Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30016/TOP8qrojqVYuxKtPXEucazL6eTM.roa
File:                     TOP8qrojqVYuxKtPXEucazL6eTM.roa (raw, json)
Hash identifier:          YSMK1zE4D0e639HdHXJ0Gmvs+yuf0mQ2uqDsYBPCqrQ=
Subject key identifier:   4C:E3:FC:AA:BA:23:A9:56:2E:C4:AB:4F:5C:4B:9C:6B:32:FA:79:33
Certificate issuer:       /CN=2905A3EE8F9C361ABD971B0CA9726DF83CFA6BF8
Certificate serial:       49
Authority key identifier: 29:05:A3:EE:8F:9C:36:1A:BD:97:1B:0C:A9:72:6D:F8:3C:FA:6B:F8
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/TOP8qrojqVYuxKtPXEucazL6eTM.roa
Signing time:             Thu 22 Aug 2024 06:32:25 +0000
ROA not before:           Thu 22 Aug 2024 06:32:25 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     14618
IP address blocks:        2001:300:fffc::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Oct 2024 13:49:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73 (0x49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2905A3EE8F9C361ABD971B0CA9726DF83CFA6BF8
        Validity
            Not Before: Aug 22 06:32:25 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=4CE3FCAABA23A9562EC4AB4F5C4B9C6B32FA7933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ba:34:93:52:08:ff:fa:c0:a3:d7:e7:bd:78:
                    9c:ad:fa:51:c8:c6:76:be:76:df:3a:26:c4:99:a0:
                    4f:b4:3c:f1:b6:2f:2b:99:87:e0:b8:63:05:21:12:
                    bb:bd:9a:5c:e3:ae:4d:83:45:0f:cc:e2:9d:a4:ca:
                    42:23:63:24:63:f3:8a:7c:24:74:10:41:c3:ef:ed:
                    aa:0b:23:d1:db:1d:e6:48:33:ac:f7:37:d2:52:4f:
                    e9:c1:41:c9:40:4e:2c:ce:67:23:e6:c8:b0:63:82:
                    ad:79:a4:a8:04:67:6d:24:55:58:a6:26:67:8c:43:
                    8a:5e:9b:0d:50:60:16:c6:eb:ec:d7:8e:4e:9f:64:
                    ea:7d:31:e5:19:f9:b7:b3:6c:56:00:c6:a3:34:bd:
                    a1:0e:3a:1c:5e:d7:7f:46:d8:8c:c8:a7:be:ae:6d:
                    33:82:16:db:2a:13:44:1d:45:df:6f:89:7a:a2:26:
                    85:4b:85:1b:0e:06:21:e2:43:ce:2b:ce:22:bd:28:
                    2b:83:d4:77:51:d0:16:80:0d:8a:4b:a6:c1:75:b3:
                    18:a2:5f:db:0e:d0:a9:93:a0:b6:70:4a:51:62:d3:
                    4d:60:f7:e6:64:5e:50:cd:56:2a:30:82:2e:80:2e:
                    4c:de:3e:43:4a:b7:89:05:6d:78:9e:1a:35:4b:76:
                    d0:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:E3:FC:AA:BA:23:A9:56:2E:C4:AB:4F:5C:4B:9C:6B:32:FA:79:33
            X509v3 Authority Key Identifier:
                keyid:29:05:A3:EE:8F:9C:36:1A:BD:97:1B:0C:A9:72:6D:F8:3C:FA:6B:F8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/TOP8qrojqVYuxKtPXEucazL6eTM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:300:fffc::/48

    Signature Algorithm: sha256WithRSAEncryption
         82:6f:b0:a5:30:6d:d8:6e:33:18:4f:1c:81:92:1f:47:01:8d:
         1e:41:75:57:3d:24:6f:88:ed:c4:b8:67:47:1f:ab:ac:76:e0:
         e3:4b:70:05:1f:fb:b4:be:6d:13:56:8e:fe:57:ea:77:6b:ac:
         72:c8:29:46:48:53:87:16:1a:9e:67:11:91:a7:aa:e1:21:1e:
         aa:5c:49:25:81:ec:6b:a7:ec:a5:e2:7d:76:a3:23:40:70:c1:
         78:1d:7c:9f:d5:6c:f2:49:bc:43:69:47:21:c3:e5:8c:ed:d1:
         c6:b5:85:f9:11:cc:ee:59:a1:a6:c2:48:08:15:7f:1e:be:09:
         02:c7:e8:d7:bb:de:4b:22:11:dd:5b:13:80:86:94:1b:e2:8a:
         1f:b9:f2:4d:c4:46:41:00:5a:f6:97:91:3c:50:03:b1:b5:d8:
         03:f2:84:4a:7b:e2:e4:5a:f9:fd:0f:14:50:f1:e5:93:83:44:
         c5:fa:b6:c7:2a:07:95:eb:0e:de:d7:b2:87:91:b7:2b:d3:44:
         a8:d2:1f:93:2b:34:91:3e:c4:54:dd:ba:28:ad:9d:3c:cd:55:
         c0:78:99:23:5d:bf:de:3f:29:bb:b1:34:fb:bc:e8:f1:8c:af:
         ee:2b:e7:72:ea:24:2b:f4:74:7e:81:2a:7e:cb:25:6f:89:53:
         29:0d:40:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 15:00:03 2024 by rpki-client on console-fra.rpki-client.org