Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30016/0QGuFbSZuVJojnGeN_thWwrYl98.roa
File:                     0QGuFbSZuVJojnGeN_thWwrYl98.roa (raw, json)
Hash identifier:          lCzVRQXakfI/BC+PgruquyTeVgdhpXDVpyxsHowx1uo=
Subject key identifier:   D1:01:AE:15:B4:99:B9:52:68:8E:71:9E:37:FB:61:5B:0A:D8:97:DF
Certificate issuer:       /CN=2905A3EE8F9C361ABD971B0CA9726DF83CFA6BF8
Certificate serial:       4B
Authority key identifier: 29:05:A3:EE:8F:9C:36:1A:BD:97:1B:0C:A9:72:6D:F8:3C:FA:6B:F8
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/0QGuFbSZuVJojnGeN_thWwrYl98.roa
Signing time:             Thu 22 Aug 2024 06:40:27 +0000
ROA not before:           Thu 22 Aug 2024 06:40:27 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     14618
IP address blocks:        2001:300:fffd::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Oct 2024 13:49:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75 (0x4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2905A3EE8F9C361ABD971B0CA9726DF83CFA6BF8
        Validity
            Not Before: Aug 22 06:40:27 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=D101AE15B499B952688E719E37FB615B0AD897DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:51:56:41:46:c3:60:59:8c:15:a1:6a:0d:d1:
                    79:76:6d:3b:a9:3e:a1:75:ca:fd:0c:cb:a3:2e:65:
                    b5:bf:47:a2:08:a0:b9:83:8b:bf:13:5b:71:ec:7a:
                    f2:5f:5c:b0:86:13:9d:63:10:72:02:b4:95:ef:12:
                    93:87:27:19:d2:4b:bf:f4:61:ff:f1:a8:c6:72:a8:
                    45:0f:ba:d2:4c:2a:5e:e9:42:22:d6:02:0e:d8:be:
                    ee:9a:a6:10:24:aa:86:5a:6f:e1:9a:18:8c:ac:25:
                    6b:18:0e:c7:d0:6c:d8:c5:44:67:04:3f:8d:66:a1:
                    54:1a:e3:a6:22:95:5a:6a:0e:cf:53:ce:ae:e8:a1:
                    c0:8d:dd:5e:b2:b1:70:11:bb:6b:3e:c8:9c:8f:37:
                    41:d1:b2:07:ad:1d:a6:e8:19:ae:4d:c4:ef:0b:90:
                    ad:33:cc:8c:91:7c:a3:6e:1c:c3:d4:04:39:f6:8b:
                    59:f8:24:22:94:a1:18:03:3a:59:57:44:0b:bd:1c:
                    08:2b:60:ca:fd:c4:ec:08:cd:63:3f:94:1f:46:59:
                    31:8d:fd:01:3d:22:68:60:4d:39:c6:af:61:2e:16:
                    01:d5:aa:5c:84:5c:24:c6:16:58:5d:73:ca:89:96:
                    6f:f8:91:09:4b:19:54:99:7e:6d:99:0f:2d:e3:db:
                    de:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:01:AE:15:B4:99:B9:52:68:8E:71:9E:37:FB:61:5B:0A:D8:97:DF
            X509v3 Authority Key Identifier:
                keyid:29:05:A3:EE:8F:9C:36:1A:BD:97:1B:0C:A9:72:6D:F8:3C:FA:6B:F8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/0QGuFbSZuVJojnGeN_thWwrYl98.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:300:fffd::/48

    Signature Algorithm: sha256WithRSAEncryption
         aa:2c:d2:47:a9:32:8a:5c:e1:29:43:50:1e:61:9b:b2:6b:31:
         44:4e:4e:a6:cb:a1:3e:c0:ed:4b:27:65:e8:93:d0:d8:12:c1:
         54:95:96:2c:f4:0b:58:22:9a:38:53:e0:25:24:e4:1d:8b:61:
         cb:8b:ec:5a:06:fe:1e:8e:a3:f5:73:37:35:3e:04:24:83:c3:
         79:9c:7c:48:c3:d3:c9:62:11:36:7e:b6:e9:e6:77:b0:79:3a:
         ab:3d:1e:b3:dd:e5:ee:aa:d2:5e:46:15:ba:ef:c1:6f:be:df:
         8d:b8:c3:5d:6b:62:f7:8f:7e:d7:a4:36:4a:cb:ea:1d:44:93:
         3d:8b:10:ff:97:f5:95:5f:63:ca:e2:3f:0a:71:37:ad:d6:3d:
         21:da:4c:a2:b5:e4:5d:cf:78:cb:1c:db:02:ab:81:c7:07:9e:
         70:28:6a:2a:44:e5:f8:ac:3d:4e:a1:7d:7e:92:4a:c9:71:b7:
         72:79:84:d0:f9:d8:9a:9e:ed:0b:24:19:3b:a3:c9:26:03:2d:
         52:fa:78:c0:83:1f:2e:52:f1:60:02:ff:e6:b2:01:84:a2:0d:
         33:57:9e:95:88:a6:82:3d:ca:55:29:12:ab:93:be:61:8e:6d:
         94:c6:fc:e0:a3:72:54:fc:ed:3d:ce:6f:7f:2d:a2:61:81:8f:
         ce:6c:d8:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 15:30:37 2024 by rpki-client on console-ams.rpki-client.org