Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30016/yxAWjKVgPu6OOsayTtqAoclhk20.roa
File:                     yxAWjKVgPu6OOsayTtqAoclhk20.roa (raw, json)
Hash identifier:          FydqF1pWVZhBNMnd/fY+y8UKEjG/Gu3eOE6sIQQ7hog=
Subject key identifier:   CB:10:16:8C:A5:60:3E:EE:8E:3A:C6:B2:4E:DA:80:A1:C9:61:93:6D
Certificate issuer:       /CN=2905A3EE8F9C361ABD971B0CA9726DF83CFA6BF8
Certificate serial:       4A
Authority key identifier: 29:05:A3:EE:8F:9C:36:1A:BD:97:1B:0C:A9:72:6D:F8:3C:FA:6B:F8
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/yxAWjKVgPu6OOsayTtqAoclhk20.roa
Signing time:             Thu 22 Aug 2024 06:36:47 +0000
ROA not before:           Thu 22 Aug 2024 06:36:47 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     16509
IP address blocks:        2001:300:fffd::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 23:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74 (0x4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2905A3EE8F9C361ABD971B0CA9726DF83CFA6BF8
        Validity
            Not Before: Aug 22 06:36:47 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=CB10168CA5603EEE8E3AC6B24EDA80A1C961936D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9d:b7:2a:6f:97:40:36:35:51:1f:9e:25:db:
                    89:92:8d:10:9a:65:a3:77:94:e3:31:1c:65:49:26:
                    db:0c:ab:bd:ea:7f:69:0b:6f:5c:1c:87:e4:98:d9:
                    97:bf:00:69:9d:24:22:0a:9f:0c:55:a9:9a:9a:c7:
                    7a:20:18:7b:bf:ab:dc:10:8c:86:03:ed:5b:3a:84:
                    6b:52:75:56:9a:e9:2a:1d:d1:e8:06:ff:b6:40:a0:
                    76:18:67:ba:8f:14:0d:07:96:3e:54:30:99:18:36:
                    a1:18:ac:91:61:39:c6:8c:c7:9d:2e:bd:67:8c:50:
                    74:8b:39:aa:e5:87:f6:87:6f:b2:79:20:c4:4b:2b:
                    a9:20:33:af:9f:6b:77:ae:18:f3:8c:f7:8d:e1:f3:
                    f9:2f:55:2c:39:aa:ca:9a:5e:a6:04:e9:81:3d:20:
                    a6:4e:86:25:92:43:ba:71:e6:5b:92:d1:d8:19:c2:
                    7e:4a:21:bf:53:17:cb:44:5c:10:5d:5c:fe:3a:7a:
                    54:20:d1:64:50:0a:d3:3e:e2:26:f3:0d:42:d3:4b:
                    7e:63:42:61:d8:ae:3c:46:08:a1:04:a6:46:70:2b:
                    15:c5:ca:e1:b2:af:5a:47:ee:b2:b4:61:8b:f7:31:
                    ab:db:8d:6c:27:9d:a4:62:db:de:1d:ec:f1:09:ab:
                    f7:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:10:16:8C:A5:60:3E:EE:8E:3A:C6:B2:4E:DA:80:A1:C9:61:93:6D
            X509v3 Authority Key Identifier:
                keyid:29:05:A3:EE:8F:9C:36:1A:BD:97:1B:0C:A9:72:6D:F8:3C:FA:6B:F8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KQWj7o-cNhq9lxsMqXJt-Dz6a_g.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30016/yxAWjKVgPu6OOsayTtqAoclhk20.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:300:fffd::/48

    Signature Algorithm: sha256WithRSAEncryption
         1a:9c:22:f5:76:36:d3:f6:06:db:ce:61:49:09:db:55:d6:64:
         47:84:91:e6:08:2d:3d:34:2e:ff:02:7a:fa:26:0f:2e:ca:06:
         a8:e4:03:e8:4a:a8:e5:b7:6c:aa:77:c2:be:c4:95:5d:4c:a9:
         c2:27:9d:9c:4e:07:f4:25:82:d1:f1:f1:11:ea:70:e5:db:c7:
         82:86:95:9a:82:9a:9b:5a:ef:88:e9:90:07:d4:0d:69:64:d5:
         24:01:44:e9:7f:c3:b3:6c:d3:0b:ea:98:e9:c7:b6:51:c5:62:
         6d:ac:69:20:14:2b:7a:6a:ec:a0:d4:21:a4:1e:8e:d2:8d:f7:
         4e:bd:9d:8c:29:af:3e:9c:c4:a0:dc:7b:d6:5b:9b:86:83:81:
         77:9a:82:08:8b:7a:e4:79:88:c7:0a:8e:46:14:e6:b9:b1:bd:
         29:1e:4d:6c:56:16:70:f0:07:e4:bd:d0:fc:b0:01:05:27:1c:
         96:d1:9f:a2:22:6d:ee:2a:2b:44:43:ad:d5:da:f8:f3:e7:04:
         a8:55:20:7b:ef:75:b7:3a:6c:e1:eb:8c:46:8e:c8:f7:51:74:
         7f:b1:6f:f0:6a:1b:3e:c0:74:55:0f:8d:aa:82:87:a2:22:16:
         dd:61:c2:4f:55:76:09:68:57:e6:b9:86:57:be:dc:8d:75:61:
         e1:07:55:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 01:14:58 2024 by rpki-client on console-fra.rpki-client.org