Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30135/RA76_hlsQEgt0RkiwP7eunHXuoc.roa
File:                     RA76_hlsQEgt0RkiwP7eunHXuoc.roa (raw, json)
Hash identifier:          EdJW4LVVduG7gd908olaYLmne8VGhnuNqoo0jvC94wk=
Subject key identifier:   44:0E:FA:FE:19:6C:40:48:2D:D1:19:22:C0:FE:DE:BA:71:D7:BA:87
Certificate issuer:       /CN=D0A952A00DB2154175C20B4C887EFA2F80AC6F05
Certificate serial:       32
Authority key identifier: D0:A9:52:A0:0D:B2:15:41:75:C2:0B:4C:88:7E:FA:2F:80:AC:6F:05
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0KlSoA2yFUF1wgtMiH76L4CsbwU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30135/RA76_hlsQEgt0RkiwP7eunHXuoc.roa
Signing time:             Wed 10 Apr 2024 05:41:59 +0000
ROA not before:           Wed 10 Apr 2024 05:41:59 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     24284
IP address blocks:        2402:4200::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30135/0KlSoA2yFUF1wgtMiH76L4CsbwU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30135/0KlSoA2yFUF1wgtMiH76L4CsbwU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0KlSoA2yFUF1wgtMiH76L4CsbwU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Jun 2024 17:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50 (0x32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0A952A00DB2154175C20B4C887EFA2F80AC6F05
        Validity
            Not Before: Apr 10 05:41:59 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=440EFAFE196C40482DD11922C0FEDEBA71D7BA87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:dc:c9:bb:cd:a4:ee:e8:06:d3:60:a4:bb:e1:
                    b0:98:75:81:cc:ed:79:9a:7d:62:1e:4d:e0:0e:9e:
                    c7:7c:e1:40:19:a0:29:ed:24:48:0e:60:3b:e8:cc:
                    05:28:9e:28:9e:98:67:60:c5:7b:46:67:2a:15:7c:
                    e0:1f:f4:71:e8:f6:33:fd:f5:05:ee:40:5d:bd:eb:
                    df:e3:f1:52:e9:2c:9c:9f:f6:f7:18:30:7a:7c:f5:
                    f6:bc:9e:2d:59:d6:b7:73:51:a5:11:e4:31:6e:03:
                    05:02:05:44:1e:13:14:6f:37:09:c1:28:34:8f:a6:
                    f1:84:3b:89:c6:15:c4:24:e3:9a:00:ed:df:d6:e4:
                    09:b3:41:ee:2d:d4:6f:6e:6a:02:10:34:1f:e4:c2:
                    2d:3f:5b:7e:62:06:7b:b1:4e:f7:e2:72:b6:a2:fa:
                    90:fa:93:aa:a9:8c:5f:25:27:91:88:8a:c7:ac:57:
                    89:12:9c:df:b0:7a:6d:c1:92:af:2d:dd:93:a1:f8:
                    95:3a:56:bd:e0:bb:4a:c9:7e:0e:eb:b7:42:71:16:
                    d8:77:32:b3:6f:56:21:4b:b0:dd:d5:0e:90:4b:56:
                    b5:11:31:87:76:8d:ef:56:1f:40:09:00:e2:b2:49:
                    86:4e:f4:34:8e:18:8a:a8:10:19:77:48:89:09:4d:
                    77:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:0E:FA:FE:19:6C:40:48:2D:D1:19:22:C0:FE:DE:BA:71:D7:BA:87
            X509v3 Authority Key Identifier:
                keyid:D0:A9:52:A0:0D:B2:15:41:75:C2:0B:4C:88:7E:FA:2F:80:AC:6F:05

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30135/0KlSoA2yFUF1wgtMiH76L4CsbwU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0KlSoA2yFUF1wgtMiH76L4CsbwU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30135/RA76_hlsQEgt0RkiwP7eunHXuoc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:4200::/32

    Signature Algorithm: sha256WithRSAEncryption
         bb:ff:9b:9d:4f:05:33:67:44:d0:4a:f0:ee:0d:23:f6:11:ef:
         3c:2f:35:5b:0a:f7:ac:77:1e:43:62:1d:18:6a:ab:72:84:7f:
         5b:65:ac:21:cc:8f:36:eb:84:e0:54:d5:0e:b7:cb:a8:78:4d:
         42:1d:0f:5d:c7:df:d8:59:18:a0:d4:a8:ad:75:a8:32:df:93:
         a9:72:91:6b:53:66:32:5b:60:34:28:30:4d:ad:ab:1d:81:83:
         05:a1:bd:7c:21:9e:c5:2b:29:6c:01:6c:b8:4b:9a:db:5e:77:
         0e:31:15:62:e3:34:57:91:bc:da:3d:12:84:b1:02:fc:98:47:
         6b:9b:fe:8b:de:73:c1:f4:9c:d0:23:d1:96:29:1e:76:96:fd:
         80:62:f8:14:6e:b2:42:7d:9e:a2:db:a4:9e:3c:74:63:97:cc:
         df:be:95:39:16:04:6b:94:25:31:41:0b:ae:21:35:5e:d5:e8:
         aa:d5:06:29:d0:4c:a4:cd:28:91:a8:d4:b0:c7:ca:b3:59:f9:
         82:2c:b3:e3:69:64:e7:a5:9f:1e:b6:61:10:72:74:93:7a:a4:
         e4:78:31:76:d8:73:c3:e3:ba:a9:cf:d1:8c:96:a6:66:56:3b:
         3c:c6:18:53:9e:3f:66:06:75:75:7d:91:65:f9:5f:3e:6d:79:
         47:b0:f6:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 19:06:25 2024 by rpki-client on console-ams.rpki-client.org