Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30072/xKrRwuPxqn2AEnkfesxDl1lkVhQ.roa
File:                     xKrRwuPxqn2AEnkfesxDl1lkVhQ.roa (raw, json)
Hash identifier:          9XABVAI0C5CBce2brIAOai4RgIEY2K4gjiRbfmCdBkw=
Subject key identifier:   C4:AA:D1:C2:E3:F1:AA:7D:80:12:79:1F:7A:CC:43:97:59:64:56:14
Certificate issuer:       /CN=58AE52C1F36BFAF852F410F1CAD0D3683D541261
Certificate serial:       1F
Authority key identifier: 58:AE:52:C1:F3:6B:FA:F8:52:F4:10:F1:CA:D0:D3:68:3D:54:12:61
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WK5SwfNr-vhS9BDxytDTaD1UEmE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/xKrRwuPxqn2AEnkfesxDl1lkVhQ.roa
Signing time:             Tue 01 Aug 2023 01:29:30 +0000
ROA not before:           Tue 01 Aug 2023 01:29:30 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     4721
IP address blocks:        2001:c30:40::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/WK5SwfNr-vhS9BDxytDTaD1UEmE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/WK5SwfNr-vhS9BDxytDTaD1UEmE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WK5SwfNr-vhS9BDxytDTaD1UEmE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 11:53:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31 (0x1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58AE52C1F36BFAF852F410F1CAD0D3683D541261
        Validity
            Not Before: Aug  1 01:29:30 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=C4AAD1C2E3F1AA7D8012791F7ACC439759645614
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:56:c5:a6:cb:69:2f:64:0c:55:e0:9f:97:31:
                    22:f3:7a:79:96:bd:9a:4c:9b:1d:8e:b8:46:10:c2:
                    ae:f6:4b:8d:97:e3:f0:50:90:73:3a:e0:97:41:e0:
                    f4:14:46:ac:7d:64:38:0b:70:0a:1f:1f:e4:68:2c:
                    5b:1b:a6:d4:e2:aa:d8:bd:f8:35:43:9f:d0:e8:9d:
                    72:1b:60:5f:af:b2:54:e1:8d:5f:76:4e:9f:22:10:
                    0a:30:1b:7b:73:df:9e:c7:0d:66:7e:57:88:2a:60:
                    0b:f8:d6:bb:9f:a7:42:44:98:a0:cf:d3:2a:4d:ff:
                    53:5a:d1:be:e6:1f:1c:7a:65:28:a0:0c:1b:7e:b5:
                    cf:55:ac:0b:6d:78:03:4c:67:a4:31:0a:a6:98:f7:
                    91:d8:16:e4:cd:59:88:40:b7:7c:ca:38:b4:03:28:
                    30:34:ad:3a:40:96:4c:b7:3b:31:eb:8a:af:4d:74:
                    6c:3f:71:80:3d:7b:d4:4c:b4:ac:b3:35:46:7e:a2:
                    86:29:72:64:aa:a4:31:99:76:00:87:f3:c3:15:5b:
                    53:7a:fc:d5:8e:9c:dc:c1:e5:ed:04:c0:a0:d1:be:
                    5a:c3:81:80:61:9d:a3:9d:ab:de:fa:b5:c7:38:a7:
                    d4:f9:cc:7f:b3:e5:05:9c:96:c1:fd:be:8d:3c:8d:
                    02:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:AA:D1:C2:E3:F1:AA:7D:80:12:79:1F:7A:CC:43:97:59:64:56:14
            X509v3 Authority Key Identifier:
                keyid:58:AE:52:C1:F3:6B:FA:F8:52:F4:10:F1:CA:D0:D3:68:3D:54:12:61

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/WK5SwfNr-vhS9BDxytDTaD1UEmE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WK5SwfNr-vhS9BDxytDTaD1UEmE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/xKrRwuPxqn2AEnkfesxDl1lkVhQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:c30:40::/48

    Signature Algorithm: sha256WithRSAEncryption
         1d:a5:79:59:76:86:49:74:b6:90:8d:48:ef:60:e7:ee:30:b5:
         c5:60:3d:81:5e:4e:fe:44:16:53:54:e7:83:4b:0c:6b:45:dd:
         28:22:42:7e:cf:03:d8:31:9b:d2:0e:9b:3c:65:48:cb:50:65:
         79:89:63:a6:7c:4e:10:0c:ec:df:8f:64:7e:e6:e9:83:2f:81:
         2d:8e:b0:0e:be:b8:59:66:b7:6b:f7:ce:8f:41:9f:dd:cc:fd:
         c3:87:5f:5a:e5:4a:e0:f2:a0:c6:8a:e5:fe:38:6c:29:14:af:
         49:f9:b4:ba:3c:bc:5c:77:31:f1:6f:f8:17:a5:8e:cb:bf:9e:
         29:6f:a8:11:88:92:f0:4d:f1:20:b0:af:58:93:b2:ef:7f:89:
         96:0c:f2:2d:dd:a6:9b:68:21:08:ba:3a:09:e4:1b:24:c2:78:
         a2:3e:d6:3c:6f:76:91:cb:cb:6d:3d:91:e7:6e:c2:eb:77:8b:
         7d:0f:b4:17:cb:04:e9:da:d3:fd:94:36:cd:cb:2a:dc:7e:90:
         a2:43:ee:34:3f:d7:f2:02:54:78:71:f4:6b:48:65:73:68:3c:
         5a:3f:0d:be:b5:49:97:4c:01:01:20:a8:65:22:6e:58:7c:03:
         da:c2:81:3e:25:0c:a0:31:52:4a:5e:35:60:88:8f:a3:09:61:
         04:9b:e7:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 12:57:18 2024 by rpki-client on console-fra.rpki-client.org