Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30015/B1yKr8OwPFHhRBX84Ujnn2C4lQc.roa
File:                     B1yKr8OwPFHhRBX84Ujnn2C4lQc.roa (raw, json)
Hash identifier:          26P2T0+7/nFBJlRYXK1wwVJCMQPtEYsJ1B4IjuXNu7I=
Subject key identifier:   07:5C:8A:AF:C3:B0:3C:51:E1:44:15:FC:E1:48:E7:9F:60:B8:95:07
Certificate issuer:       /CN=EEA5D8215658E644312DA44055A1A16C95328D8B
Certificate serial:       3C
Authority key identifier: EE:A5:D8:21:56:58:E6:44:31:2D:A4:40:55:A1:A1:6C:95:32:8D:8B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7qXYIVZY5kQxLaRAVaGhbJUyjYs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30015/B1yKr8OwPFHhRBX84Ujnn2C4lQc.roa
Signing time:             Fri 31 May 2024 01:32:01 +0000
ROA not before:           Fri 31 May 2024 01:32:01 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     2518
IP address blocks:        2001:260::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30015/7qXYIVZY5kQxLaRAVaGhbJUyjYs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30015/7qXYIVZY5kQxLaRAVaGhbJUyjYs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7qXYIVZY5kQxLaRAVaGhbJUyjYs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jul 2024 07:52:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60 (0x3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEA5D8215658E644312DA44055A1A16C95328D8B
        Validity
            Not Before: May 31 01:32:01 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=075C8AAFC3B03C51E14415FCE148E79F60B89507
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:ed:ac:c9:73:0a:9a:c1:32:80:0f:b4:1f:f8:
                    b5:5a:f4:94:bb:e7:68:1c:4b:03:a3:a7:4a:ef:18:
                    24:4d:ea:70:bb:66:62:63:7e:4b:b8:35:be:03:48:
                    43:0d:83:a8:1a:94:9b:22:4d:89:fa:f5:d3:d6:f5:
                    a4:84:14:7e:11:3e:d0:31:3c:75:c4:ac:0c:80:53:
                    74:c2:d8:7b:6b:3b:87:5f:41:a6:16:f6:30:ac:23:
                    11:a2:b4:b1:47:29:3d:1b:dc:9a:ae:94:00:04:2c:
                    ac:a1:8c:eb:a6:b7:4d:f8:c5:ff:f9:a6:ed:db:cf:
                    bf:71:d2:d6:fe:0e:bd:1b:56:f9:73:39:0b:3c:7b:
                    07:c0:74:de:b1:87:15:ad:5c:06:a7:09:fa:0e:e3:
                    8c:c1:fb:9e:5c:8b:4b:c2:05:e4:a3:71:cc:88:0f:
                    7d:9f:d8:fb:68:ec:e4:78:35:59:ba:ae:b5:79:47:
                    46:b6:0e:48:4a:c1:f6:12:c1:38:30:88:52:be:19:
                    71:79:a3:26:39:86:e3:1c:6e:b4:69:4b:67:60:59:
                    fd:1d:ab:e0:81:a6:c9:1d:9f:13:d8:fc:0d:6a:96:
                    c1:62:81:2a:32:f2:76:47:78:4e:86:e9:aa:c5:1c:
                    df:b0:8b:f9:38:d2:5f:d6:38:fc:98:7d:50:3d:73:
                    b9:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:5C:8A:AF:C3:B0:3C:51:E1:44:15:FC:E1:48:E7:9F:60:B8:95:07
            X509v3 Authority Key Identifier:
                keyid:EE:A5:D8:21:56:58:E6:44:31:2D:A4:40:55:A1:A1:6C:95:32:8D:8B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30015/7qXYIVZY5kQxLaRAVaGhbJUyjYs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7qXYIVZY5kQxLaRAVaGhbJUyjYs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30015/B1yKr8OwPFHhRBX84Ujnn2C4lQc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:260::/32

    Signature Algorithm: sha256WithRSAEncryption
         25:7e:df:17:14:74:00:41:4d:6c:d1:35:fd:93:f2:22:13:ec:
         b2:8b:7b:da:9e:22:bd:33:4b:38:63:96:9a:cb:79:52:0c:b7:
         bc:bb:84:87:03:15:82:4d:00:f1:48:7c:a6:5a:9e:f8:e3:8a:
         82:d7:97:a7:31:0c:31:7f:3e:b0:e9:d4:72:e4:57:d8:39:f5:
         75:36:93:ff:06:7e:8a:9a:5b:99:19:93:8d:ad:da:a6:bb:f5:
         99:16:26:1a:e4:9a:a6:77:79:f3:16:cc:77:92:22:63:7b:c9:
         bc:da:c3:9e:d6:c8:9b:3c:23:ee:30:04:aa:56:ed:c9:62:86:
         b0:d5:6c:a2:25:42:e4:89:b3:30:1e:f5:5c:66:70:0c:00:93:
         35:41:5d:82:e3:f6:09:59:d3:a6:a3:d9:43:a0:e9:af:60:0f:
         fe:3c:94:9e:ba:ac:6c:14:dd:51:8d:8f:3d:5a:b8:05:f6:f0:
         21:f4:b3:04:8c:f2:f8:23:56:04:02:8b:94:a6:8a:62:74:0e:
         b5:14:d1:ab:b2:a0:b6:bf:f3:80:36:ee:a8:9b:5a:dc:dc:58:
         b3:60:14:cb:ed:1b:40:02:bd:82:62:44:d6:ea:5f:ff:a7:c3:
         06:c1:a0:4b:c1:4c:d6:8b:ec:9e:c4:c6:4f:35:f9:61:f5:0c:
         31:46:87:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 09:28:37 2024 by rpki-client on console-fra.rpki-client.org