Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30100/B6V6nfL3-Zis68fAMDlHKWzsxcs.roa
File:                     B6V6nfL3-Zis68fAMDlHKWzsxcs.roa (raw, json)
Hash identifier:          L5n4/pqmmTqaceGCWJA2KQtzSwzEehjPzGaj+dV9Wcc=
Subject key identifier:   07:A5:7A:9D:F2:F7:F9:98:AC:EB:C7:C0:30:39:47:29:6C:EC:C5:CB
Certificate issuer:       /CN=F04B78F0C21283217E0A9140D4678D974B3CE6BE
Certificate serial:       19
Authority key identifier: F0:4B:78:F0:C2:12:83:21:7E:0A:91:40:D4:67:8D:97:4B:3C:E6:BE
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/8Et48MISgyF-CpFA1GeNl0s85r4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30100/B6V6nfL3-Zis68fAMDlHKWzsxcs.roa
Signing time:             Wed 05 Jun 2024 01:14:52 +0000
ROA not before:           Wed 05 Jun 2024 01:14:52 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     24257
IP address blocks:        2400:3000:71::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30100/8Et48MISgyF-CpFA1GeNl0s85r4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30100/8Et48MISgyF-CpFA1GeNl0s85r4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/8Et48MISgyF-CpFA1GeNl0s85r4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Jul 2024 00:37:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25 (0x19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F04B78F0C21283217E0A9140D4678D974B3CE6BE
        Validity
            Not Before: Jun  5 01:14:52 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=07A57A9DF2F7F998ACEBC7C0303947296CECC5CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:05:c0:b6:7d:25:01:6f:67:62:4f:eb:39:cf:
                    3c:ab:ab:95:cb:de:47:67:ee:73:51:1f:89:cb:1a:
                    ac:01:5a:c6:e7:01:6a:c9:2e:c4:dd:fa:a8:89:fd:
                    a6:c1:59:a5:77:2a:f8:c2:d9:00:81:2e:67:42:29:
                    b1:cf:d7:1a:32:c0:0c:30:64:3a:ea:00:e7:d8:ea:
                    12:9f:65:5d:b6:b9:6a:9a:68:25:a3:fc:66:71:06:
                    83:ff:ae:56:47:89:c9:59:9d:b3:be:cc:b9:f2:f8:
                    2d:96:13:55:3a:6a:96:c9:3b:ae:81:cf:d9:bc:2d:
                    70:3e:ba:50:5f:a1:3a:a7:e3:6c:1e:1d:fe:75:11:
                    2b:ee:2c:c4:fe:df:d6:2e:e2:86:b0:04:f3:82:5b:
                    29:91:7a:ea:33:22:81:77:e3:21:76:02:e8:ed:25:
                    8c:8d:65:b3:0b:6f:a9:ba:f8:56:b4:8d:3a:50:40:
                    ff:96:40:f6:c9:33:78:f1:93:5d:9e:2e:5f:fb:ba:
                    6e:3c:c0:60:dd:9d:c7:a9:f5:46:e1:2c:e9:05:9a:
                    33:f7:bb:67:27:7d:05:24:a2:30:f7:de:db:f5:1e:
                    f2:6e:cb:35:96:21:29:f1:86:d6:7d:56:53:61:09:
                    79:2d:9a:c8:51:32:e9:28:ba:14:6b:62:18:c3:ed:
                    c0:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:A5:7A:9D:F2:F7:F9:98:AC:EB:C7:C0:30:39:47:29:6C:EC:C5:CB
            X509v3 Authority Key Identifier:
                keyid:F0:4B:78:F0:C2:12:83:21:7E:0A:91:40:D4:67:8D:97:4B:3C:E6:BE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30100/8Et48MISgyF-CpFA1GeNl0s85r4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/8Et48MISgyF-CpFA1GeNl0s85r4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30100/B6V6nfL3-Zis68fAMDlHKWzsxcs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:3000:71::/48

    Signature Algorithm: sha256WithRSAEncryption
         77:4e:c1:a7:ea:2c:34:a0:07:0f:d1:b3:0d:f7:26:fb:31:ff:
         a5:0b:28:01:63:93:7a:70:9e:c8:91:95:03:99:ac:c7:6e:03:
         2a:fd:43:96:fe:11:de:f2:12:56:da:98:1f:60:d5:f8:de:fb:
         8a:e4:ad:82:49:49:e2:28:97:8b:51:02:4a:33:e6:42:f1:bf:
         6b:fe:6f:ef:49:6b:57:53:5f:40:de:0e:96:b6:e4:37:24:88:
         77:fa:9e:ae:c6:e2:65:41:8e:b5:27:b0:53:ce:ed:88:cb:fd:
         c8:72:84:79:fb:06:81:2d:41:07:af:e5:4a:0c:02:c7:15:36:
         c7:05:cf:c1:ba:95:ac:95:16:67:8a:38:52:73:94:6b:a6:04:
         dd:0f:6f:7f:ef:77:41:07:2a:c9:35:68:90:57:10:83:a9:ae:
         fd:3e:2a:9d:e7:32:33:e1:8a:a8:66:0a:08:a9:fe:eb:fb:5c:
         ed:5c:ce:e2:ab:e1:0d:15:f1:b6:4d:66:c2:a9:20:e2:d4:dd:
         aa:c6:4e:33:cd:90:d8:47:4b:ac:81:40:2b:43:14:04:d8:cc:
         be:23:9a:65:28:7d:f1:c0:cd:86:77:6f:92:20:6f:8d:a1:4a:
         fb:32:ec:77:0e:c4:fa:0a:29:1c:da:73:e5:53:f3:37:55:bf:
         3d:fa:c8:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 27 03:27:58 2024 by rpki-client on console-ams.rpki-client.org