Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30016/CQ_-NoHisxgeb5hzVbLGOjm_7Co.roa
File:                     CQ_-NoHisxgeb5hzVbLGOjm_7Co.roa (raw, json)
Hash identifier:          NnvMCvmmgL4mbkbQTaSlZlOvGdjquRaPC39WQ+B7HPM=
Subject key identifier:   09:0F:FE:36:81:E2:B3:18:1E:6F:98:73:55:B2:C6:3A:39:BF:EC:2A
Certificate issuer:       /CN=2905A3EE8F9C361ABD971B0CA9726DF83CFA6BF8
Certificate serial:       4E
Authority key identifier: 29:05:A3:EE:8F:9C:36:1A:BD:97:1B:0C:A9:72:6D:F8:3C:FA:6B:F8
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/CQ_-NoHisxgeb5hzVbLGOjm_7Co.roa
Signing time:             Thu 24 Oct 2024 04:51:14 +0000
ROA not before:           Thu 24 Oct 2024 04:51:14 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     4774
IP address blocks:        2001:300:fff5::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:58:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78 (0x4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2905A3EE8F9C361ABD971B0CA9726DF83CFA6BF8
        Validity
            Not Before: Oct 24 04:51:14 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=090FFE3681E2B3181E6F987355B2C63A39BFEC2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:47:12:cd:93:91:99:bb:c7:1f:93:a4:f1:63:
                    da:1e:be:82:20:b4:35:99:82:b2:40:5a:77:b1:1e:
                    90:16:84:57:d7:40:7a:9b:77:be:9f:93:22:6a:db:
                    99:70:e4:da:9f:2f:13:a9:71:3d:17:80:e6:d5:ee:
                    23:6b:10:15:41:bb:b2:82:8b:ca:f3:4f:82:17:64:
                    8f:3e:0a:1f:fd:33:f9:87:9f:6f:21:39:67:64:f9:
                    79:26:a4:4c:a2:7b:71:e1:39:57:86:5f:3d:a9:0a:
                    b7:c8:33:35:be:de:0a:f2:a2:b1:ac:87:ef:76:8e:
                    6e:6b:50:00:0e:c7:ed:4a:ed:04:9d:dc:69:a9:9a:
                    f9:37:55:ec:11:a1:22:fc:f4:05:3a:1b:97:77:2a:
                    4b:0e:96:1e:6a:3b:cb:21:09:fa:d7:dc:0b:1e:cb:
                    bd:69:2e:13:79:24:18:b7:13:8d:a8:b7:a3:ef:5f:
                    67:80:f1:fe:fb:5e:e7:c0:15:aa:df:8c:3b:ad:20:
                    1a:c7:4a:19:c4:be:d9:f4:ef:8a:29:49:25:fb:d4:
                    af:ad:06:da:16:97:4e:1f:1b:5e:70:0c:16:e4:fb:
                    6f:cd:13:ac:a6:ad:3d:e7:38:90:7e:3d:d8:61:ba:
                    fa:17:3a:45:01:9f:92:0e:0a:89:2c:c9:30:ef:23:
                    7a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:0F:FE:36:81:E2:B3:18:1E:6F:98:73:55:B2:C6:3A:39:BF:EC:2A
            X509v3 Authority Key Identifier:
                keyid:29:05:A3:EE:8F:9C:36:1A:BD:97:1B:0C:A9:72:6D:F8:3C:FA:6B:F8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/CQ_-NoHisxgeb5hzVbLGOjm_7Co.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:300:fff5::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:d9:f5:3f:be:91:08:9f:89:90:f4:b4:7b:82:df:2e:b1:e1:
         05:82:1a:d2:39:c9:00:63:d3:77:21:ab:7c:0e:58:bc:27:4a:
         66:b6:c0:6b:c8:e5:58:9f:c6:f4:1c:12:dc:27:43:54:53:f1:
         b8:8b:8d:1a:69:ac:34:c6:16:9c:57:b1:6f:17:53:c8:b1:e2:
         37:2a:bc:43:c4:57:39:24:42:34:d4:48:dd:48:cc:6d:08:b0:
         10:c0:6f:c4:4e:27:af:5d:60:bb:0f:91:83:03:52:ca:6a:9b:
         2b:24:b6:3a:dd:26:f8:78:e2:d2:e6:f0:cf:b6:af:6b:e2:12:
         92:80:53:50:4e:09:42:92:91:32:03:55:d0:21:13:2a:82:34:
         c5:0f:c5:9d:47:b8:5d:9b:2c:4d:48:fe:a3:3f:b9:6d:a1:1b:
         7a:fa:dd:82:30:7b:45:c5:7a:47:67:7a:20:aa:7c:b9:5b:c1:
         c2:75:b4:7a:3a:49:9c:e7:77:5e:09:71:f7:b0:26:3e:54:f4:
         d7:06:e0:d5:0b:be:23:7f:df:6c:19:95:ae:4d:52:26:0a:5e:
         e2:ca:67:72:9a:84:b5:16:0d:63:be:0e:8d:bd:d8:44:c1:cc:
         ba:c8:2f:4b:e3:e0:a2:fc:a0:a4:3c:e9:66:86:64:bf:49:4b:
         b7:f4:6f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:21:16 2024 by rpki-client on console-ams.rpki-client.org