Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30043/V5hCC9z5v-ReeS7SRXnQuHOuotM.roa
File:                     V5hCC9z5v-ReeS7SRXnQuHOuotM.roa (raw, json)
Hash identifier:          C0utyeVkRnaI/SpVVUQt1lG1AO2Ot2Tn83WOJ756Wmk=
Subject key identifier:   57:98:42:0B:DC:F9:BF:E4:5E:79:2E:D2:45:79:D0:B8:73:AE:A2:D3
Certificate issuer:       /CN=7DBE7675B2C903F065AAB64C8F8F03F1EBE6DF3D
Certificate serial:       2D
Authority key identifier: 7D:BE:76:75:B2:C9:03:F0:65:AA:B6:4C:8F:8F:03:F1:EB:E6:DF:3D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fb52dbLJA_BlqrZMj48D8evm3z0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30043/V5hCC9z5v-ReeS7SRXnQuHOuotM.roa
Signing time:             Wed 31 Jul 2024 01:29:00 +0000
ROA not before:           Wed 31 Jul 2024 01:29:00 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     9621
IP address blocks:        2001:d28::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30043/fb52dbLJA_BlqrZMj48D8evm3z0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30043/fb52dbLJA_BlqrZMj48D8evm3z0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fb52dbLJA_BlqrZMj48D8evm3z0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45 (0x2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7DBE7675B2C903F065AAB64C8F8F03F1EBE6DF3D
        Validity
            Not Before: Jul 31 01:29:00 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=5798420BDCF9BFE45E792ED24579D0B873AEA2D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0f:65:f2:09:23:53:96:bc:54:68:97:79:94:
                    d3:c2:b2:24:4a:a5:a6:55:cd:42:7c:2f:f4:2a:50:
                    72:50:24:25:bc:08:01:33:3a:9d:dd:ee:a7:09:0a:
                    93:93:a6:8d:08:2f:35:b3:75:2f:79:bb:18:2a:90:
                    eb:c7:21:c1:bd:1d:e1:ea:0e:ef:27:3b:25:92:b4:
                    9c:1c:92:17:7d:27:d0:d9:b4:39:6d:ca:6f:1b:92:
                    e5:52:cd:70:2a:53:a5:50:d7:4c:00:3c:a0:28:91:
                    9b:e3:bf:41:88:97:5b:93:83:fa:cc:86:ff:5b:b3:
                    22:fb:a5:11:63:e7:83:c1:6e:3e:97:1c:35:1c:bb:
                    f0:3d:5b:0d:92:30:ab:ff:4b:8c:43:2a:66:6c:9c:
                    3a:c0:e2:6f:29:13:a0:08:c1:76:39:32:94:20:4d:
                    99:05:b4:74:98:c6:23:86:fc:70:6f:0b:57:e6:56:
                    00:38:c9:9b:b9:46:bf:bc:1a:14:0b:70:29:af:b1:
                    a7:05:9c:d5:77:d1:1f:64:13:e6:94:8b:68:07:76:
                    47:30:2b:9e:43:08:d1:9f:71:56:80:72:e2:12:8c:
                    41:11:ff:af:3e:cb:d4:b5:1e:9c:6e:a6:07:24:92:
                    dd:27:17:c8:9c:0c:88:d4:83:ea:2d:87:88:5d:87:
                    0b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:98:42:0B:DC:F9:BF:E4:5E:79:2E:D2:45:79:D0:B8:73:AE:A2:D3
            X509v3 Authority Key Identifier:
                keyid:7D:BE:76:75:B2:C9:03:F0:65:AA:B6:4C:8F:8F:03:F1:EB:E6:DF:3D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30043/fb52dbLJA_BlqrZMj48D8evm3z0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fb52dbLJA_BlqrZMj48D8evm3z0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30043/V5hCC9z5v-ReeS7SRXnQuHOuotM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:d28::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:c9:6d:77:c8:04:92:c5:31:91:8f:43:ec:f3:5e:bc:e0:fd:
         31:e3:f0:7d:76:0b:5d:e4:18:2d:1a:75:c1:c9:cd:ef:c9:e2:
         f9:18:f5:e6:3b:25:bf:88:62:71:60:1b:72:7a:8e:e6:3e:b7:
         f3:e7:bc:35:6f:a7:d5:28:d4:8b:5f:e2:c8:4e:f1:ed:fd:4d:
         c7:e7:f0:1f:55:fe:c6:41:93:97:ac:d7:f3:2c:35:f4:2c:cd:
         3a:bc:9b:4c:02:17:e9:2a:9b:cf:ef:cb:1a:6f:3d:2d:93:88:
         6e:26:20:92:96:df:4e:c2:de:bd:a5:07:35:2a:f0:6c:54:05:
         b7:50:71:6f:0a:3c:8e:f0:54:99:87:49:d1:ba:35:b8:d6:57:
         c0:c4:1f:af:8c:54:17:68:b5:43:e2:61:8e:6d:31:47:5a:e7:
         65:d7:89:f3:f3:2d:ee:82:6e:fe:78:de:4c:a1:df:00:c6:36:
         72:ec:84:44:58:7c:dc:7e:51:55:32:63:bc:7e:e2:78:9b:59:
         e3:4b:f8:8f:63:09:d5:9b:3c:18:57:75:4f:a4:0a:a3:66:17:
         ab:fa:3f:39:66:12:db:f1:7b:a7:fb:d8:43:16:ba:c9:2d:c2:
         6d:48:59:c6:b4:16:12:27:cf:c7:45:5a:1c:e3:a1:07:89:d7:
         59:71:19:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:32 2024 by rpki-client on console-ams.rpki-client.org