Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30085/6tx6GVPeY3i2kxydHb9RKzsFxD0.roa
File:                     6tx6GVPeY3i2kxydHb9RKzsFxD0.roa (raw, json)
Hash identifier:          8InLVB7vQhX3PORRG+hwlLKbL80DZGp4ZhTl9k06Oww=
Subject key identifier:   EA:DC:7A:19:53:DE:63:78:B6:93:1C:9D:1D:BF:51:2B:3B:05:C4:3D
Certificate issuer:       /CN=530521A5F78F3809A4C4F34CB32D0A694D871544
Certificate serial:       08
Authority key identifier: 53:05:21:A5:F7:8F:38:09:A4:C4:F3:4C:B3:2D:0A:69:4D:87:15:44
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UwUhpfePOAmkxPNMsy0KaU2HFUQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30085/6tx6GVPeY3i2kxydHb9RKzsFxD0.roa
Signing time:             Tue 11 Jun 2024 15:21:58 +0000
ROA not before:           Tue 11 Jun 2024 15:21:58 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     9354
IP address blocks:        2405:7000::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30085/UwUhpfePOAmkxPNMsy0KaU2HFUQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30085/UwUhpfePOAmkxPNMsy0KaU2HFUQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UwUhpfePOAmkxPNMsy0KaU2HFUQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Oct 2024 13:33:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=530521A5F78F3809A4C4F34CB32D0A694D871544
        Validity
            Not Before: Jun 11 15:21:58 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=EADC7A1953DE6378B6931C9D1DBF512B3B05C43D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:33:75:04:45:4b:c1:b2:9b:ba:bd:f2:00:ec:
                    e7:65:b9:b6:20:16:3a:cf:c0:6c:8c:43:73:6f:42:
                    97:7b:f7:6d:f8:46:b1:3b:3f:86:2d:ee:b6:c2:18:
                    fc:d9:af:f0:f1:2c:6e:18:27:3d:b6:32:0a:95:bb:
                    7e:96:32:5f:b5:9c:37:53:0a:4e:9d:8d:b5:4e:db:
                    bd:97:41:5a:8b:f3:d7:6c:d1:2d:24:51:cc:23:36:
                    3a:35:22:b2:1e:a3:6e:49:eb:a0:18:0c:d6:38:ee:
                    88:99:92:ff:76:80:5f:0d:40:2b:e4:b4:a2:be:ab:
                    f6:f3:05:6e:cb:b6:59:74:b7:45:05:5c:d5:9c:61:
                    c5:b7:c8:b7:ec:1f:8d:c1:02:fb:da:c6:81:81:51:
                    74:ee:1a:54:70:74:4b:6e:f6:51:90:71:71:60:18:
                    f8:7f:e7:7f:5d:9a:63:2f:7a:e3:f9:2c:0e:fc:fa:
                    c5:a7:e7:74:35:b7:c4:35:90:df:15:fa:d3:09:58:
                    b8:54:6b:65:a6:50:bf:0b:44:36:e6:91:35:2c:35:
                    83:c9:82:f3:91:e0:4b:66:b9:ca:93:17:e7:92:24:
                    08:2f:59:a3:43:92:3b:7b:9b:c6:d2:c1:bc:69:21:
                    f8:b8:25:0b:b4:8e:94:04:63:31:90:c4:d8:5b:72:
                    8d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:DC:7A:19:53:DE:63:78:B6:93:1C:9D:1D:BF:51:2B:3B:05:C4:3D
            X509v3 Authority Key Identifier:
                keyid:53:05:21:A5:F7:8F:38:09:A4:C4:F3:4C:B3:2D:0A:69:4D:87:15:44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30085/UwUhpfePOAmkxPNMsy0KaU2HFUQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UwUhpfePOAmkxPNMsy0KaU2HFUQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30085/6tx6GVPeY3i2kxydHb9RKzsFxD0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:7000::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:0d:e8:6f:b4:b6:e5:6f:be:d4:3d:59:4f:20:f7:1a:f2:b0:
         13:4f:ca:f9:06:dc:76:33:c0:bc:ef:c4:5c:04:83:32:6c:c2:
         61:02:45:63:7f:d9:e3:81:fe:9e:5c:e4:b2:80:f1:12:df:72:
         9d:06:ea:4f:7f:d3:bd:69:50:ef:c2:dc:10:0a:dd:04:70:41:
         f3:c9:a1:2a:7c:a5:81:36:52:18:a6:89:9a:d3:71:3e:fd:20:
         57:4d:de:1d:16:0c:f6:02:87:b5:32:ad:03:12:a3:4f:5f:19:
         28:2b:18:87:a1:3b:e3:a6:8c:e2:6d:1d:80:a7:56:92:b7:cf:
         e9:c6:60:f2:32:e8:5d:fe:dc:25:93:db:07:d0:d4:f6:cc:1a:
         9c:aa:c7:26:68:8c:7b:e1:f4:a1:28:84:fb:48:f1:32:02:cd:
         8f:9c:94:16:e8:c3:29:eb:a8:d8:17:7b:0f:69:73:08:a0:a5:
         59:e1:3f:6c:6a:06:b9:3f:4d:c4:b5:0b:dc:08:05:f1:68:e4:
         1c:44:64:20:05:80:7d:40:2d:77:98:20:b0:e0:9d:7d:d4:b5:
         06:e7:86:d4:6c:cb:f4:25:80:cf:56:3e:bd:88:ac:5e:c2:09:
         e0:94:49:20:76:34:c4:f5:a9:0b:87:3d:99:88:28:41:92:13:
         cb:d2:c9:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 05:00:15 2024 by rpki-client on console-fra.rpki-client.org