Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30072/JVzOBi8qEwS3IxT2TzCd4Faw4ug.roa
File:                     JVzOBi8qEwS3IxT2TzCd4Faw4ug.roa (raw, json)
Hash identifier:          mnC9hXC4iynqyWyMib4rf3jGTkpzECAn0TGtm3zCOGM=
Subject key identifier:   25:5C:CE:06:2F:2A:13:04:B7:23:14:F6:4F:30:9D:E0:56:B0:E2:E8
Certificate issuer:       /CN=58AE52C1F36BFAF852F410F1CAD0D3683D541261
Certificate serial:       34
Authority key identifier: 58:AE:52:C1:F3:6B:FA:F8:52:F4:10:F1:CA:D0:D3:68:3D:54:12:61
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WK5SwfNr-vhS9BDxytDTaD1UEmE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/JVzOBi8qEwS3IxT2TzCd4Faw4ug.roa
Signing time:             Wed 31 Jul 2024 01:29:27 +0000
ROA not before:           Wed 31 Jul 2024 01:29:27 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     9824
IP address blocks:        2001:c30::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/WK5SwfNr-vhS9BDxytDTaD1UEmE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/WK5SwfNr-vhS9BDxytDTaD1UEmE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WK5SwfNr-vhS9BDxytDTaD1UEmE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Dec 2024 00:11:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52 (0x34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58AE52C1F36BFAF852F410F1CAD0D3683D541261
        Validity
            Not Before: Jul 31 01:29:27 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=255CCE062F2A1304B72314F64F309DE056B0E2E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9e:30:d9:fa:88:45:cc:88:08:df:1e:20:dd:
                    11:0c:6a:b3:42:9e:2a:41:45:3e:2b:8e:15:77:f8:
                    54:9b:8a:d7:90:bd:71:41:98:6f:ef:08:f1:c1:08:
                    6b:47:83:37:eb:c0:2b:ae:8e:35:6e:32:5a:42:90:
                    e7:8d:49:81:fc:e7:a0:66:c0:09:d2:fe:50:1a:84:
                    26:25:24:2d:70:2b:50:16:48:be:b8:fb:97:90:30:
                    08:94:28:da:07:bb:aa:e7:0a:18:df:76:95:ff:b7:
                    d3:42:bc:64:c6:55:57:28:01:97:96:28:dd:be:f3:
                    1d:cb:9e:f0:39:f7:80:c0:1f:ee:19:09:3f:2b:c5:
                    d1:3f:36:f3:28:83:8d:74:5a:26:93:7a:06:fc:e4:
                    9c:82:55:5e:e9:1b:e4:71:64:7c:c0:5d:3d:01:92:
                    2e:75:02:30:3b:45:7a:92:5c:53:01:28:d2:32:c8:
                    20:d6:41:7e:99:56:74:23:b9:2c:06:a8:c0:e3:73:
                    b1:c4:00:38:4d:27:df:d7:35:d5:77:11:6a:88:99:
                    81:3e:fa:f1:1c:84:82:bc:fb:bd:00:8d:77:d1:fd:
                    a3:3c:77:0b:d8:af:c4:3e:79:77:63:b2:8d:6e:1a:
                    bc:ca:a9:5a:70:9b:03:88:ce:1b:01:34:76:47:17:
                    5c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:5C:CE:06:2F:2A:13:04:B7:23:14:F6:4F:30:9D:E0:56:B0:E2:E8
            X509v3 Authority Key Identifier:
                keyid:58:AE:52:C1:F3:6B:FA:F8:52:F4:10:F1:CA:D0:D3:68:3D:54:12:61

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/WK5SwfNr-vhS9BDxytDTaD1UEmE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WK5SwfNr-vhS9BDxytDTaD1UEmE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/JVzOBi8qEwS3IxT2TzCd4Faw4ug.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:c30::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:9e:b9:1d:a8:ac:d2:c4:25:84:f9:43:79:97:65:8c:75:0b:
         e5:62:7e:e2:65:2b:d3:28:11:12:19:28:14:30:e2:ad:2b:c5:
         05:4b:c0:b2:cb:e9:05:5f:25:f0:a8:16:21:21:b3:51:f6:8d:
         ce:85:c8:99:53:7b:4d:b2:c4:c4:70:5b:16:ed:91:f8:8a:1d:
         1d:8e:91:5c:28:e7:8f:8b:58:17:0b:52:e3:16:5f:b7:54:6c:
         3c:e3:8c:f2:c5:24:a5:50:8b:d2:d8:b9:d0:22:73:17:fe:b5:
         35:aa:ac:f3:95:1b:22:dd:ca:0e:72:f7:77:d0:88:2b:b2:5a:
         4a:35:0b:6b:fa:0f:e6:17:13:46:b0:27:51:12:42:ab:6c:92:
         c2:a9:87:2a:66:15:5d:c7:28:ec:10:14:79:61:c7:81:2d:ef:
         ea:e4:4f:d9:f5:12:b1:6b:58:99:fb:55:c4:f0:e1:27:4f:eb:
         e6:db:25:34:30:76:ab:1a:42:e1:d6:bf:3b:d4:b2:72:51:a6:
         f5:7c:9f:60:e1:c0:8d:d5:a7:84:4f:52:16:21:ca:1a:c9:1f:
         22:d6:5e:ec:b5:2c:75:d5:e1:a2:2f:91:79:24:f7:17:43:b1:
         30:dc:7f:72:5a:b1:71:02:27:d5:64:5c:da:37:4f:0c:d7:96:
         8a:f6:87:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:27:03 2024 by rpki-client on console-ams.rpki-client.org