Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30080/gQaDO2YqCEQsAvxhuPbWOPwoYyA.roa
File:                     gQaDO2YqCEQsAvxhuPbWOPwoYyA.roa (raw, json)
Hash identifier:          M8V3j3Nuowyg62QdGTqDztfPcy2Jk/+un97CAc8JpOs=
Subject key identifier:   81:06:83:3B:66:2A:08:44:2C:02:FC:61:B8:F6:D6:38:FC:28:63:20
Certificate issuer:       /CN=82B5396882AE787524B1D26734661DFCB9F25600
Certificate serial:       02
Authority key identifier: 82:B5:39:68:82:AE:78:75:24:B1:D2:67:34:66:1D:FC:B9:F2:56:00
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/grU5aIKueHUksdJnNGYd_LnyVgA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30080/gQaDO2YqCEQsAvxhuPbWOPwoYyA.roa
Signing time:             Wed 17 Apr 2024 09:14:15 +0000
ROA not before:           Wed 17 Apr 2024 09:14:15 +0000
ROA not after:            Thu 17 Apr 2025 06:41:42 +0000
asID:                     17955
IP address blocks:        2406:8000::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30080/grU5aIKueHUksdJnNGYd_LnyVgA.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30080/grU5aIKueHUksdJnNGYd_LnyVgA.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/grU5aIKueHUksdJnNGYd_LnyVgA.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82B5396882AE787524B1D26734661DFCB9F25600
        Validity
            Not Before: Apr 17 09:14:15 2024 GMT
            Not After : Apr 17 06:41:42 2025 GMT
        Subject: CN=8106833B662A08442C02FC61B8F6D638FC286320
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d3:b3:12:7a:97:85:62:6a:38:96:75:98:f0:
                    e9:f1:63:6e:5f:a9:84:59:cf:c7:16:b7:56:ba:78:
                    d7:e7:82:5b:57:1d:aa:4c:07:4b:6b:25:85:43:84:
                    55:18:3c:2d:2e:d9:1b:45:88:71:7a:9a:5f:a8:f5:
                    d9:e5:58:a7:76:3a:15:2b:4a:04:ac:48:9e:1b:f6:
                    49:ef:ac:f7:27:a9:4a:a4:31:bc:2f:d5:b2:7c:f2:
                    b7:3e:61:c8:8d:f8:2f:db:ba:8d:07:33:b4:4e:e2:
                    96:93:79:96:d0:5a:74:af:e0:c3:ca:6f:9e:4c:b1:
                    6a:79:74:e8:56:a8:ca:e4:28:23:48:66:00:f8:74:
                    7d:91:06:26:4c:d7:3c:70:64:25:00:7d:03:85:4c:
                    42:f9:a3:47:dc:01:d8:60:47:3c:6b:cd:fa:ba:08:
                    b8:3d:93:3a:bc:59:a9:f6:a5:4b:ff:9f:27:27:07:
                    74:4d:7b:db:2d:74:ad:e6:2f:a0:bc:96:34:83:13:
                    2b:39:12:0f:74:71:68:9c:ee:5e:b5:98:b6:ef:3f:
                    a2:05:b1:e5:0e:d9:b3:ab:5b:93:dc:6f:2f:ce:f3:
                    94:84:a9:90:90:a4:30:2a:b4:d1:f2:38:89:97:38:
                    63:32:a8:8b:6b:ac:0a:37:52:c9:ae:db:f4:d8:be:
                    b8:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:06:83:3B:66:2A:08:44:2C:02:FC:61:B8:F6:D6:38:FC:28:63:20
            X509v3 Authority Key Identifier:
                keyid:82:B5:39:68:82:AE:78:75:24:B1:D2:67:34:66:1D:FC:B9:F2:56:00

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30080/grU5aIKueHUksdJnNGYd_LnyVgA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/grU5aIKueHUksdJnNGYd_LnyVgA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30080/gQaDO2YqCEQsAvxhuPbWOPwoYyA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:8000::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:67:ab:6c:d1:db:a4:04:28:e3:2b:4b:bb:ef:51:3d:0a:20:
         dc:f0:77:64:13:c6:fa:f7:06:2f:54:98:75:57:96:91:b0:30:
         7a:41:55:40:d2:54:bd:28:d4:b7:6e:87:d3:8f:13:61:25:05:
         83:02:7a:ce:92:01:e2:53:c8:db:5f:2b:a8:70:5d:91:d3:9a:
         84:c4:1f:92:1a:15:0d:57:cd:32:2f:59:3f:86:1a:25:b6:cb:
         bd:5e:26:2d:03:10:43:71:86:e6:d0:5c:0f:2e:db:ea:e1:c7:
         28:07:0e:0c:69:0c:e9:43:1b:87:6e:9c:f3:35:7a:07:20:27:
         d9:66:b9:54:af:32:6e:7d:0f:00:80:ba:b3:05:ea:69:e6:68:
         bc:5a:eb:c5:5b:56:40:7d:a2:e2:55:59:6e:30:2d:c1:6c:17:
         af:54:0a:9b:fa:4d:8e:15:3b:37:bf:b2:bd:71:99:38:6f:60:
         ca:8f:c1:18:9d:2f:cc:ed:83:c2:46:b9:f6:fc:87:f7:f3:ce:
         34:82:fa:9f:2c:7f:80:4b:49:c6:98:a7:1c:b7:cf:79:ea:0e:
         de:a4:ed:aa:18:57:63:70:dc:81:90:d1:03:e4:42:42:35:c7:
         14:a0:c1:96:27:e3:8e:92:48:15:bf:16:2d:39:96:ed:42:aa:
         f5:9e:1e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:06 2024 by rpki-client on console-fra.rpki-client.org