Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30155/U8VCiI_jgQUtLUgdRSzMHtdN224.roa
File:                     U8VCiI_jgQUtLUgdRSzMHtdN224.roa (raw, json)
Hash identifier:          KrJboo7V4gJxb5XUpZAjXe2zR6c9jKdQ3KJYmxbcdYY=
Subject key identifier:   53:C5:42:88:8F:E3:81:05:2D:2D:48:1D:45:2C:CC:1E:D7:4D:DB:6E
Certificate issuer:       /CN=540D04AB978801867F711546D16FB476A278FC9A
Certificate serial:       4B
Authority key identifier: 54:0D:04:AB:97:88:01:86:7F:71:15:46:D1:6F:B4:76:A2:78:FC:9A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VA0Eq5eIAYZ_cRVG0W-0dqJ4_Jo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30155/U8VCiI_jgQUtLUgdRSzMHtdN224.roa
Signing time:             Thu 29 Feb 2024 01:29:26 +0000
ROA not before:           Thu 29 Feb 2024 01:29:26 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     55391
IP address blocks:        2404:8e00::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30155/VA0Eq5eIAYZ_cRVG0W-0dqJ4_Jo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30155/VA0Eq5eIAYZ_cRVG0W-0dqJ4_Jo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VA0Eq5eIAYZ_cRVG0W-0dqJ4_Jo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75 (0x4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=540D04AB978801867F711546D16FB476A278FC9A
        Validity
            Not Before: Feb 29 01:29:26 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=53C542888FE381052D2D481D452CCC1ED74DDB6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:28:35:fc:03:01:eb:c3:88:b6:d3:23:64:91:
                    ea:49:ac:7c:44:a8:52:b6:6d:46:ea:6c:17:26:90:
                    5a:08:13:a6:82:cc:65:a2:fa:8b:24:33:68:ce:a0:
                    17:62:f0:79:f9:de:1f:50:b3:94:7e:eb:60:1b:04:
                    56:4e:2b:17:16:22:e5:29:a2:0c:3f:99:8f:7b:0a:
                    ca:02:00:27:c8:18:e7:c0:53:2d:3c:dd:81:2b:19:
                    99:e4:9a:06:0c:14:0c:9f:8e:b5:04:f7:27:ce:b6:
                    cb:fd:0b:33:ea:8d:a3:12:99:24:99:b0:5a:35:0e:
                    0c:8b:fa:d9:54:28:48:e9:07:6b:64:e9:fa:76:05:
                    0c:67:bf:04:e0:a1:0b:31:37:ee:62:7c:ca:fc:d9:
                    da:f4:e9:da:18:67:f4:c8:c8:5a:d6:14:7f:db:78:
                    61:01:f6:68:c5:7d:f9:6d:ef:d6:f4:14:0e:2e:7b:
                    da:e4:33:f5:bd:7e:f8:14:cb:6e:04:cc:06:c0:b2:
                    0c:0b:a5:05:a7:ed:a5:e5:58:83:c7:24:92:2b:b9:
                    7e:99:2e:34:3a:22:69:10:3b:df:f6:2d:d4:1f:b8:
                    54:5f:2e:6c:ae:01:a9:4e:b1:30:dd:46:5f:48:ff:
                    75:0b:f6:3a:9c:29:a8:9d:17:99:d3:0f:92:a3:4a:
                    c8:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:C5:42:88:8F:E3:81:05:2D:2D:48:1D:45:2C:CC:1E:D7:4D:DB:6E
            X509v3 Authority Key Identifier:
                keyid:54:0D:04:AB:97:88:01:86:7F:71:15:46:D1:6F:B4:76:A2:78:FC:9A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30155/VA0Eq5eIAYZ_cRVG0W-0dqJ4_Jo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VA0Eq5eIAYZ_cRVG0W-0dqJ4_Jo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30155/U8VCiI_jgQUtLUgdRSzMHtdN224.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:8e00::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:dd:6f:3b:3f:75:4e:c0:e8:60:ae:09:39:fc:7f:28:e8:97:
         88:64:f0:1e:b1:d7:77:97:fe:ab:52:85:a9:3e:24:00:ec:79:
         55:48:5d:d5:0e:38:6a:72:67:fa:3a:92:37:bb:4c:f0:3b:cc:
         4e:e7:8f:0e:f2:68:dc:19:52:fa:ff:44:84:15:2b:d0:55:1e:
         d7:1d:a5:78:25:d4:a5:59:8c:2c:86:c0:c1:6f:1e:a6:72:a2:
         72:33:79:a8:f1:17:c8:2d:9e:eb:ab:cb:1f:da:d5:47:9e:22:
         d1:c1:a2:6a:6f:f6:ee:5c:74:44:12:24:e8:7e:b8:89:40:2a:
         31:64:c2:06:a5:a1:5e:fa:6d:07:23:75:73:54:e0:21:e6:fa:
         92:25:a6:24:c0:fa:34:77:07:0d:61:95:3a:8f:8d:9c:b3:a2:
         e2:a4:f1:36:62:49:6f:7b:b7:dc:fc:4b:64:db:8a:48:59:70:
         34:7a:e5:14:e7:54:8d:ec:a8:4b:4c:be:71:70:49:7f:f4:ad:
         e7:5b:dd:01:9a:db:a4:2d:6f:4d:57:34:ab:94:ca:43:d8:18:
         2f:c6:b3:be:7b:ca:4e:e7:e4:cb:9c:d0:49:7e:d5:b1:3a:64:
         23:0d:d5:2f:b0:97:fc:9a:9e:e1:6b:e6:86:62:b6:9d:b5:a2:
         dc:a9:09:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:31 2024 by rpki-client on console-ams.rpki-client.org