Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1003/LqM5S1L3MvQEksB1Eh-fRZuvjh4.roa
File:                     LqM5S1L3MvQEksB1Eh-fRZuvjh4.roa (raw, json)
Hash identifier:          uBnDyJDBDF8I3MpaF+55rjXm7yWds5qh5LP7K5JusoA=
Subject key identifier:   2E:A3:39:4B:52:F7:32:F4:04:92:C0:75:12:1F:9F:45:9B:AF:8E:1E
Certificate issuer:       /CN=8ACDAB1E1EA633BA8AD18A2ACB72360E9280C4B6
Certificate serial:       3D
Authority key identifier: 8A:CD:AB:1E:1E:A6:33:BA:8A:D1:8A:2A:CB:72:36:0E:92:80:C4:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/is2rHh6mM7qK0Yoqy3I2DpKAxLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1003/LqM5S1L3MvQEksB1Eh-fRZuvjh4.roa
Signing time:             Mon 01 Jan 2024 01:30:20 +0000
ROA not before:           Mon 01 Jan 2024 01:30:20 +0000
ROA not after:            Sat 14 Dec 2024 01:30:03 +0000
asID:                     2515
IP address blocks:        202.12.30.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1003/is2rHh6mM7qK0Yoqy3I2DpKAxLY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1003/is2rHh6mM7qK0Yoqy3I2DpKAxLY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/is2rHh6mM7qK0Yoqy3I2DpKAxLY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61 (0x3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ACDAB1E1EA633BA8AD18A2ACB72360E9280C4B6
        Validity
            Not Before: Jan  1 01:30:20 2024 GMT
            Not After : Dec 14 01:30:03 2024 GMT
        Subject: CN=2EA3394B52F732F40492C075121F9F459BAF8E1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:5f:99:a9:b2:f3:1e:b8:f5:9c:1a:37:40:a0:
                    bd:66:75:61:5d:41:e4:c1:bf:f9:31:56:52:03:f0:
                    19:f5:57:1b:eb:63:36:80:e8:d7:40:f6:1d:28:cf:
                    78:e3:e5:51:d1:99:65:dc:8d:6b:6d:7c:9b:eb:d9:
                    c2:67:b5:0c:ef:4f:c9:de:9c:a1:c0:b8:14:32:56:
                    ad:8b:4a:b7:01:2b:c8:76:e7:f5:de:16:22:ac:16:
                    c5:fa:00:0c:b1:67:cd:2f:89:64:ae:9c:b6:ad:e3:
                    59:87:e3:63:6a:d4:da:ca:0d:66:0c:f9:aa:00:1f:
                    a2:75:c6:f1:06:50:99:c8:41:a8:1a:72:df:a5:42:
                    a0:68:6b:e5:1d:09:c7:6b:e1:0f:f6:1f:21:2f:30:
                    7f:8b:7e:87:95:57:28:cf:ae:80:1a:5b:b8:64:bb:
                    56:31:3b:f0:32:66:03:33:80:59:17:f4:e2:8e:9b:
                    73:44:f1:34:7c:55:aa:dd:96:b8:7f:7a:0c:ce:a2:
                    28:04:de:1b:8c:da:f8:e5:97:2e:30:46:73:da:99:
                    c2:df:78:45:62:f2:11:eb:6f:75:5e:82:f7:5b:b3:
                    c9:a7:57:35:af:b6:36:a6:9b:08:15:6a:fd:27:b7:
                    d0:9f:63:18:ef:b3:b9:29:4d:14:31:7e:d0:6e:d5:
                    10:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:A3:39:4B:52:F7:32:F4:04:92:C0:75:12:1F:9F:45:9B:AF:8E:1E
            X509v3 Authority Key Identifier:
                keyid:8A:CD:AB:1E:1E:A6:33:BA:8A:D1:8A:2A:CB:72:36:0E:92:80:C4:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1003/is2rHh6mM7qK0Yoqy3I2DpKAxLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/is2rHh6mM7qK0Yoqy3I2DpKAxLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1003/LqM5S1L3MvQEksB1Eh-fRZuvjh4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.12.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:22:0b:23:3f:5c:03:da:72:e9:57:82:d1:7a:3c:74:b3:7a:
         2f:fb:d0:87:40:7f:32:27:e4:44:dd:c4:8c:31:a4:f6:71:97:
         66:e3:52:35:3c:fb:97:5c:9f:e9:68:a3:28:32:d6:a4:7e:0a:
         4b:d3:e8:d7:b4:88:ee:ac:4f:1f:e9:9d:42:cf:15:5b:64:fc:
         70:4f:e4:be:16:3e:7f:9f:db:43:a8:8a:78:d3:c1:58:88:6d:
         23:6c:90:77:74:2b:e3:cc:61:36:53:b8:69:3d:16:a9:71:2c:
         41:a5:9a:ef:dc:94:4d:eb:37:83:a6:07:5f:50:f4:ab:08:a9:
         2e:66:63:70:95:44:37:8a:18:62:c9:dc:81:5a:1a:83:5f:34:
         f4:02:25:af:e5:dd:ff:92:d9:69:b6:9e:8a:e1:25:b1:ef:7d:
         6a:c4:e1:ae:8b:a4:3f:3a:fc:0d:a1:40:ab:6d:28:9e:6a:ab:
         3b:a2:74:cb:ff:5c:7f:0f:de:92:7c:cc:ba:32:3d:22:c9:b5:
         0c:81:98:47:3b:2e:20:d7:33:a4:ed:f7:36:e1:f7:9b:91:c3:
         f8:49:db:2c:2a:84:83:65:ac:fd:45:9b:9d:21:b9:8a:09:ff:
         3e:f5:5e:e5:2e:ed:d7:09:41:31:16:51:7e:17:eb:d4:f1:e2:
         ae:3b:2d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:41 2024 by rpki-client on console-fra.rpki-client.org