Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30091/WfgtICq0In_WCvudQkbzCOps4Tk.roa
File:                     WfgtICq0In_WCvudQkbzCOps4Tk.roa (raw, json)
Hash identifier:          2FsDK+jECvnGmqzWcbrfnvX9a7iYS/ua+K9TB+QmueU=
Subject key identifier:   59:F8:2D:20:2A:B4:22:7F:D6:0A:FB:9D:42:46:F3:08:EA:6C:E1:39
Certificate issuer:       /CN=89801DBDBE168863AB0E802F0EC90A3525C2347C
Certificate serial:       50
Authority key identifier: 89:80:1D:BD:BE:16:88:63:AB:0E:80:2F:0E:C9:0A:35:25:C2:34:7C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iYAdvb4WiGOrDoAvDskKNSXCNHw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/WfgtICq0In_WCvudQkbzCOps4Tk.roa
Signing time:             Mon 30 Sep 2024 01:29:28 +0000
ROA not before:           Mon 30 Sep 2024 01:29:28 +0000
ROA not after:            Mon 15 Sep 2025 01:30:03 +0000
asID:                     37900
IP address blocks:        2402:c800:fff0::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/iYAdvb4WiGOrDoAvDskKNSXCNHw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/iYAdvb4WiGOrDoAvDskKNSXCNHw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iYAdvb4WiGOrDoAvDskKNSXCNHw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80 (0x50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89801DBDBE168863AB0E802F0EC90A3525C2347C
        Validity
            Not Before: Sep 30 01:29:28 2024 GMT
            Not After : Sep 15 01:30:03 2025 GMT
        Subject: CN=59F82D202AB4227FD60AFB9D4246F308EA6CE139
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e4:27:e3:e5:27:75:03:5d:68:91:19:2d:3d:
                    69:8b:03:c6:61:b1:fd:2e:77:82:f2:a9:86:cf:7e:
                    8c:f5:3f:11:0d:42:bb:d4:30:4a:d2:ac:90:35:9f:
                    36:90:86:af:96:92:3b:97:25:b6:b4:4b:69:41:7d:
                    d0:ad:8e:b8:e5:4d:56:ca:13:11:b0:0e:86:ed:cc:
                    5f:73:f1:27:6c:ec:3b:e7:5a:ba:52:97:43:fd:ed:
                    b2:c5:b6:3c:1d:33:06:c4:ca:4e:ef:f1:b9:d2:e8:
                    b4:33:b9:3b:3e:93:02:95:08:d7:8a:6b:17:55:42:
                    b1:f9:d6:42:11:5a:59:0a:a6:02:66:14:63:4c:20:
                    cc:6f:fb:ca:e2:34:95:13:ba:66:e4:c1:c6:4e:2c:
                    63:c6:ca:b1:80:11:1e:21:af:66:c4:6b:34:9b:79:
                    2f:53:0d:7c:cc:cc:3f:20:4c:95:c7:9f:b4:0a:ed:
                    77:b4:8c:e4:a2:73:b7:57:ab:53:79:2b:15:e4:c6:
                    35:16:6e:2a:8f:6a:fc:e5:63:a7:13:8f:20:fb:e0:
                    c8:a6:78:bd:db:86:0a:a0:25:54:7f:75:2a:99:81:
                    23:a0:30:33:10:3a:f3:06:46:2b:ed:6a:b5:69:4a:
                    8c:eb:90:29:1d:4c:f1:1a:3d:2e:44:76:af:02:27:
                    2e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:F8:2D:20:2A:B4:22:7F:D6:0A:FB:9D:42:46:F3:08:EA:6C:E1:39
            X509v3 Authority Key Identifier:
                keyid:89:80:1D:BD:BE:16:88:63:AB:0E:80:2F:0E:C9:0A:35:25:C2:34:7C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/iYAdvb4WiGOrDoAvDskKNSXCNHw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iYAdvb4WiGOrDoAvDskKNSXCNHw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/WfgtICq0In_WCvudQkbzCOps4Tk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:c800:fff0::/44

    Signature Algorithm: sha256WithRSAEncryption
         24:9b:35:23:99:ef:10:20:e1:0c:d1:91:4e:29:d3:79:c5:3c:
         de:6a:e5:b0:d1:06:0a:35:62:0c:80:5e:dc:c9:12:22:f6:88:
         90:59:79:63:05:51:c0:ef:61:33:4b:b7:d4:05:d0:2f:5e:d6:
         1b:59:6c:f4:a1:ec:21:3d:47:b1:5b:d1:c4:5d:4f:ce:43:a2:
         b7:8b:83:24:0a:ae:c4:c1:ef:8e:d2:ed:8f:54:79:1d:35:2b:
         5e:9c:1f:5c:7d:87:89:df:5c:67:e0:12:c3:06:98:e9:d5:f3:
         d0:92:7c:7b:5b:f0:1d:29:94:dd:0b:dd:da:35:8f:14:69:4e:
         9d:8e:dc:68:12:1a:64:61:79:2f:5c:7e:6a:64:d8:f5:f1:07:
         4d:66:45:f8:38:8e:7f:3b:59:f5:bd:a9:1e:f4:83:1c:84:04:
         fe:fd:56:d1:e0:35:c1:9c:be:8c:9a:85:26:98:81:23:32:d4:
         08:4a:a9:a8:de:9e:48:e0:30:6b:b4:00:05:d6:53:60:4f:fa:
         75:50:84:31:95:d9:da:eb:8a:14:9e:3e:21:b8:af:d7:b3:ae:
         cb:3c:8e:cd:cd:ff:a5:08:14:b9:90:23:14:61:fd:50:79:51:
         cf:1e:2e:1b:83:ed:08:3a:b0:e6:06:f8:20:18:5e:b0:3d:da:
         97:be:87:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:06 2024 by rpki-client on console-fra.rpki-client.org