Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30016/duJh_QkkKMNNWe9RD0k_PexKu7E.roa
File:                     duJh_QkkKMNNWe9RD0k_PexKu7E.roa (raw, json)
Hash identifier:          LVn8EHM0+5Nn4Xu59kFj88Tf8nEb0kHtWVAymmso7iM=
Subject key identifier:   76:E2:61:FD:09:24:28:C3:4D:59:EF:51:0F:49:3F:3D:EC:4A:BB:B1
Certificate issuer:       /CN=2905A3EE8F9C361ABD971B0CA9726DF83CFA6BF8
Certificate serial:       32
Authority key identifier: 29:05:A3:EE:8F:9C:36:1A:BD:97:1B:0C:A9:72:6D:F8:3C:FA:6B:F8
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/duJh_QkkKMNNWe9RD0k_PexKu7E.roa
Signing time:             Fri 01 Sep 2023 01:29:38 +0000
ROA not before:           Fri 01 Sep 2023 01:29:38 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     2497
IP address blocks:        2001:240::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50 (0x32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2905A3EE8F9C361ABD971B0CA9726DF83CFA6BF8
        Validity
            Not Before: Sep  1 01:29:38 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=76E261FD092428C34D59EF510F493F3DEC4ABBB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:36:7c:cb:19:55:d8:a4:7e:6e:9f:c3:16:b0:
                    cb:f6:86:f1:29:19:a3:7d:b4:1e:df:bb:d3:c3:42:
                    c4:63:23:3f:22:cd:b1:25:2e:94:1e:dd:8b:d2:8e:
                    6c:19:ed:6f:5a:8a:75:34:7f:c0:4f:29:c2:09:13:
                    82:73:4a:c8:2f:05:37:4e:3f:1d:93:58:7c:4c:fa:
                    78:81:1b:31:3b:ef:45:d4:8a:3b:44:37:be:e8:9b:
                    95:8b:db:77:26:7f:f2:d1:14:4c:58:32:ea:0f:b0:
                    05:40:72:a2:d2:87:6d:a4:e7:bd:01:06:e0:38:e3:
                    30:df:c2:75:dd:51:80:16:58:0b:cf:c3:af:b6:01:
                    10:ce:51:38:bd:d4:81:91:08:e0:58:90:36:a0:54:
                    fe:50:c8:f7:24:05:44:cd:bd:79:28:dc:ba:48:44:
                    7c:f4:2e:a2:59:80:27:5f:c3:b6:71:12:83:84:f6:
                    e0:f6:64:31:1e:cc:c5:12:c6:c4:f5:43:b4:59:fd:
                    8e:bb:2d:58:45:69:e5:c1:ba:27:e3:2f:bf:8c:51:
                    5e:36:b8:03:1c:0a:4c:8a:d9:80:00:dc:73:69:d5:
                    a0:59:8d:6a:08:7d:c0:c5:1a:7c:2e:e1:fe:ec:ed:
                    4f:b9:c6:0c:36:54:a7:24:45:b8:23:eb:dd:cf:ca:
                    e6:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:E2:61:FD:09:24:28:C3:4D:59:EF:51:0F:49:3F:3D:EC:4A:BB:B1
            X509v3 Authority Key Identifier:
                keyid:29:05:A3:EE:8F:9C:36:1A:BD:97:1B:0C:A9:72:6D:F8:3C:FA:6B:F8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/duJh_QkkKMNNWe9RD0k_PexKu7E.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:240::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:47:74:7c:83:67:7d:b5:bc:40:e1:e1:9c:51:be:d2:8c:28:
         6c:fb:54:70:5b:0a:0c:12:63:d0:1c:40:1e:50:14:57:b7:bf:
         70:df:6c:cf:d3:4c:79:7b:ec:fe:c6:c9:b7:1d:d7:8f:2c:d4:
         e3:bf:67:9b:3b:9a:cf:a3:27:9a:2e:f1:57:68:51:07:39:1a:
         3b:1e:69:f6:d5:cc:b9:2e:d3:eb:a4:39:bc:b8:7b:92:43:25:
         c9:7d:9e:ad:97:ea:df:5a:38:1c:3b:b5:41:eb:12:dc:04:28:
         bc:84:2d:73:d7:19:a5:3f:c9:34:2a:91:c8:fb:d0:b5:3c:af:
         b3:21:f4:71:17:9b:5d:78:49:e3:bb:6b:7d:11:7e:d4:0f:f6:
         b6:f1:5f:6f:8e:23:7b:bc:0a:a8:e0:ac:a0:20:00:56:8b:e5:
         ca:50:f7:e9:10:ac:89:f8:de:dc:9a:4c:c8:56:70:76:e5:af:
         3d:31:53:a6:e4:19:08:9d:6c:22:7d:e1:01:ed:52:36:eb:a4:
         52:34:2f:b4:4d:84:40:9e:be:fa:9b:99:48:85:25:de:94:b3:
         e4:70:7e:bf:ee:e0:29:f9:4f:41:61:11:0b:e9:42:2e:f4:6e:
         73:0c:eb:80:a1:5c:01:d0:8e:ee:81:99:f4:76:2a:59:6f:a5:
         df:6b:22:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 03:38:44 2024 by rpki-client on console-ams.rpki-client.org