Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30102/KPOZQYAXqSREpwNqxPxuiqYmy78.roa
File:                     KPOZQYAXqSREpwNqxPxuiqYmy78.roa (raw, json)
Hash identifier:          yd2iE2Th2+jEEHEUHqlHNRCRvWuzQb7V++eMOjm1X4M=
Subject key identifier:   28:F3:99:41:80:17:A9:24:44:A7:03:6A:C4:FC:6E:8A:A6:26:CB:BF
Certificate issuer:       /CN=39CE09592C9DA61CC03C3D324A7C6CAC4777CCCF
Certificate serial:       1D
Authority key identifier: 39:CE:09:59:2C:9D:A6:1C:C0:3C:3D:32:4A:7C:6C:AC:47:77:CC:CF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Oc4JWSydphzAPD0ySnxsrEd3zM8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30102/KPOZQYAXqSREpwNqxPxuiqYmy78.roa
Signing time:             Fri 01 Sep 2023 01:30:38 +0000
ROA not before:           Fri 01 Sep 2023 01:30:38 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     9617
IP address blocks:        2400:3800::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30102/Oc4JWSydphzAPD0ySnxsrEd3zM8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30102/Oc4JWSydphzAPD0ySnxsrEd3zM8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Oc4JWSydphzAPD0ySnxsrEd3zM8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 16 Jun 2024 02:07:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29 (0x1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39CE09592C9DA61CC03C3D324A7C6CAC4777CCCF
        Validity
            Not Before: Sep  1 01:30:38 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=28F399418017A92444A7036AC4FC6E8AA626CBBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:32:c4:fd:ca:93:9d:5a:dd:98:45:37:55:e2:
                    62:3a:e2:52:bd:ab:55:f5:a4:54:8b:fd:d5:d2:fb:
                    65:9c:ef:b1:f0:8c:db:5c:89:eb:15:e2:23:cb:8b:
                    54:ae:04:8d:59:bb:16:7c:ef:90:ee:4b:6c:45:4a:
                    fc:df:9b:e6:cf:ce:cf:c1:24:dd:bc:87:da:b4:17:
                    19:4b:63:a0:89:fa:75:ed:38:78:4d:5e:4f:60:06:
                    a4:3a:86:a4:07:57:1a:8c:4c:47:66:81:2d:38:0b:
                    3b:01:f7:0c:b8:84:4a:2d:dc:74:19:f5:74:bb:a4:
                    c5:5b:60:fd:b6:4f:b4:d3:81:50:9a:c1:a7:ce:ed:
                    14:cc:d0:48:73:de:55:c5:3a:10:e8:24:7d:64:f6:
                    fa:c2:6c:77:85:7b:84:87:06:b5:85:31:20:13:99:
                    9a:f8:05:16:73:5a:70:1c:1f:59:94:7f:d5:ef:4e:
                    17:78:7b:6b:16:0e:91:27:d7:7d:52:51:fe:ef:83:
                    4a:2a:d9:59:30:44:5b:7e:8b:58:62:8e:b2:6c:74:
                    e6:bd:3d:fe:8a:1e:e1:b3:33:83:fc:42:c8:73:0e:
                    82:7a:8d:ae:3e:2b:c0:ca:f2:47:f7:36:ba:e6:16:
                    a5:d2:2b:3f:21:72:84:f8:bc:69:ec:a3:47:23:f0:
                    8e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:F3:99:41:80:17:A9:24:44:A7:03:6A:C4:FC:6E:8A:A6:26:CB:BF
            X509v3 Authority Key Identifier:
                keyid:39:CE:09:59:2C:9D:A6:1C:C0:3C:3D:32:4A:7C:6C:AC:47:77:CC:CF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30102/Oc4JWSydphzAPD0ySnxsrEd3zM8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Oc4JWSydphzAPD0ySnxsrEd3zM8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30102/KPOZQYAXqSREpwNqxPxuiqYmy78.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:3800::/32

    Signature Algorithm: sha256WithRSAEncryption
         94:00:be:31:2e:cd:0a:44:25:8d:c6:76:1a:36:26:03:c8:77:
         c9:46:95:db:80:ed:2e:7e:45:16:7c:94:5e:37:f8:d4:86:f8:
         c7:c2:14:81:3c:8e:62:af:40:54:51:ed:36:df:b9:80:c0:45:
         a1:ef:75:4e:62:4b:34:cf:67:01:9e:f0:47:af:56:71:1f:9a:
         f9:e0:06:ca:09:47:25:80:80:57:dd:98:62:f7:e1:62:8d:ac:
         fb:81:b8:84:6c:b7:ef:32:f7:b3:d5:70:e9:3a:ba:b5:e0:86:
         b2:de:bc:8a:00:d2:37:93:c0:cb:00:77:4d:f3:0c:76:00:c6:
         92:ff:2b:95:5e:39:56:43:f3:3d:bd:3a:1d:0e:8a:9a:3d:3f:
         e6:c7:20:cd:1a:c2:08:50:2c:da:e6:66:d4:10:a8:a7:c4:e8:
         02:69:d8:92:c1:28:7d:43:5d:3b:11:4c:54:44:49:47:da:ad:
         a8:5c:f6:b5:3f:f9:5f:b7:2c:af:a7:1b:50:b8:2f:71:19:20:
         5a:98:c4:c3:ce:8f:88:c0:72:f4:4c:dd:d2:0a:1b:50:de:55:
         98:37:f0:5e:ed:d6:1d:c1:34:68:e8:07:fa:e6:62:7e:b3:e3:
         2d:9a:b6:93:8c:46:f5:74:b0:f9:ad:f0:5a:ae:27:cd:18:25:
         29:cc:b0:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 10:26:09 2024 by rpki-client on console-fra.rpki-client.org