Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30021/OgkUTvYMkJMyJx4IGYJpKtVunUA.roa
File:                     OgkUTvYMkJMyJx4IGYJpKtVunUA.roa (raw, json)
Hash identifier:          9RygdoWoobq1fGvqpHbn9G0T46Glqq+zOwX4sRUWlEk=
Subject key identifier:   3A:09:14:4E:F6:0C:90:93:32:27:1E:08:19:82:69:2A:D5:6E:9D:40
Certificate issuer:       /CN=5477672B4438673BD1046987A1A91B29721F01BB
Certificate serial:       03
Authority key identifier: 54:77:67:2B:44:38:67:3B:D1:04:69:87:A1:A9:1B:29:72:1F:01:BB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VHdnK0Q4ZzvRBGmHoakbKXIfAbs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30021/OgkUTvYMkJMyJx4IGYJpKtVunUA.roa
Signing time:             Mon 17 Jun 2024 00:30:43 +0000
ROA not before:           Mon 17 Jun 2024 00:30:43 +0000
ROA not after:            Sun 15 Jun 2025 01:30:03 +0000
asID:                     7668
IP address blocks:        2001:308::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30021/VHdnK0Q4ZzvRBGmHoakbKXIfAbs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30021/VHdnK0Q4ZzvRBGmHoakbKXIfAbs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VHdnK0Q4ZzvRBGmHoakbKXIfAbs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5477672B4438673BD1046987A1A91B29721F01BB
        Validity
            Not Before: Jun 17 00:30:43 2024 GMT
            Not After : Jun 15 01:30:03 2025 GMT
        Subject: CN=3A09144EF60C909332271E081982692AD56E9D40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:5f:e4:e7:a8:32:f5:55:69:e4:93:ee:02:da:
                    95:b5:28:27:38:2a:25:52:09:74:ef:c7:73:bf:f0:
                    60:d3:20:ba:2e:ba:82:b4:f1:14:0e:31:eb:fe:ea:
                    4c:a2:fe:b0:99:3f:e0:01:e9:f7:5d:7b:14:90:2f:
                    5b:1e:9f:73:68:31:97:7b:d6:7b:fb:f3:63:62:be:
                    ce:1c:69:2b:cd:46:d0:f4:22:ec:90:9c:87:a9:4e:
                    5c:d3:50:68:96:f8:b4:d7:5e:54:aa:0e:a5:07:cd:
                    dd:b7:9a:c6:f8:ba:e2:d7:a9:54:04:a6:05:62:aa:
                    83:63:29:ce:08:00:a8:f8:86:48:18:73:3e:88:b0:
                    d8:10:52:ad:1a:78:13:df:c2:69:5b:e8:ee:b5:2e:
                    d3:42:be:aa:99:e4:74:f3:fd:88:d7:78:55:78:99:
                    ac:ac:b5:d4:4b:c9:66:67:95:ec:9f:72:aa:f0:ee:
                    38:d2:21:ea:ee:6f:1b:5a:31:6a:61:ff:d6:4e:6f:
                    5e:bc:54:ab:58:4f:48:60:81:09:e7:c3:f3:39:79:
                    5c:8d:8f:7c:99:3b:a3:e9:64:07:78:78:7f:ba:5b:
                    ab:55:6b:dc:92:a2:ad:9a:37:7d:ed:ad:58:30:26:
                    07:a7:ba:9f:c5:24:87:80:11:62:fa:32:46:07:91:
                    cd:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:09:14:4E:F6:0C:90:93:32:27:1E:08:19:82:69:2A:D5:6E:9D:40
            X509v3 Authority Key Identifier:
                keyid:54:77:67:2B:44:38:67:3B:D1:04:69:87:A1:A9:1B:29:72:1F:01:BB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30021/VHdnK0Q4ZzvRBGmHoakbKXIfAbs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VHdnK0Q4ZzvRBGmHoakbKXIfAbs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30021/OgkUTvYMkJMyJx4IGYJpKtVunUA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:308::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:dd:3c:48:a2:ad:ac:ae:74:84:18:6d:e0:87:72:6f:d5:cd:
         17:e7:5e:a1:c2:60:b6:6c:e6:54:41:af:ff:f3:95:9b:88:71:
         5c:f2:1b:6b:6d:5d:ca:35:b3:52:9e:fe:69:4b:ef:5f:1b:51:
         f6:c7:f9:f5:39:24:57:0d:2c:af:e5:76:ae:6c:60:87:8f:c0:
         73:87:12:92:65:42:ed:82:47:c6:25:96:8f:f1:85:a5:43:a3:
         70:ab:49:14:8c:c9:d6:c5:d0:28:41:47:2d:c3:b9:c9:8c:41:
         59:ab:fe:1f:ee:26:c4:59:44:6d:c9:5a:d9:8f:ee:6a:ba:4e:
         e2:6c:7c:4d:0e:1d:6b:a4:2b:0b:ea:87:66:70:15:9f:0e:ff:
         d7:29:9d:35:68:71:d6:c1:02:a9:30:66:f2:1a:d7:d7:54:c8:
         7a:bb:59:bd:aa:56:57:9d:31:47:0b:1a:c5:4a:cd:cf:24:d1:
         e1:b3:33:4b:e3:93:19:3d:f7:4b:d7:12:11:b2:b6:26:60:66:
         31:b2:54:5b:4d:f9:aa:9c:3d:1b:2b:fb:d5:cc:4e:07:50:20:
         aa:53:1a:1c:47:1f:c9:e2:58:a3:60:8b:c0:76:d4:2b:0e:b0:
         0b:03:25:ec:63:15:19:5c:3e:73:cd:8e:20:ab:af:89:1b:8b:
         8d:63:61:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:30 2024 by rpki-client on console-ams.rpki-client.org