Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/0030113/l-2A7zkVe5QBK3yliWCc_ojGrB4.roa
File:                     l-2A7zkVe5QBK3yliWCc_ojGrB4.roa (raw, json)
Hash identifier:          siCj7VoeEnnGS+IUhoC78TmRumzAOxHLN/hog2Hi57w=
Subject key identifier:   97:ED:80:EF:39:15:7B:94:01:2B:7C:A5:89:60:9C:FE:88:C6:AC:1E
Certificate issuer:       /CN=F27064FFE42936CDBF59E51465E023FAE4B5AFAA
Certificate serial:       2A
Authority key identifier: F2:70:64:FF:E4:29:36:CD:BF:59:E5:14:65:E0:23:FA:E4:B5:AF:AA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/8nBk_-QpNs2_WeUUZeAj-uS1r6o.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0030113/l-2A7zkVe5QBK3yliWCc_ojGrB4.roa
Signing time:             Tue 01 Aug 2023 01:29:07 +0000
ROA not before:           Tue 01 Aug 2023 01:29:07 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     2515
IP address blocks:        2001:fa0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0030113/8nBk_-QpNs2_WeUUZeAj-uS1r6o.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0030113/8nBk_-QpNs2_WeUUZeAj-uS1r6o.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/8nBk_-QpNs2_WeUUZeAj-uS1r6o.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42 (0x2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F27064FFE42936CDBF59E51465E023FAE4B5AFAA
        Validity
            Not Before: Aug  1 01:29:07 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=97ED80EF39157B94012B7CA589609CFE88C6AC1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c5:3d:f1:3b:b6:05:5e:74:73:a6:4d:d3:9c:
                    86:87:69:e8:9c:3d:90:79:1f:c4:c4:28:51:23:50:
                    1a:94:8e:39:cd:6b:0f:64:70:b5:0c:7d:29:da:03:
                    f9:70:77:bc:fc:57:4c:b2:80:07:c7:96:e6:99:d1:
                    ad:73:b2:4c:04:08:e8:2d:4b:2e:8f:76:59:cf:3a:
                    c3:f5:47:37:30:dc:2f:4b:67:b3:c8:60:7f:c3:7b:
                    df:9f:f8:36:86:5a:b4:e2:a7:a9:47:cf:78:2d:e1:
                    62:20:1a:d1:79:df:54:7d:82:d6:50:13:4b:b1:dd:
                    19:8b:96:b9:c0:50:a5:0f:25:28:25:08:2b:12:72:
                    64:b8:e3:d7:39:b3:66:e0:a4:4b:0e:a5:8e:b3:f9:
                    4e:a1:cc:7a:22:5d:95:65:7f:74:44:7a:18:1d:b4:
                    c1:72:29:64:23:93:5b:b9:14:60:5b:58:2b:30:c0:
                    99:ee:86:f5:93:b1:d7:7e:b8:62:27:77:6e:1e:d7:
                    32:7a:26:b8:99:5b:21:4f:d3:33:2b:9a:9f:42:2d:
                    53:76:32:d5:37:91:f2:44:f8:ec:e4:77:a1:c0:38:
                    3c:da:ee:c1:ee:3b:6c:e8:f0:21:50:03:1a:15:a3:
                    2f:a9:27:04:b0:44:5e:be:c5:0b:83:39:1e:d3:7d:
                    e8:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:ED:80:EF:39:15:7B:94:01:2B:7C:A5:89:60:9C:FE:88:C6:AC:1E
            X509v3 Authority Key Identifier:
                keyid:F2:70:64:FF:E4:29:36:CD:BF:59:E5:14:65:E0:23:FA:E4:B5:AF:AA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0030113/8nBk_-QpNs2_WeUUZeAj-uS1r6o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/8nBk_-QpNs2_WeUUZeAj-uS1r6o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0030113/l-2A7zkVe5QBK3yliWCc_ojGrB4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:fa0::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:1d:92:26:cd:7c:15:cd:bc:6a:db:fd:46:07:ff:64:e3:c2:
         b2:54:58:c0:4e:68:2a:a1:fa:fa:22:d5:f6:ee:8c:c3:3d:45:
         28:80:0a:18:b8:45:04:f3:11:de:8b:dc:60:fa:f5:0e:10:31:
         e3:57:36:1d:a2:49:0c:bb:7c:68:50:1c:e9:a1:36:a5:b1:7e:
         47:75:dd:51:cd:7c:f4:44:6f:23:85:d1:92:17:4f:04:c7:c9:
         78:d5:84:27:d5:04:f8:69:5d:ff:19:46:e8:f5:c8:04:00:ae:
         b9:39:79:e2:e0:d7:e3:e3:cf:e2:b8:1d:58:cf:6e:48:a4:b9:
         db:fb:a6:09:f5:da:81:70:2f:ff:ae:82:6e:95:18:c7:39:5d:
         b4:05:13:4a:f0:e3:c0:e0:8c:96:20:34:b6:ad:90:48:9a:41:
         2d:11:55:c4:dd:31:35:b2:b5:ca:59:59:45:25:4a:c0:24:6c:
         65:bd:ae:ac:9a:a7:2d:cf:7e:98:80:9e:01:e1:7d:1e:d3:84:
         8d:9f:79:c9:b6:0f:93:72:b2:bd:27:fc:6c:30:8f:f5:83:e3:
         9b:2b:1d:1c:7b:8c:50:75:58:2e:61:14:c5:91:a6:39:84:e0:
         6a:fc:52:38:c6:00:2e:1b:71:b8:e0:2d:69:ab:a5:2f:ed:d0:
         e9:ee:25:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 03:38:35 2024 by rpki-client on console-ams.rpki-client.org