Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30016/apXWW-YMUBqLGFszMLxaeHLGYC0.roa
File:                     apXWW-YMUBqLGFszMLxaeHLGYC0.roa (raw, json)
Hash identifier:          XmB/QbbduYREYbDsFfU8SaQ8ActWdV2YVw55yWpAPzo=
Subject key identifier:   6A:95:D6:5B:E6:0C:50:1A:8B:18:5B:33:30:BC:5A:78:72:C6:60:2D
Certificate issuer:       /CN=2905A3EE8F9C361ABD971B0CA9726DF83CFA6BF8
Certificate serial:       46
Authority key identifier: 29:05:A3:EE:8F:9C:36:1A:BD:97:1B:0C:A9:72:6D:F8:3C:FA:6B:F8
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/apXWW-YMUBqLGFszMLxaeHLGYC0.roa
Signing time:             Thu 22 Aug 2024 06:22:30 +0000
ROA not before:           Thu 22 Aug 2024 06:22:30 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     16509
IP address blocks:        2001:300:fffb::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 20:13:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70 (0x46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2905A3EE8F9C361ABD971B0CA9726DF83CFA6BF8
        Validity
            Not Before: Aug 22 06:22:30 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=6A95D65BE60C501A8B185B3330BC5A7872C6602D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a3:93:ce:48:13:c1:0c:fa:a6:0c:65:89:05:
                    ad:eb:ca:6a:4d:9e:ad:ff:aa:3e:9e:b6:52:34:cf:
                    40:ff:74:bb:ba:f1:f2:09:7d:e7:c4:b1:b2:f5:e1:
                    b9:eb:c7:e6:69:82:83:a5:18:92:8e:3e:e5:cf:32:
                    c1:89:a4:1d:fd:94:df:eb:56:9d:f8:8d:32:78:d0:
                    d0:0e:13:a0:78:d6:ce:ff:e4:04:12:de:0a:21:c6:
                    37:9f:0e:bb:5e:63:ee:2a:4e:7c:d6:16:da:86:45:
                    9c:d0:e9:05:e2:79:66:52:5f:92:13:47:cd:c0:81:
                    ff:86:50:68:e4:4a:b8:d1:7a:4e:87:de:de:a0:e1:
                    d1:a7:d1:8d:1c:d3:42:f6:d1:3b:95:73:ce:4c:91:
                    33:99:9b:27:d6:1b:65:87:a1:65:75:2f:fb:d9:91:
                    46:2e:68:0e:d5:0b:2d:3f:14:6c:64:2b:55:7a:53:
                    2e:db:eb:d7:91:c6:8a:8d:c6:62:84:33:26:27:7b:
                    b5:7f:ef:3e:94:d9:99:30:6e:f9:92:f6:99:b0:32:
                    c1:d0:dd:40:df:a8:60:01:94:1f:59:95:4e:d3:6e:
                    7b:1c:49:e2:79:7c:df:ad:2a:86:aa:3a:cd:b1:e5:
                    8c:ac:43:e4:84:bb:07:21:75:ed:ed:0f:03:39:81:
                    a6:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:95:D6:5B:E6:0C:50:1A:8B:18:5B:33:30:BC:5A:78:72:C6:60:2D
            X509v3 Authority Key Identifier:
                keyid:29:05:A3:EE:8F:9C:36:1A:BD:97:1B:0C:A9:72:6D:F8:3C:FA:6B:F8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/apXWW-YMUBqLGFszMLxaeHLGYC0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:300:fffb::/48

    Signature Algorithm: sha256WithRSAEncryption
         3a:6b:a4:5e:a4:41:ef:41:18:df:2a:a5:66:9a:c8:aa:56:ff:
         1c:e2:72:bf:0e:42:d5:df:18:af:ad:4f:56:4b:91:d2:97:d2:
         eb:46:ee:19:22:ba:df:78:6e:13:82:ef:a4:62:00:ef:7e:4a:
         4e:3b:4d:cc:cf:59:88:b0:50:f2:10:41:07:2b:bd:0f:6a:81:
         b5:06:d1:42:93:07:cc:74:d2:85:48:45:03:9c:44:5b:bd:fb:
         7e:23:f3:f8:14:64:56:97:3e:2e:15:0f:04:09:a4:8d:d2:ef:
         05:23:ec:d0:f8:6e:3e:9b:cb:d1:0b:69:0e:a9:f4:6e:01:b2:
         38:3d:a4:ab:7d:b8:5c:ce:f8:ca:53:35:55:2c:44:31:ee:a3:
         89:e8:b7:db:be:eb:d5:cd:79:52:0e:a9:9c:e5:14:8a:aa:b1:
         fe:e4:64:06:0c:16:44:b9:15:fe:7a:84:06:83:28:a1:f8:bd:
         23:f1:50:a0:4d:09:b1:36:89:89:d2:8a:f0:e5:4b:ae:b9:0e:
         3c:ce:73:6c:82:4c:0f:2f:dd:29:a7:51:1c:fb:2e:9d:b8:70:
         e6:b2:78:67:53:cc:d3:e0:53:59:09:3b:1c:34:ab:b9:62:98:
         63:72:da:ea:b4:0a:d5:e2:4e:d7:88:d0:9a:c6:5a:a4:57:b0:
         06:b7:9f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:33:19 2024 by rpki-client on console-ams.rpki-client.org