Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30112/50mSPl7XfJ2lU3Vd_oSc1BSqsNE.roa
File:                     50mSPl7XfJ2lU3Vd_oSc1BSqsNE.roa (raw, json)
Hash identifier:          IxBBh4mU1TdwQkNo7u7P88SsxzH7mDtO3Jbzcvbi5DA=
Subject key identifier:   E7:49:92:3E:5E:D7:7C:9D:A5:53:75:5D:FE:84:9C:D4:14:AA:B0:D1
Certificate issuer:       /CN=E2A01C15F2AE10FFE1A2DFB939FBA32222C81E8B
Certificate serial:       02
Authority key identifier: E2:A0:1C:15:F2:AE:10:FF:E1:A2:DF:B9:39:FB:A3:22:22:C8:1E:8B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4qAcFfKuEP_hot-5OfujIiLIHos.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30112/50mSPl7XfJ2lU3Vd_oSc1BSqsNE.roa
Signing time:             Fri 12 Apr 2024 06:36:03 +0000
ROA not before:           Fri 12 Apr 2024 06:36:03 +0000
ROA not after:            Sat 12 Apr 2025 06:27:43 +0000
asID:                     18129
IP address blocks:        2407:d800::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30112/4qAcFfKuEP_hot-5OfujIiLIHos.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30112/4qAcFfKuEP_hot-5OfujIiLIHos.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4qAcFfKuEP_hot-5OfujIiLIHos.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2A01C15F2AE10FFE1A2DFB939FBA32222C81E8B
        Validity
            Not Before: Apr 12 06:36:03 2024 GMT
            Not After : Apr 12 06:27:43 2025 GMT
        Subject: CN=E749923E5ED77C9DA553755DFE849CD414AAB0D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:97:7b:04:42:46:8b:78:18:bf:ad:56:52:66:
                    7e:d3:15:46:78:1c:30:9d:d8:e0:97:51:2a:cf:2e:
                    30:de:a5:08:59:d4:21:14:9e:73:9a:5a:2c:db:bb:
                    c8:dc:60:72:13:f3:58:64:a9:ab:ee:2d:20:2e:f5:
                    7d:9c:73:d7:38:74:82:13:a7:87:1b:72:8e:57:03:
                    dd:d8:73:5e:fb:8e:a9:37:03:f1:53:10:6d:c2:f7:
                    11:e5:c8:9e:b9:7d:de:93:9f:89:da:7b:b0:3f:61:
                    40:61:c3:58:4c:82:67:f2:5a:a0:e3:43:d3:bf:b6:
                    b9:1c:d3:1a:c0:cc:c7:0f:cb:9f:a1:42:fd:e0:f7:
                    9e:b3:2b:d3:06:0e:bb:dc:22:df:db:42:3c:a3:9d:
                    d7:55:52:6d:68:82:d2:e5:13:17:bf:60:35:22:a2:
                    1d:e2:e6:e2:55:75:e7:fd:48:ba:82:29:d2:01:b2:
                    c1:00:80:02:df:f3:39:e6:a5:8c:54:10:17:8f:b5:
                    93:85:e4:8c:87:23:bd:fc:15:ad:48:a2:ed:d1:06:
                    ba:ae:bc:7a:9f:a6:eb:55:b9:4e:73:4a:49:9e:d5:
                    ae:7b:99:80:a4:77:d2:4a:21:05:9f:46:74:61:12:
                    8a:7c:9d:63:cf:cd:a3:16:ed:2a:87:fa:b4:9a:95:
                    f0:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:49:92:3E:5E:D7:7C:9D:A5:53:75:5D:FE:84:9C:D4:14:AA:B0:D1
            X509v3 Authority Key Identifier:
                keyid:E2:A0:1C:15:F2:AE:10:FF:E1:A2:DF:B9:39:FB:A3:22:22:C8:1E:8B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30112/4qAcFfKuEP_hot-5OfujIiLIHos.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4qAcFfKuEP_hot-5OfujIiLIHos.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30112/50mSPl7XfJ2lU3Vd_oSc1BSqsNE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:d800::/32

    Signature Algorithm: sha256WithRSAEncryption
         56:f0:c2:1d:f0:61:6e:bb:a9:66:65:ce:e7:a5:56:91:8b:db:
         57:48:90:a3:fb:fe:43:7c:d2:33:d1:56:f8:c2:72:cc:5a:6b:
         ea:63:18:10:db:d1:d3:ad:62:47:6c:12:d1:2d:f8:28:92:70:
         f3:c1:3e:0e:7e:bd:f4:49:36:50:7e:f3:11:11:6f:32:98:81:
         6f:bc:e5:9c:dc:38:09:94:9d:a7:38:10:04:d9:b2:a8:32:a7:
         54:1d:2d:5b:4c:41:a2:e1:26:c0:5b:2f:11:29:83:72:a4:a7:
         a8:05:62:e5:7e:04:ef:a5:0c:3c:33:e7:e5:4e:7d:96:38:64:
         57:09:11:69:82:ed:1a:b5:4d:9a:d2:8a:f9:de:61:67:2d:e8:
         86:35:5e:64:0d:d7:e5:3f:9b:b2:e2:71:b6:e7:4f:1e:5c:3a:
         41:5b:f2:c4:e7:4f:ae:27:3e:58:32:00:a9:5f:11:99:2f:fd:
         2d:fd:1c:3b:09:f1:e6:14:61:d6:0a:89:ec:a7:40:2a:bf:be:
         05:86:5b:42:b2:7a:72:59:53:65:cd:51:57:71:23:cd:7d:3f:
         4a:a7:62:38:cd:45:2d:78:2a:80:dd:be:df:69:59:ec:0a:6b:
         db:f4:29:65:5f:e5:bc:32:94:84:f0:e0:ab:ef:17:1b:84:66:
         dd:a6:55:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 14:56:15 2024 by rpki-client on console-fra.rpki-client.org