Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30133/JnKM7swyYfvc4Oj5Pf-djanJdGE.roa
File:                     JnKM7swyYfvc4Oj5Pf-djanJdGE.roa (raw, json)
Hash identifier:          Y2yQaLDDy2sHNFO5iEFrjXz12XmkXaqpXaAUIamlZZM=
Subject key identifier:   26:72:8C:EE:CC:32:61:FB:DC:E0:E8:F9:3D:FF:9D:8D:A9:C9:74:61
Certificate issuer:       /CN=449576347095068F96466BF3A8EFA983E3277116
Certificate serial:       1F
Authority key identifier: 44:95:76:34:70:95:06:8F:96:46:6B:F3:A8:EF:A9:83:E3:27:71:16
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/RJV2NHCVBo-WRmvzqO-pg-MncRY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30133/JnKM7swyYfvc4Oj5Pf-djanJdGE.roa
Signing time:             Thu 29 Feb 2024 01:34:15 +0000
ROA not before:           Thu 29 Feb 2024 01:34:15 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     131934
IP address blocks:        2401:3600::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30133/RJV2NHCVBo-WRmvzqO-pg-MncRY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30133/RJV2NHCVBo-WRmvzqO-pg-MncRY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/RJV2NHCVBo-WRmvzqO-pg-MncRY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 16 Jun 2024 13:43:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31 (0x1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=449576347095068F96466BF3A8EFA983E3277116
        Validity
            Not Before: Feb 29 01:34:15 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=26728CEECC3261FBDCE0E8F93DFF9D8DA9C97461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:41:ac:6b:db:a6:c6:bd:ab:b1:00:0e:0c:97:
                    f6:fc:58:8c:e8:e0:b9:59:53:4f:b2:cb:e4:9e:d7:
                    be:ff:9a:f0:1b:2e:86:c1:ac:86:d7:53:c1:c7:72:
                    c4:6a:b4:49:24:0d:95:fb:bd:8a:73:28:4f:4f:41:
                    18:46:7b:08:40:1e:a5:16:eb:f3:4b:7a:74:07:9a:
                    4e:74:d0:7d:e4:e6:b0:22:d8:75:19:24:6c:36:a5:
                    6b:b4:c2:28:88:63:29:85:d5:a4:19:25:fb:ba:33:
                    40:5b:51:5d:ed:78:d3:ec:00:69:5e:12:d0:41:da:
                    88:5e:4c:25:b9:d6:8f:b4:45:b7:de:ce:45:17:91:
                    fd:fc:ad:62:da:0c:ca:fd:b6:d1:db:1c:cb:63:b4:
                    d6:d1:9c:df:72:79:1d:d4:7c:3b:d7:66:c5:05:a5:
                    d5:cd:cf:b6:c6:93:c0:cf:90:02:82:f3:e4:59:cd:
                    74:3b:9c:40:f9:60:9c:a1:1c:92:20:cb:f5:e9:d5:
                    01:93:6f:46:92:31:a7:40:6c:10:92:ac:3c:37:03:
                    9f:ae:02:45:1d:91:8c:20:a5:b4:21:16:1d:15:d5:
                    40:ad:87:b9:44:18:52:97:71:31:67:f7:26:b7:2f:
                    25:18:e7:53:a3:e0:f7:fe:a5:d5:78:11:69:6f:97:
                    06:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:72:8C:EE:CC:32:61:FB:DC:E0:E8:F9:3D:FF:9D:8D:A9:C9:74:61
            X509v3 Authority Key Identifier:
                keyid:44:95:76:34:70:95:06:8F:96:46:6B:F3:A8:EF:A9:83:E3:27:71:16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30133/RJV2NHCVBo-WRmvzqO-pg-MncRY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/RJV2NHCVBo-WRmvzqO-pg-MncRY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30133/JnKM7swyYfvc4Oj5Pf-djanJdGE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:3600::/32

    Signature Algorithm: sha256WithRSAEncryption
         c1:01:41:20:d0:35:5b:1c:96:aa:c2:54:84:b1:54:52:73:22:
         8d:65:ce:3a:93:47:4f:2d:19:f9:c3:a7:63:52:68:fa:88:5e:
         60:77:a2:ae:f5:81:e4:56:91:c7:9d:ec:59:e7:ae:f5:ca:46:
         98:db:4f:50:18:22:3a:3c:0b:98:e6:d8:67:73:43:07:8a:ed:
         19:18:ff:38:9f:fa:4c:c5:73:0c:bb:86:19:37:9c:83:ca:1b:
         82:6a:2e:9f:28:59:d3:21:b4:b7:7f:2d:9c:de:bf:f5:74:bc:
         77:3d:13:fc:10:29:32:d8:dd:0c:a2:f5:d4:a4:21:64:c5:3f:
         35:73:0e:2c:b2:17:1d:cf:ad:ba:88:58:4d:6a:20:d6:e3:0e:
         e6:24:bd:97:ba:cf:2c:ba:fd:bc:6f:57:2b:53:10:b9:8d:49:
         ae:7d:3f:2f:30:0f:91:28:21:25:0b:2f:e6:d8:be:e4:9e:f6:
         77:e1:fc:b7:7f:bc:b3:66:66:f6:d0:74:7f:67:10:40:36:fd:
         0d:85:b1:c9:d4:aa:34:f2:d8:09:f7:29:4c:34:8f:e5:18:66:
         6f:25:2b:af:19:86:f8:a5:4f:7f:2f:42:7c:b5:3d:1a:46:32:
         0d:0a:9c:cc:da:aa:d7:96:44:2f:d7:13:5e:94:64:22:d7:d6:
         48:1e:c0:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 14:58:57 2024 by rpki-client on console-fra.rpki-client.org