Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30040/JRfRDyNent-kY9eNHVXgwy14UNA.roa
File:                     JRfRDyNent-kY9eNHVXgwy14UNA.roa (raw, json)
Hash identifier:          WiHAj1egKtntHlRMM3Grzv3XubO5NHdV47aI0KMVM1I=
Subject key identifier:   25:17:D1:0F:23:5E:9E:DF:A4:63:D7:8D:1D:55:E0:C3:2D:78:50:D0
Certificate issuer:       /CN=5DEFF9E1A97D46CCDC12F606EEB38A3E64DBC81F
Certificate serial:       11
Authority key identifier: 5D:EF:F9:E1:A9:7D:46:CC:DC:12:F6:06:EE:B3:8A:3E:64:DB:C8:1F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Xe_54al9RszcEvYG7rOKPmTbyB8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30040/JRfRDyNent-kY9eNHVXgwy14UNA.roa
Signing time:             Fri 02 Feb 2024 08:12:59 +0000
ROA not before:           Fri 02 Feb 2024 08:12:59 +0000
ROA not after:            Tue 14 Jan 2025 01:30:02 +0000
asID:                     9619
IP address blocks:        2001:cf8:5::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30040/Xe_54al9RszcEvYG7rOKPmTbyB8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30040/Xe_54al9RszcEvYG7rOKPmTbyB8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Xe_54al9RszcEvYG7rOKPmTbyB8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17 (0x11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5DEFF9E1A97D46CCDC12F606EEB38A3E64DBC81F
        Validity
            Not Before: Feb  2 08:12:59 2024 GMT
            Not After : Jan 14 01:30:02 2025 GMT
        Subject: CN=2517D10F235E9EDFA463D78D1D55E0C32D7850D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:07:c0:66:96:73:94:4f:5a:23:20:fd:cf:9a:
                    83:36:79:d1:ce:52:96:8d:7d:08:85:17:26:d5:a2:
                    ce:25:7a:da:d4:ac:4b:af:93:d6:91:49:2a:4e:07:
                    9d:bd:9a:cb:3f:a7:00:98:86:e2:0d:c0:c4:dd:36:
                    03:69:10:f6:9c:a1:82:74:81:e0:ce:69:04:0b:2f:
                    56:98:e0:05:c3:61:38:bf:da:59:f6:f3:18:e5:4c:
                    bd:76:23:3b:c0:63:42:97:55:47:7f:b1:55:9a:25:
                    a8:61:89:7b:5d:e2:59:4a:f4:ce:71:ac:d2:c5:ac:
                    a0:02:56:36:2a:36:36:73:c0:8d:04:59:9a:aa:43:
                    67:7e:29:33:9b:68:34:fa:e7:b8:8b:69:17:ad:9a:
                    69:06:af:38:6b:e1:18:1b:c3:08:29:78:3b:4e:00:
                    d6:d2:65:72:db:9b:29:76:b4:d8:24:47:ce:4f:0d:
                    7d:b6:93:4b:1a:d9:a3:b8:3a:cd:fb:3d:9d:d9:97:
                    c1:7a:ca:47:4d:11:51:b0:48:9e:c0:12:e4:03:e9:
                    a4:69:24:46:cc:7a:9e:fc:f6:b9:d6:e0:82:b2:78:
                    35:df:43:f1:22:40:11:b3:67:b3:94:6a:de:2a:f7:
                    3f:40:dd:89:7a:81:78:2a:e7:c4:1b:0e:99:62:22:
                    2d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:17:D1:0F:23:5E:9E:DF:A4:63:D7:8D:1D:55:E0:C3:2D:78:50:D0
            X509v3 Authority Key Identifier:
                keyid:5D:EF:F9:E1:A9:7D:46:CC:DC:12:F6:06:EE:B3:8A:3E:64:DB:C8:1F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30040/Xe_54al9RszcEvYG7rOKPmTbyB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Xe_54al9RszcEvYG7rOKPmTbyB8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30040/JRfRDyNent-kY9eNHVXgwy14UNA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:cf8:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         9d:63:31:75:b3:71:f9:ac:7a:87:ec:9f:60:27:fc:8a:bf:e4:
         c3:9a:8d:a4:4d:75:34:7f:4d:44:25:50:09:7a:88:16:7a:72:
         f6:3a:da:ed:5f:e8:ed:42:38:0f:f0:d5:45:8f:66:23:f2:7e:
         25:8d:96:93:68:c1:27:6c:a3:68:ad:06:d1:7e:b4:04:c4:17:
         37:56:01:45:7b:47:9b:2b:ae:38:27:2d:b5:29:71:c0:a7:38:
         11:ca:91:2a:00:f8:59:c1:eb:f0:ec:20:14:7d:40:6b:85:05:
         08:e2:1d:d8:41:5e:a8:87:3a:5e:01:4e:b0:dd:c6:9c:26:f8:
         ca:7f:46:67:50:a5:92:a4:eb:a0:eb:8b:e4:af:52:de:52:9b:
         27:53:a8:8f:18:d1:4d:b9:e8:8b:dd:11:a2:8e:4a:3f:fe:6e:
         88:aa:48:98:33:f7:e2:3d:f9:7c:ac:9a:17:e5:94:f1:91:da:
         77:e8:d9:da:b3:50:77:e1:5b:49:bb:5b:0f:cf:64:fc:6a:f3:
         88:04:2e:8d:9d:d4:5b:2e:20:69:63:3d:dc:70:33:36:4e:58:
         30:22:84:38:e8:67:64:ad:7c:99:d6:5e:d7:9c:5a:31:81:59:
         78:8e:9a:d7:17:3b:37:c5:66:2b:64:19:27:6f:67:89:c1:6b:
         21:05:57:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:30 2024 by rpki-client on console-ams.rpki-client.org