Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30055/CN8Itp4ZX24_y05Ma4htS9NVPLc.roa
File:                     CN8Itp4ZX24_y05Ma4htS9NVPLc.roa (raw, json)
Hash identifier:          HtbxvaBjCG0hMvf0vr1C05LBLWCcHfwl7ePlNuT8s+c=
Subject key identifier:   08:DF:08:B6:9E:19:5F:6E:3F:CB:4E:4C:6B:88:6D:4B:D3:55:3C:B7
Certificate issuer:       /CN=10FE19BCD82C14A833C38159630AA7976F2BB3D0
Certificate serial:       03
Authority key identifier: 10:FE:19:BC:D8:2C:14:A8:33:C3:81:59:63:0A:A7:97:6F:2B:B3:D0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EP4ZvNgsFKgzw4FZYwqnl28rs9A.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30055/CN8Itp4ZX24_y05Ma4htS9NVPLc.roa
Signing time:             Fri 15 Sep 2023 07:33:21 +0000
ROA not before:           Fri 15 Sep 2023 07:33:21 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     7670
IP address blocks:        2001:2a8::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30055/EP4ZvNgsFKgzw4FZYwqnl28rs9A.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30055/EP4ZvNgsFKgzw4FZYwqnl28rs9A.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EP4ZvNgsFKgzw4FZYwqnl28rs9A.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10FE19BCD82C14A833C38159630AA7976F2BB3D0
        Validity
            Not Before: Sep 15 07:33:21 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=08DF08B69E195F6E3FCB4E4C6B886D4BD3553CB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b3:22:2d:6b:97:d3:8f:e4:c9:8e:55:4f:40:
                    25:a4:23:12:75:43:7c:fa:c1:f7:6d:a9:96:4e:cd:
                    1a:47:30:85:d4:fa:1e:50:b6:58:a6:55:39:cf:13:
                    f2:6b:5a:c3:8f:aa:23:d7:97:63:a1:22:e6:40:6e:
                    74:e4:06:56:29:51:f1:96:3b:d0:cb:00:8d:47:a2:
                    c2:0a:ea:6a:06:68:fd:9c:8f:da:d2:dd:0a:5d:e2:
                    38:61:3d:c5:cf:05:72:0d:f0:d5:db:15:f8:33:b5:
                    71:0e:25:ab:98:48:e4:60:b8:6f:81:a2:3a:ce:5e:
                    95:e6:9e:b8:bb:6b:8c:52:cb:dd:b3:7b:52:e2:3f:
                    54:2a:d3:f5:bd:1f:77:2a:4e:fa:d9:df:a1:bd:d1:
                    0f:f6:97:8e:ef:78:39:aa:f7:cd:1e:b4:7a:4e:a8:
                    8d:18:56:f9:9c:76:1c:82:8b:aa:0e:bc:f1:71:de:
                    d4:cf:82:ea:63:a5:22:c3:6f:03:cf:f0:5b:73:af:
                    a5:0b:f9:78:48:5c:b1:2a:98:6e:22:af:d6:88:2e:
                    0e:ce:51:a7:d2:c7:9c:f6:8d:b2:45:17:af:dd:ef:
                    58:c1:13:d6:90:02:7c:19:11:f6:3f:15:71:00:7a:
                    d3:f8:03:83:cb:19:dc:59:17:82:be:0e:d2:df:f6:
                    34:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:DF:08:B6:9E:19:5F:6E:3F:CB:4E:4C:6B:88:6D:4B:D3:55:3C:B7
            X509v3 Authority Key Identifier:
                keyid:10:FE:19:BC:D8:2C:14:A8:33:C3:81:59:63:0A:A7:97:6F:2B:B3:D0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30055/EP4ZvNgsFKgzw4FZYwqnl28rs9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EP4ZvNgsFKgzw4FZYwqnl28rs9A.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30055/CN8Itp4ZX24_y05Ma4htS9NVPLc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:2a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         ba:74:d9:58:d6:52:58:60:69:27:da:8d:fa:92:c5:27:c5:57:
         3d:ee:24:42:8e:04:33:73:f0:70:06:66:df:eb:1a:76:df:d6:
         0c:a5:c0:e0:28:60:58:92:0b:71:34:e4:55:f2:9d:84:ae:8c:
         d8:ef:5d:af:0c:d1:a6:c1:77:b2:42:95:7f:dc:df:b0:25:f1:
         7c:9b:7f:d9:b7:40:21:6b:f4:5f:06:3e:15:9c:d5:06:20:df:
         47:48:de:25:97:68:10:ac:24:52:f5:db:30:f7:81:fc:06:76:
         2a:3d:ad:15:53:4f:19:31:bd:98:2c:44:32:e5:02:dd:6d:85:
         81:25:bb:bf:7e:15:4b:ff:c1:1d:58:d5:28:1f:18:45:e7:10:
         58:94:01:15:17:15:5b:88:9e:51:81:0e:f5:db:0f:52:d7:bc:
         b2:b8:e0:56:bd:5a:e1:05:e1:58:d4:77:15:e9:99:45:ef:58:
         e9:38:a9:df:41:c3:e6:ff:b6:cd:b7:87:e0:ae:60:b4:65:4c:
         12:12:b2:ef:67:60:f2:41:44:59:96:5e:ea:34:17:b9:17:b1:
         fa:04:f7:95:7b:fc:26:8a:66:66:e4:79:e8:e1:7f:ed:e6:36:
         f3:f7:06:4e:e6:21:2c:e8:4a:83:af:86:37:d1:c8:df:61:be:
         fe:55:bc:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:19 2024 by rpki-client on console-ams.rpki-client.org