Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30072/jpvRynOf1E1zcDfMXcd9sreTfRw.roa
File:                     jpvRynOf1E1zcDfMXcd9sreTfRw.roa (raw, json)
Hash identifier:          sj0GSDSVM7L1Lq6Qjv7ixK1kDfdI85MvE0KnhDCulVY=
Subject key identifier:   8E:9B:D1:CA:73:9F:D4:4D:73:70:37:CC:5D:C7:7D:B2:B7:93:7D:1C
Certificate issuer:       /CN=58AE52C1F36BFAF852F410F1CAD0D3683D541261
Certificate serial:       30
Authority key identifier: 58:AE:52:C1:F3:6B:FA:F8:52:F4:10:F1:CA:D0:D3:68:3D:54:12:61
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WK5SwfNr-vhS9BDxytDTaD1UEmE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/jpvRynOf1E1zcDfMXcd9sreTfRw.roa
Signing time:             Sun 30 Jun 2024 01:29:50 +0000
ROA not before:           Sun 30 Jun 2024 01:29:50 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     4721
IP address blocks:        2001:c30:40::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/WK5SwfNr-vhS9BDxytDTaD1UEmE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/WK5SwfNr-vhS9BDxytDTaD1UEmE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WK5SwfNr-vhS9BDxytDTaD1UEmE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48 (0x30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58AE52C1F36BFAF852F410F1CAD0D3683D541261
        Validity
            Not Before: Jun 30 01:29:50 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=8E9BD1CA739FD44D737037CC5DC77DB2B7937D1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:7b:94:a7:b4:23:34:83:ac:99:2a:11:6a:a1:
                    07:36:94:5a:40:ea:39:b5:a1:7a:c3:8e:ca:c3:87:
                    25:d8:f7:4c:ef:1e:5a:20:f5:98:bd:90:83:d2:89:
                    50:1b:64:30:fb:9c:8b:34:65:f3:ab:f8:94:f2:d7:
                    28:37:45:77:a8:de:8b:d4:0d:9e:cb:66:d1:de:08:
                    76:83:2b:3b:ef:03:c9:1b:b6:64:d9:69:3b:71:e7:
                    b2:a4:89:aa:a4:3d:24:bc:3f:f8:45:dc:b0:4d:26:
                    ed:5c:81:f6:c6:b5:a0:7f:6d:68:38:9b:81:f2:39:
                    42:8f:18:37:cb:45:94:46:54:42:83:d4:7f:79:63:
                    40:ac:79:22:5b:b5:63:e5:d5:35:7d:11:46:47:87:
                    77:65:34:6f:2a:21:95:b3:e1:11:8d:9a:c7:a9:20:
                    0c:4f:91:c1:b0:47:dd:40:62:dc:50:1e:7a:52:47:
                    72:43:41:5e:a6:ec:5e:79:4d:65:62:12:61:94:95:
                    d4:63:3a:a3:27:5a:87:c0:40:3e:55:c9:3f:e3:98:
                    db:1d:67:76:71:6d:4c:7c:f8:76:07:ea:e5:06:88:
                    aa:77:9e:c8:b0:9d:85:81:17:8f:bd:90:16:40:a8:
                    e0:18:78:cd:1c:01:f9:0f:a7:fc:cb:0d:99:db:32:
                    4c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:9B:D1:CA:73:9F:D4:4D:73:70:37:CC:5D:C7:7D:B2:B7:93:7D:1C
            X509v3 Authority Key Identifier:
                keyid:58:AE:52:C1:F3:6B:FA:F8:52:F4:10:F1:CA:D0:D3:68:3D:54:12:61

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/WK5SwfNr-vhS9BDxytDTaD1UEmE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WK5SwfNr-vhS9BDxytDTaD1UEmE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/jpvRynOf1E1zcDfMXcd9sreTfRw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:c30:40::/48

    Signature Algorithm: sha256WithRSAEncryption
         76:8c:3e:c6:09:58:16:67:ed:b9:62:bd:56:8c:dd:e8:b7:c5:
         52:e0:5f:94:3f:5f:02:10:f2:ca:19:34:f9:e7:2f:ad:56:e6:
         e9:0f:bf:88:25:06:b3:47:a0:1f:a8:7e:38:98:f9:e0:82:32:
         52:23:89:69:03:69:24:2b:23:a4:0f:11:63:6f:1f:f2:17:6d:
         8c:fa:e5:6d:2c:f1:cc:c7:18:fd:a4:b5:cd:52:fa:cf:34:9f:
         20:b8:10:26:bd:f8:14:54:c4:54:63:c4:08:09:b5:22:01:44:
         c1:85:15:9b:56:4e:c3:d2:ba:01:f9:e1:16:1b:53:68:b9:05:
         ae:3b:e5:a3:b5:cf:67:6d:f7:38:36:5e:f8:96:f5:87:2e:a3:
         f8:05:1d:03:70:e7:98:0f:4d:0f:69:eb:de:30:c3:fe:a6:17:
         6d:8d:cf:dc:bd:ca:8e:d5:d8:39:ce:c2:ce:9c:fe:a1:27:d1:
         97:96:87:7c:37:65:f8:d5:d0:6a:85:f6:31:8e:04:0c:37:56:
         b4:c8:f4:07:db:85:ef:7a:86:5c:b0:a5:90:57:ca:82:49:bc:
         a6:7e:da:fd:90:50:3a:43:9f:65:0d:b4:b6:92:7b:cd:ff:d9:
         7d:c0:87:cd:07:a7:d3:e8:18:f1:2b:e0:02:29:24:77:07:2a:
         d0:9f:e1:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:33 2024 by rpki-client on console-ams.rpki-client.org