Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30016/q89jpeJN-Oz8CJju9qVCX-aMKQo.roa
File:                     q89jpeJN-Oz8CJju9qVCX-aMKQo.roa (raw, json)
Hash identifier:          TH2aZ3oj3Yx4RWfKzpKA+szwlA1e9CCvGKHRyaB1YWU=
Subject key identifier:   AB:CF:63:A5:E2:4D:F8:EC:FC:08:98:EE:F6:A5:42:5F:E6:8C:29:0A
Certificate issuer:       /CN=2905A3EE8F9C361ABD971B0CA9726DF83CFA6BF8
Certificate serial:       47
Authority key identifier: 29:05:A3:EE:8F:9C:36:1A:BD:97:1B:0C:A9:72:6D:F8:3C:FA:6B:F8
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/q89jpeJN-Oz8CJju9qVCX-aMKQo.roa
Signing time:             Thu 22 Aug 2024 06:24:45 +0000
ROA not before:           Thu 22 Aug 2024 06:24:45 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     14618
IP address blocks:        2001:300:fffb::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Oct 2024 13:49:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 71 (0x47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2905A3EE8F9C361ABD971B0CA9726DF83CFA6BF8
        Validity
            Not Before: Aug 22 06:24:45 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=ABCF63A5E24DF8ECFC0898EEF6A5425FE68C290A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1c:2a:3b:38:98:78:fd:3e:0f:62:d1:33:a1:
                    49:d6:f3:55:40:1b:de:be:00:1a:3a:f0:c9:62:cd:
                    32:77:22:b3:08:e3:cc:98:73:65:9b:75:fa:37:e3:
                    b5:f6:34:67:15:fb:03:02:ce:5f:0e:d1:f3:ef:ae:
                    db:01:20:d8:94:6d:62:85:54:20:81:d4:79:e2:33:
                    4f:73:8a:cb:0b:aa:29:db:33:42:da:0f:a4:11:93:
                    59:68:0d:f2:db:8c:75:35:b0:db:5a:87:9d:f1:ea:
                    bb:00:f3:8b:c3:38:56:1d:01:8d:bd:a1:c3:87:0a:
                    73:02:b1:6e:f3:b9:e9:b6:25:67:aa:2e:32:86:41:
                    08:c9:9f:dd:3c:e4:01:dd:59:e2:86:11:24:d0:b1:
                    57:05:6e:fb:0e:3d:43:7d:ce:d2:c8:6d:9d:52:e8:
                    43:cb:80:0a:40:3d:d1:b4:aa:39:54:c6:ec:d0:b0:
                    4a:5c:9b:fb:15:b0:f2:79:c1:4e:0b:1b:9f:3f:48:
                    83:ec:11:c9:95:70:66:64:bd:ba:df:23:4b:f8:44:
                    a6:de:c5:c6:af:10:60:26:5f:0d:91:a5:59:39:24:
                    62:96:30:ae:e8:b5:1b:2f:01:a9:e7:00:b9:f9:44:
                    73:df:4f:17:7e:4d:ea:f8:cc:9b:87:a5:5d:1c:64:
                    43:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:CF:63:A5:E2:4D:F8:EC:FC:08:98:EE:F6:A5:42:5F:E6:8C:29:0A
            X509v3 Authority Key Identifier:
                keyid:29:05:A3:EE:8F:9C:36:1A:BD:97:1B:0C:A9:72:6D:F8:3C:FA:6B:F8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/q89jpeJN-Oz8CJju9qVCX-aMKQo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:300:fffb::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:5b:e7:54:7f:4e:4c:ef:21:c0:f1:77:39:a0:27:de:61:96:
         49:f4:fc:dc:67:5b:4b:ce:38:a9:b1:9f:e6:26:99:0c:de:d5:
         9b:f0:f5:7f:7b:8b:9b:c1:aa:a5:76:88:a5:5f:d5:09:4d:73:
         11:dd:86:ae:2e:5a:bf:52:16:ff:a5:80:1f:ce:9c:69:23:3b:
         59:13:6a:73:14:5d:c4:c3:3c:86:e9:71:43:30:ab:ec:94:7e:
         61:c9:7f:e8:dc:a5:5a:e7:c5:1d:e0:67:8b:79:3a:85:58:80:
         95:7f:af:53:1f:28:e6:69:7a:58:7e:fd:0b:3a:0e:10:46:25:
         f4:b3:03:00:80:1f:81:62:a9:f3:64:50:fa:f0:5f:56:53:e4:
         01:41:38:ef:1a:da:22:56:09:ea:a6:80:c1:5e:80:e2:72:90:
         eb:f4:98:1c:1e:f5:2f:ec:d6:50:24:11:b4:e9:65:1d:00:be:
         8a:c9:0e:82:97:55:10:69:2f:26:db:c5:96:02:dc:bb:24:e8:
         d2:14:1b:8e:4e:72:d7:fa:ba:ae:98:2a:c8:c1:aa:41:63:e2:
         a4:37:75:de:f0:a6:5f:fc:72:8c:a8:bd:6f:17:5c:cf:77:3b:
         b4:ea:48:6f:72:2a:9f:a6:cd:32:f6:30:e7:8e:fe:a5:7a:92:
         68:5e:69:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 15:30:37 2024 by rpki-client on console-ams.rpki-client.org