Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30015/mYqSUHqtvc7wyCZGp7StK3JNyh0.roa
File:                     mYqSUHqtvc7wyCZGp7StK3JNyh0.roa (raw, json)
Hash identifier:          isFVwQYPNFm0P/dSI9PVcYbgG85JYjGoZ/2jCMduWhY=
Subject key identifier:   99:8A:92:50:7A:AD:BD:CE:F0:C8:26:46:A7:B4:AD:2B:72:4D:CA:1D
Certificate issuer:       /CN=EEA5D8215658E644312DA44055A1A16C95328D8B
Certificate serial:       3B
Authority key identifier: EE:A5:D8:21:56:58:E6:44:31:2D:A4:40:55:A1:A1:6C:95:32:8D:8B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7qXYIVZY5kQxLaRAVaGhbJUyjYs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30015/mYqSUHqtvc7wyCZGp7StK3JNyh0.roa
Signing time:             Fri 31 May 2024 01:32:01 +0000
ROA not before:           Fri 31 May 2024 01:32:01 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     2518
IP address blocks:        2404:7a80::/29 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30015/7qXYIVZY5kQxLaRAVaGhbJUyjYs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30015/7qXYIVZY5kQxLaRAVaGhbJUyjYs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7qXYIVZY5kQxLaRAVaGhbJUyjYs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59 (0x3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEA5D8215658E644312DA44055A1A16C95328D8B
        Validity
            Not Before: May 31 01:32:01 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=998A92507AADBDCEF0C82646A7B4AD2B724DCA1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:80:3e:23:0e:42:84:d5:6b:4b:8f:85:01:39:
                    56:f8:46:75:7d:97:15:2c:2d:e6:98:48:85:ca:4c:
                    bd:61:f3:7c:51:01:ac:08:59:8a:59:4d:d8:d9:11:
                    12:f5:e3:b4:27:24:0f:65:6b:6d:17:00:33:3f:a7:
                    f4:60:94:73:5d:4d:fa:58:91:7f:35:4b:0e:24:0a:
                    2e:ee:d9:f9:31:a8:12:f2:c2:6e:70:f6:a6:07:81:
                    7f:4c:f8:76:88:2d:63:8d:b5:24:e9:b0:42:4a:73:
                    83:1e:ea:16:e9:a1:51:1e:89:8a:5f:8a:d6:b8:00:
                    3d:38:cc:37:a8:12:78:35:fd:54:5f:0f:80:a5:5e:
                    7c:bf:33:5c:1d:26:cb:fe:bc:87:04:3a:74:0f:e4:
                    98:96:05:cb:8b:09:ca:e4:1f:b2:d6:53:78:b3:1f:
                    ab:3d:07:90:68:7b:ea:1b:51:d9:17:d3:dd:52:01:
                    81:3b:63:aa:4c:6d:96:b8:16:41:fc:c0:91:48:ee:
                    e5:55:d1:bd:51:b6:ac:a7:73:7a:47:12:e6:bf:c8:
                    2d:d6:be:15:6a:cc:b4:15:3b:0d:b1:9d:d3:37:7e:
                    d0:5e:fc:f2:7a:cc:37:68:ac:f4:e1:3d:60:f4:0e:
                    46:7b:ba:35:d8:28:6d:89:91:67:1e:f8:6a:26:05:
                    31:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:8A:92:50:7A:AD:BD:CE:F0:C8:26:46:A7:B4:AD:2B:72:4D:CA:1D
            X509v3 Authority Key Identifier:
                keyid:EE:A5:D8:21:56:58:E6:44:31:2D:A4:40:55:A1:A1:6C:95:32:8D:8B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30015/7qXYIVZY5kQxLaRAVaGhbJUyjYs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7qXYIVZY5kQxLaRAVaGhbJUyjYs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30015/mYqSUHqtvc7wyCZGp7StK3JNyh0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:7a80::/29

    Signature Algorithm: sha256WithRSAEncryption
         a1:e0:b6:32:6c:fc:52:d5:f6:d1:f1:e8:3c:d7:5c:16:2d:f5:
         5d:6c:ab:41:d8:41:f3:9d:7f:cb:fc:4d:8c:c9:b7:c6:4d:97:
         23:af:ba:e1:2f:e7:48:ce:02:86:cd:e1:07:bc:6e:d3:29:b3:
         bc:cb:ee:35:f1:e9:0f:88:56:d5:3e:5a:98:68:44:c8:b1:c7:
         38:d0:69:9f:c2:97:0c:6b:6e:aa:b3:0f:05:26:e2:4c:4c:84:
         c9:5f:29:87:9f:9a:b0:11:87:63:6c:36:36:24:fa:48:37:e6:
         6d:d6:b3:1b:b0:26:c6:77:20:b1:df:22:25:55:aa:78:d7:c3:
         28:05:4a:31:b0:9a:7f:ff:b4:13:e3:85:68:5d:d9:05:43:1f:
         8a:4b:48:0a:23:a0:b3:4d:21:c0:0a:b8:54:dc:f5:e6:1d:4e:
         bf:27:d0:a2:92:69:e4:35:f1:48:34:12:7d:b5:f4:6b:c6:b0:
         b6:cc:8a:6c:03:9c:30:12:b5:0e:72:a8:92:e2:08:25:1c:3f:
         fa:99:14:b6:57:37:5d:f6:0d:80:57:c1:d4:ef:af:bc:0a:b0:
         5b:87:33:c2:0e:ed:3c:13:bb:0b:83:85:48:32:0c:cd:fd:88:
         24:5f:57:00:2d:1f:9b:2b:1f:d7:69:05:7a:7d:f0:5c:9c:30:
         2e:82:14:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:23:57 2024 by rpki-client on console-fra.rpki-client.org