Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30047/aZ-MBqR2MXDSb-UwlQDBUKaAsT8.roa
File:                     aZ-MBqR2MXDSb-UwlQDBUKaAsT8.roa (raw, json)
Hash identifier:          f+vriUGlnX5Csdn5bhB5J0V073O/uQUYV9UJI9MBpeI=
Subject key identifier:   69:9F:8C:06:A4:76:31:70:D2:6F:E5:30:95:00:C1:50:A6:80:B1:3F
Certificate issuer:       /CN=075054052FAE3C210E8A73FBE525CAC74E786A26
Certificate serial:       4C
Authority key identifier: 07:50:54:05:2F:AE:3C:21:0E:8A:73:FB:E5:25:CA:C7:4E:78:6A:26
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/B1BUBS-uPCEOinP75SXKx054aiY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30047/aZ-MBqR2MXDSb-UwlQDBUKaAsT8.roa
Signing time:             Thu 29 Feb 2024 01:29:37 +0000
ROA not before:           Thu 29 Feb 2024 01:29:37 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     7671
IP address blocks:        2001:d70::/30 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30047/B1BUBS-uPCEOinP75SXKx054aiY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30047/B1BUBS-uPCEOinP75SXKx054aiY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/B1BUBS-uPCEOinP75SXKx054aiY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Oct 2024 13:34:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76 (0x4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=075054052FAE3C210E8A73FBE525CAC74E786A26
        Validity
            Not Before: Feb 29 01:29:37 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=699F8C06A4763170D26FE5309500C150A680B13F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b2:17:f3:b0:24:e4:96:db:bb:7b:95:6f:be:
                    f1:b7:e6:93:96:6d:a8:1a:d1:d5:df:29:09:2f:06:
                    a5:f1:49:67:96:9b:b0:88:30:b9:1e:d0:96:6c:a9:
                    10:95:b2:ba:f7:f5:6e:a9:5c:9d:bd:c2:55:47:c4:
                    b6:f8:55:ae:cf:08:ab:bc:70:90:09:f2:d2:a6:10:
                    82:49:7c:ca:0e:dc:08:f8:2e:f2:27:8b:4a:83:73:
                    cf:e5:0d:fa:9c:54:53:bb:23:b6:02:bd:bb:b8:7f:
                    ac:de:27:14:72:dd:d9:56:37:8d:6c:05:2c:af:ad:
                    3a:2a:a3:d4:4d:eb:fd:01:7c:b7:cc:af:24:6c:a5:
                    56:42:ba:b6:f9:91:5b:60:24:f0:3e:64:35:39:0c:
                    4d:f0:89:6b:ef:fd:5c:5f:51:2b:d6:74:fc:f1:66:
                    bd:44:7a:94:3c:74:9d:fd:e8:28:da:e3:aa:70:b1:
                    f0:20:1e:19:56:ae:88:ae:b1:91:25:dc:24:6c:f6:
                    96:9e:65:95:a7:23:f2:f9:85:c7:35:9e:5d:8d:a8:
                    93:8c:16:ac:5b:56:7e:47:7b:8e:f5:f3:52:34:7f:
                    6d:1b:b6:56:8e:cc:46:d6:a8:ce:1a:5c:ff:f4:66:
                    03:3e:0f:1d:d4:54:1a:2f:61:30:b9:5f:40:2c:b5:
                    d6:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:9F:8C:06:A4:76:31:70:D2:6F:E5:30:95:00:C1:50:A6:80:B1:3F
            X509v3 Authority Key Identifier:
                keyid:07:50:54:05:2F:AE:3C:21:0E:8A:73:FB:E5:25:CA:C7:4E:78:6A:26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30047/B1BUBS-uPCEOinP75SXKx054aiY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/B1BUBS-uPCEOinP75SXKx054aiY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30047/aZ-MBqR2MXDSb-UwlQDBUKaAsT8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:d70::/30

    Signature Algorithm: sha256WithRSAEncryption
         c0:0b:68:28:4f:30:22:c0:5f:29:6c:99:cd:d7:84:69:51:87:
         34:7c:8f:62:55:e7:e5:64:7e:2c:7d:83:72:4c:6d:ed:18:02:
         2c:27:62:db:88:39:ba:b9:dc:8b:a0:58:97:ac:61:6e:63:78:
         d3:c6:1c:a8:58:bb:3a:6c:f4:72:d7:11:0a:1a:16:2a:eb:12:
         09:af:85:c3:72:3d:6f:42:67:92:8a:c7:56:47:9d:99:87:2c:
         41:c1:e1:74:63:c6:64:b7:85:e7:52:74:1d:43:d1:6c:d5:08:
         f2:57:07:29:6a:3e:68:70:23:1c:92:2f:d3:2a:b5:9d:ed:6f:
         4f:22:c3:ae:33:5f:9d:e0:a1:23:19:9c:9d:88:77:22:0b:a2:
         52:93:38:a4:d7:b1:c9:e1:c3:7f:27:38:e2:5b:d0:6d:9d:20:
         80:a9:a8:15:57:82:b4:08:26:fa:c5:e8:d4:63:82:46:b7:78:
         9c:6b:f0:23:1d:a7:a6:9a:dd:35:11:55:6d:bb:f3:b4:e4:e1:
         74:34:8a:27:2a:28:eb:e3:75:bf:bc:79:f7:65:c6:be:d1:08:
         22:25:c6:d2:0c:96:d1:90:14:93:62:3d:ac:88:d2:70:40:01:
         1e:50:b4:61:08:df:d6:c3:13:70:ea:dc:b7:fc:71:ac:3c:6b:
         bc:a7:50:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 06:21:54 2024 by rpki-client on console-ams.rpki-client.org