Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30030/S6MsV7_AMEutFwhEn9qjhxCib2Y.roa
File:                     S6MsV7_AMEutFwhEn9qjhxCib2Y.roa (raw, json)
Hash identifier:          L3wBMjjOsam2x7qdfW1KfPXjUhXBnO4akH+u9+cMK7g=
Subject key identifier:   4B:A3:2C:57:BF:C0:30:4B:AD:17:08:44:9F:DA:A3:87:10:A2:6F:66
Certificate issuer:       /CN=E3D7C90E9CC2CA8CDB1D74C058B122B9AE3EFFD6
Certificate serial:       46
Authority key identifier: E3:D7:C9:0E:9C:C2:CA:8C:DB:1D:74:C0:58:B1:22:B9:AE:3E:FF:D6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/49fJDpzCyozbHXTAWLEiua4-_9Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30030/S6MsV7_AMEutFwhEn9qjhxCib2Y.roa
Signing time:             Thu 31 Oct 2024 01:30:38 +0000
ROA not before:           Thu 31 Oct 2024 01:30:38 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     2527
IP address blocks:        240d::/27 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30030/49fJDpzCyozbHXTAWLEiua4-_9Y.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30030/49fJDpzCyozbHXTAWLEiua4-_9Y.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/49fJDpzCyozbHXTAWLEiua4-_9Y.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70 (0x46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3D7C90E9CC2CA8CDB1D74C058B122B9AE3EFFD6
        Validity
            Not Before: Oct 31 01:30:38 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=4BA32C57BFC0304BAD1708449FDAA38710A26F66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:2f:6e:76:7d:4b:e0:c5:92:ba:84:a1:60:cc:
                    eb:db:71:30:af:ee:c3:de:1b:7d:4b:19:8c:89:fd:
                    cd:70:9a:b9:88:15:c1:37:b5:0f:99:b9:bb:7e:48:
                    fe:20:21:bc:b5:68:4e:f4:e9:a5:d8:05:8a:dd:2e:
                    89:08:5a:a3:d1:0a:00:03:bd:a4:6c:f8:12:39:45:
                    5c:aa:29:c3:ab:83:51:03:a7:0f:87:e8:c9:36:c4:
                    9c:71:68:9f:d3:ac:e3:ab:f8:b4:6d:01:5c:3e:2f:
                    fd:90:b4:b0:2e:a9:6d:39:89:49:97:3e:29:b7:5a:
                    54:75:14:cc:31:35:da:ec:54:58:77:64:89:78:c8:
                    dd:8f:91:33:35:4a:4a:e6:53:73:aa:03:3b:20:5a:
                    1e:6a:24:f8:6e:d2:46:9d:ea:db:43:e0:93:b8:66:
                    c6:d2:02:59:d9:f9:0b:a6:8b:54:ac:1b:63:99:9d:
                    bd:0a:a0:46:f4:ac:ce:60:c4:ed:67:88:45:bb:d4:
                    b5:0b:f4:fc:15:12:65:9b:01:1e:c0:ea:1f:e4:58:
                    03:3c:8c:73:1a:fb:c1:e2:b6:b3:b4:c2:5c:34:63:
                    cd:b1:f0:ff:f0:2a:15:dc:fa:5e:86:20:d6:8e:5f:
                    17:4c:80:9c:83:a4:77:16:2c:52:f6:88:fb:e7:92:
                    65:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:A3:2C:57:BF:C0:30:4B:AD:17:08:44:9F:DA:A3:87:10:A2:6F:66
            X509v3 Authority Key Identifier:
                keyid:E3:D7:C9:0E:9C:C2:CA:8C:DB:1D:74:C0:58:B1:22:B9:AE:3E:FF:D6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30030/49fJDpzCyozbHXTAWLEiua4-_9Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/49fJDpzCyozbHXTAWLEiua4-_9Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30030/S6MsV7_AMEutFwhEn9qjhxCib2Y.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240d::/27

    Signature Algorithm: sha256WithRSAEncryption
         a3:ae:ec:b1:32:1e:82:6a:bb:90:43:76:25:fe:dc:fd:73:26:
         b7:f6:7d:86:ec:ac:04:94:29:7d:04:65:72:48:12:f4:a7:98:
         54:76:da:e8:47:66:d9:55:fa:9b:7c:e6:b5:83:bf:c0:f5:b4:
         cd:74:af:d9:60:6f:52:9a:dc:78:d6:15:b6:26:76:e7:79:4e:
         c0:f9:5e:70:23:c4:81:67:64:67:77:fb:40:cf:fb:ef:8f:8f:
         b3:ee:fd:91:23:a9:5f:32:a1:63:71:98:c8:06:26:6a:49:87:
         a2:c3:00:18:53:49:aa:62:77:73:8a:10:8d:91:89:e1:53:ad:
         11:cb:a2:b5:7c:98:93:5a:ec:f3:3c:46:4c:0f:8a:c2:d5:22:
         5b:7a:25:24:7d:e1:56:d2:48:33:a0:5c:f7:cf:28:71:b7:06:
         e8:64:21:5b:db:24:91:83:d9:dd:93:04:f4:de:35:41:9e:b6:
         f2:32:a9:f6:00:d3:e3:bf:b3:73:47:fa:cb:51:fa:6f:7c:0c:
         c0:0b:1a:9d:99:21:ee:35:bb:bb:b6:b7:9c:d2:9c:f2:48:31:
         b0:d4:c0:7b:48:ab:31:a2:8a:0d:d0:fc:8b:15:af:0a:cc:9d:
         2e:54:21:6d:54:03:e6:f7:63:a9:71:ca:58:29:9e:8f:02:5d:
         79:28:29:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:23:57 2024 by rpki-client on console-fra.rpki-client.org