3:53:9e:75:9b:43:94:bd:3b:6e:
                    e9:7a:93:fa:da:50:39:76:1d:7f:5f:b6:ca:f4:a8:
                    f9:51:40:35:92:d3:6e:2c:7b:41:7c:aa:4a:37:26:
                    0d:6f:7b:55:c1:fd:8d:14:f6:be:dd:be:84:ae:23:
                    d1:42:0b:e9:38:60:87:6e:78:0d:81:fb:55:b2:95:
                    8a:25:b3:1d:bb:ea:c1:53:cb:e0:c9:30:9e:e4:e3:
                    f8:2b:a4:ee:18:e9:af:77:f8:ad:3e:64:e9:64:72:
                    56:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:50:04:3F:E9:4D:80:DA:A9:E7:DA:30:B7:83:60:C0:DC:91:AF:E1
            X509v3 Authority Key Identifier:
                keyid:F2:70:64:FF:E4:29:36:CD:BF:59:E5:14:65:E0:23:FA:E4:B5:AF:AA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0030113/8nBk_-QpNs2_WeUUZeAj-uS1r6o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/8nBk_-QpNs2_WeUUZeAj-uS1r6o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0030113/FFAEP-lNgNqp59owt4NgwNyRr-E.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:fa0::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:63:7c:b8:1f:c4:1a:2c:ba:b9:8e:b9:af:82:05:f1:ff:13:
         e9:aa:f1:e7:7b:85:13:df:62:43:08:2f:e0:b1:7a:2b:50:38:
         43:3e:a1:c9:ce:7f:2d:0e:d4:46:96:29:df:2d:f4:16:47:85:
         45:67:5d:c2:b5:ed:88:de:7f:d0:93:cc:e6:6b:ad:3e:a9:f4:
         96:d6:03:aa:fe:d3:79:14:bc:33:d0:06:8e:99:db:30:05:cf:
         9b:26:63:8f:79:76:a4:9a:df:6f:d5:6b:4a:fa:8b:ea:1a:eb:
         b0:b4:29:11:dd:f5:a0:04:95:61:5f:3f:60:8c:22:23:16:fb:
         1e:24:a7:2d:e9:6a:a5:f0:86:87:50:33:ef:f0:ed:86:32:ca:
         00:b5:a1:36:69:a7:c1:1a:70:ff:42:0d:d7:44:6e:d3:59:de:
         df:79:44:fd:d8:ed:c6:f2:99:c3:f6:4d:0e:0e:89:56:6f:1d:
         d2:e8:6e:07:b7:2e:20:38:7e:d8:2c:69:d1:91:68:1b:da:d2:
         d5:25:16:02:7c:bb:b1:8c:f8:89:7f:68:f0:dc:a5:f9:31:40:
         a3:f6:ce:4a:a6:67:02:03:85:e8:ae:e8:5a:e6:48:34:bc:7f:
         2c:c5:b6:49:c8:23:40:d6:e6:2d:f4:ed:83:5b:8c:a8:9a:d1:
         a6:0d:26:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:26:59 2024 by rpki-client on console-ams.rpki-client.org