Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30003/L7ZvL4Q8_pKAto5WEIsoDMMT6nE.roa
File:                     L7ZvL4Q8_pKAto5WEIsoDMMT6nE.roa (raw, json)
Hash identifier:          UdJfKho6y3o2OPjg+XX60hkvV8CTbJtLHKVcz+/TKnQ=
Subject key identifier:   2F:B6:6F:2F:84:3C:FE:92:80:B6:8E:56:10:8B:28:0C:C3:13:EA:71
Certificate issuer:       /CN=106B1F3D649E5A25AA1340C18BD6A7C24CF36AF6
Certificate serial:       54
Authority key identifier: 10:6B:1F:3D:64:9E:5A:25:AA:13:40:C1:8B:D6:A7:C2:4C:F3:6A:F6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EGsfPWSeWiWqE0DBi9anwkzzavY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/L7ZvL4Q8_pKAto5WEIsoDMMT6nE.roa
Signing time:             Fri 01 Sep 2023 01:28:26 +0000
ROA not before:           Fri 01 Sep 2023 01:28:26 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     38644
IP address blocks:        2001:3a0:f006::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/EGsfPWSeWiWqE0DBi9anwkzzavY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/EGsfPWSeWiWqE0DBi9anwkzzavY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EGsfPWSeWiWqE0DBi9anwkzzavY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Jun 2024 01:59:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84 (0x54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=106B1F3D649E5A25AA1340C18BD6A7C24CF36AF6
        Validity
            Not Before: Sep  1 01:28:26 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=2FB66F2F843CFE9280B68E56108B280CC313EA71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:89:69:1f:fe:2a:7d:67:9f:03:ff:f3:4a:2f:
                    9e:89:e1:db:72:06:31:e8:97:f2:16:81:0b:39:bf:
                    0e:ef:43:7c:d1:52:09:2c:d5:e7:4b:10:c3:a8:f1:
                    48:72:f1:2c:ea:0e:ca:d5:6d:7a:61:ee:0b:78:04:
                    85:88:81:9c:e9:b4:e3:5c:31:19:5b:6a:47:76:b2:
                    66:b6:66:fa:45:47:a2:a1:b9:76:05:e0:29:5e:b3:
                    d0:fc:46:2e:fb:44:f3:b4:4e:a6:59:fb:81:33:cc:
                    96:e7:86:94:6d:6f:27:b9:c2:1c:af:b5:b3:46:24:
                    0b:08:50:0e:0f:fa:99:39:ce:ab:dd:b6:f4:02:d8:
                    d3:fd:3f:fe:09:e5:a9:95:3b:ee:60:6c:85:aa:d4:
                    8a:9b:86:52:27:8b:ff:83:46:9b:4a:95:b4:26:df:
                    82:d7:c3:ef:c2:82:19:98:4a:71:a0:34:16:09:1a:
                    5f:e2:89:76:f2:d0:6a:75:a9:4b:33:d0:a9:9c:68:
                    0d:c8:77:c5:e7:70:f8:0a:34:b9:b2:18:0c:6b:d6:
                    75:a8:4a:00:ae:99:9a:a9:69:bb:27:47:a5:84:db:
                    ce:3b:75:5d:80:29:ce:9f:fa:92:5a:99:1b:61:8c:
                    6f:6a:28:6b:b7:88:4a:e5:91:7c:c8:77:3c:ba:08:
                    cd:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:B6:6F:2F:84:3C:FE:92:80:B6:8E:56:10:8B:28:0C:C3:13:EA:71
            X509v3 Authority Key Identifier:
                keyid:10:6B:1F:3D:64:9E:5A:25:AA:13:40:C1:8B:D6:A7:C2:4C:F3:6A:F6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/EGsfPWSeWiWqE0DBi9anwkzzavY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EGsfPWSeWiWqE0DBi9anwkzzavY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/L7ZvL4Q8_pKAto5WEIsoDMMT6nE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:3a0:f006::/48

    Signature Algorithm: sha256WithRSAEncryption
         51:f9:46:3c:98:f9:ce:42:8e:23:2d:fd:f8:dc:15:4e:ab:d7:
         59:3e:84:a2:78:33:74:4a:9c:eb:88:c5:9b:dc:96:9f:ef:d7:
         1b:9c:4e:9d:0d:4a:fd:e6:7d:1b:b1:06:50:62:b8:81:77:d5:
         56:1e:a5:54:4e:a8:5a:f2:83:c7:54:a2:fc:36:09:64:ed:b6:
         c2:e6:ac:c1:d7:3d:84:6c:e1:22:9e:8a:92:69:08:40:68:7c:
         2c:fa:e4:a2:16:0d:e8:08:3b:a4:03:cd:f9:58:1d:16:b6:a2:
         46:64:1e:65:42:42:84:9e:c4:c0:81:11:c6:c0:b1:be:27:5d:
         fa:b2:c8:15:8f:6d:6c:58:f3:33:41:db:a6:1c:f2:54:f9:45:
         ea:f6:66:71:57:2d:13:ba:e4:86:c8:19:7f:f3:92:61:cf:ce:
         dc:65:8a:da:eb:ce:e0:ab:49:b2:47:b1:2f:96:22:9a:61:be:
         54:ca:72:b7:b9:47:9e:ba:9e:4b:93:24:7c:94:e5:5a:5c:ab:
         95:02:1f:0c:ab:46:97:51:89:73:5d:c1:9f:9d:eb:f1:f8:df:
         d6:6d:b1:8e:30:09:63:bd:7a:ca:3c:66:47:61:1e:f3:9c:23:
         50:5d:68:cd:2b:bf:a1:4a:e3:a9:29:95:98:b8:bf:77:1d:ac:
         77:e4:3a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 02:47:20 2024 by rpki-client on console-ams.rpki-client.org