Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30003/Du1smlWkUqlSnz9a9HPdSnh_wZQ.roa
File:                     Du1smlWkUqlSnz9a9HPdSnh_wZQ.roa (raw, json)
Hash identifier:          hFugvZ+R/qNlXLr6vnnu45ENmzJ0xK80INNnvJVX+6k=
Subject key identifier:   0E:ED:6C:9A:55:A4:52:A9:52:9F:3F:5A:F4:73:DD:4A:78:7F:C1:94
Certificate issuer:       /CN=EA6B49B0752AD3BE3DD683B8AEEA2205F5AFD279
Certificate serial:       4E
Authority key identifier: EA:6B:49:B0:75:2A:D3:BE:3D:D6:83:B8:AE:EA:22:05:F5:AF:D2:79
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6mtJsHUq07491oO4ruoiBfWv0nk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/Du1smlWkUqlSnz9a9HPdSnh_wZQ.roa
Signing time:             Thu 29 Feb 2024 01:29:25 +0000
ROA not before:           Thu 29 Feb 2024 01:29:25 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     0
IP address blocks:        2001:7fa:0:3::/64 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/6mtJsHUq07491oO4ruoiBfWv0nk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/6mtJsHUq07491oO4ruoiBfWv0nk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6mtJsHUq07491oO4ruoiBfWv0nk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 20:14:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78 (0x4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA6B49B0752AD3BE3DD683B8AEEA2205F5AFD279
        Validity
            Not Before: Feb 29 01:29:25 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=0EED6C9A55A452A9529F3F5AF473DD4A787FC194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:20:ef:eb:b0:74:57:ca:be:2d:2f:85:03:9f:
                    84:85:7f:cc:a6:27:b5:5e:66:fd:5f:8d:6e:1e:12:
                    7c:ec:3a:e9:f3:e1:46:5b:a4:0a:80:6e:85:64:97:
                    02:12:20:eb:bd:d4:15:96:9a:89:23:2e:b8:cb:2d:
                    e9:3d:81:1c:6e:e7:fc:e3:05:ce:45:69:7f:b3:9d:
                    1f:fe:78:24:46:d8:01:ea:76:a7:e0:58:25:f2:e1:
                    7f:bc:32:46:75:2e:93:a1:15:86:80:c8:1e:f2:7d:
                    ae:24:8e:e0:fb:b0:7b:b9:2f:63:3c:e2:2a:56:5d:
                    b0:92:1e:28:31:4e:03:4d:27:e2:93:dc:83:79:08:
                    03:2b:91:fb:e8:07:29:8e:66:92:9e:87:48:5c:ff:
                    0c:64:8b:25:82:32:13:e8:45:2a:44:3a:cb:d4:94:
                    5b:42:78:f4:11:f3:6b:bb:9d:ca:45:72:56:38:4b:
                    33:d3:c5:a8:b6:ef:f9:59:6f:2b:1e:20:b1:c5:3b:
                    e5:06:85:1f:3f:d2:5f:7f:de:78:6f:ab:4f:80:96:
                    8b:bc:53:34:ae:a8:bb:45:6e:84:65:bb:de:2d:31:
                    2e:7e:77:34:7b:3e:03:83:1f:da:e7:08:43:4e:49:
                    40:d4:62:27:db:28:0e:19:e0:75:d6:ee:67:e2:53:
                    ab:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:ED:6C:9A:55:A4:52:A9:52:9F:3F:5A:F4:73:DD:4A:78:7F:C1:94
            X509v3 Authority Key Identifier:
                keyid:EA:6B:49:B0:75:2A:D3:BE:3D:D6:83:B8:AE:EA:22:05:F5:AF:D2:79

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/6mtJsHUq07491oO4ruoiBfWv0nk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6mtJsHUq07491oO4ruoiBfWv0nk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/Du1smlWkUqlSnz9a9HPdSnh_wZQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:7fa:0:3::/64

    Signature Algorithm: sha256WithRSAEncryption
         92:35:ad:1d:bd:cf:7f:c5:91:4a:db:8d:db:48:03:24:49:1e:
         79:98:e1:1d:af:3d:f5:8c:42:cf:fc:d8:65:ad:8d:66:0a:7c:
         d7:60:9d:e6:a4:30:53:9b:ef:12:4d:20:fd:70:a0:ab:d2:21:
         78:53:b1:e2:98:5c:a1:34:96:68:ca:4c:95:81:80:f7:a4:83:
         0f:25:59:91:82:b3:13:0d:6a:42:61:c2:62:2b:39:08:fd:f1:
         ca:9d:cc:29:96:f0:cb:ae:b6:40:f1:45:22:ee:db:11:ed:18:
         6d:8a:03:08:71:1f:f1:0a:3a:50:25:4c:bd:ef:da:dd:08:18:
         ce:a6:e2:55:9e:36:de:0f:76:85:4c:8f:dc:9c:d3:51:76:eb:
         db:22:51:fc:2a:e8:44:52:91:dd:e3:69:9d:63:0a:f7:f7:ad:
         75:fe:5b:ee:74:b2:9c:6f:64:47:fa:a2:d1:f3:76:49:a6:43:
         b7:8d:e9:60:4c:4c:4b:63:39:69:42:f5:c4:68:e9:a3:53:83:
         4a:c9:7b:ab:63:7f:51:88:d3:3a:07:02:1f:99:72:2e:60:65:
         c3:59:e3:c1:c6:74:b9:41:9c:d0:42:bf:30:5b:85:80:91:3e:
         81:16:76:bc:18:d4:f7:7d:37:9d:b7:54:1b:bb:09:46:b2:8c:
         d5:a3:ff:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:34:37 2024 by rpki-client on console-ams.rpki-client.org