Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30072/trzFoZfkWgwP7MJS2Uhqc_JDDBw.roa
File:                     trzFoZfkWgwP7MJS2Uhqc_JDDBw.roa (raw, json)
Hash identifier:          HBfpP8iTnrjkCSTzKqRPr0VefrG55qvhU9zgxb+0fKc=
Subject key identifier:   B6:BC:C5:A1:97:E4:5A:0C:0F:EC:C2:52:D9:48:6A:73:F2:43:0C:1C
Certificate issuer:       /CN=58AE52C1F36BFAF852F410F1CAD0D3683D541261
Certificate serial:       31
Authority key identifier: 58:AE:52:C1:F3:6B:FA:F8:52:F4:10:F1:CA:D0:D3:68:3D:54:12:61
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WK5SwfNr-vhS9BDxytDTaD1UEmE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/trzFoZfkWgwP7MJS2Uhqc_JDDBw.roa
Signing time:             Sun 30 Jun 2024 01:29:51 +0000
ROA not before:           Sun 30 Jun 2024 01:29:51 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     9824
IP address blocks:        2001:c30:40::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/WK5SwfNr-vhS9BDxytDTaD1UEmE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/WK5SwfNr-vhS9BDxytDTaD1UEmE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WK5SwfNr-vhS9BDxytDTaD1UEmE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Dec 2024 00:11:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49 (0x31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58AE52C1F36BFAF852F410F1CAD0D3683D541261
        Validity
            Not Before: Jun 30 01:29:51 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=B6BCC5A197E45A0C0FECC252D9486A73F2430C1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:77:20:79:30:1f:f1:89:7e:2b:33:d0:2c:f6:
                    07:7b:79:35:52:7c:b8:da:ba:59:28:e5:ff:db:af:
                    cf:c8:f9:f0:bc:45:b1:b2:82:ca:d8:20:d7:03:ff:
                    04:b0:75:5c:f5:d5:92:ec:e6:b7:72:2c:48:4a:bc:
                    0c:eb:08:34:ce:1e:dc:51:f5:74:3a:e9:f4:34:4f:
                    7b:92:20:ea:b7:f2:ad:df:13:3d:2b:9a:b9:0e:ab:
                    ff:da:a2:73:9f:64:9d:f7:fa:d8:7b:a4:eb:d5:0b:
                    3f:1c:b5:72:fc:1c:1d:eb:1b:09:05:90:be:4e:51:
                    89:8e:27:d2:26:1a:0f:63:cf:d7:51:07:32:9a:80:
                    39:1e:aa:79:0b:b0:93:3c:fc:16:fb:bd:07:b9:d2:
                    d5:da:50:41:c5:2c:03:41:aa:24:e8:ae:7e:f5:ae:
                    32:55:7c:23:f8:09:ce:c8:6c:2b:63:06:ff:91:8f:
                    3f:19:89:4f:c7:3a:f9:b5:50:50:56:34:52:c3:96:
                    af:cf:0c:95:6d:75:ab:c9:f8:c6:99:b9:4e:2a:32:
                    5f:1d:36:72:31:03:85:ee:7f:6c:7b:58:99:15:6c:
                    f4:36:cc:0e:fc:aa:a3:99:0e:4a:9c:2d:88:53:bd:
                    29:8e:ed:05:1f:d4:07:f7:eb:ac:d9:c2:e3:92:be:
                    e1:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:BC:C5:A1:97:E4:5A:0C:0F:EC:C2:52:D9:48:6A:73:F2:43:0C:1C
            X509v3 Authority Key Identifier:
                keyid:58:AE:52:C1:F3:6B:FA:F8:52:F4:10:F1:CA:D0:D3:68:3D:54:12:61

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/WK5SwfNr-vhS9BDxytDTaD1UEmE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WK5SwfNr-vhS9BDxytDTaD1UEmE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/trzFoZfkWgwP7MJS2Uhqc_JDDBw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:c30:40::/48

    Signature Algorithm: sha256WithRSAEncryption
         61:4e:32:1e:ca:5e:48:ba:e3:61:4d:78:71:72:9a:b2:5c:d5:
         4d:ec:63:fa:f5:88:07:87:8b:9c:dd:cb:d3:0e:c7:ac:03:b0:
         5e:0c:44:f3:7c:85:f3:e2:b9:e6:20:ce:0c:99:78:a1:9d:25:
         76:7e:cd:d4:36:92:1a:bf:64:f8:8d:36:03:d2:bb:30:b3:e5:
         9b:dd:79:7b:e4:a1:ba:14:42:2e:d6:6a:ed:02:30:7d:8f:f0:
         cf:d7:20:18:13:6a:d4:22:39:57:c2:76:77:a1:cb:f1:9b:5e:
         4f:40:dc:16:27:8d:f8:cc:1f:fe:a4:d5:09:a7:2d:ef:48:f8:
         3d:8d:e8:10:a6:b2:1f:cb:70:3e:7e:a8:ef:ed:4d:cd:f4:68:
         db:80:f7:53:55:24:19:76:b6:2c:02:69:61:39:8e:ca:ac:34:
         6d:11:9b:45:7c:49:12:e1:b2:2a:aa:7f:8c:a3:53:91:0b:d6:
         54:5f:55:25:b7:8d:59:d0:cc:40:53:4d:88:bf:71:45:25:a4:
         20:89:b0:4e:48:d0:c8:2d:be:26:ad:ee:d7:a4:38:d3:38:5a:
         ff:7a:73:c2:4c:c2:ef:05:7f:a2:51:5b:35:b6:c9:4f:83:e2:
         7a:0c:79:f4:16:11:5c:9f:e8:2d:6b:2f:65:23:c2:94:6d:0c:
         53:ec:14:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:17:06 2024 by rpki-client on console-fra.rpki-client.org