Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30155/eb9diMqq2DlUIEwJZYb3aoSacCE.roa
File:                     eb9diMqq2DlUIEwJZYb3aoSacCE.roa (raw, json)
Hash identifier:          7KLB/Apq/yXUxcodLeKUJ6nMWLVnoL4bIzKM4G+GIyc=
Subject key identifier:   79:BF:5D:88:CA:AA:D8:39:54:20:4C:09:65:86:F7:6A:84:9A:70:21
Certificate issuer:       /CN=540D04AB978801867F711546D16FB476A278FC9A
Certificate serial:       4C
Authority key identifier: 54:0D:04:AB:97:88:01:86:7F:71:15:46:D1:6F:B4:76:A2:78:FC:9A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VA0Eq5eIAYZ_cRVG0W-0dqJ4_Jo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30155/eb9diMqq2DlUIEwJZYb3aoSacCE.roa
Signing time:             Thu 29 Feb 2024 01:29:27 +0000
ROA not before:           Thu 29 Feb 2024 01:29:27 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     55391
IP address blocks:        2409:10::/28 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30155/VA0Eq5eIAYZ_cRVG0W-0dqJ4_Jo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30155/VA0Eq5eIAYZ_cRVG0W-0dqJ4_Jo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VA0Eq5eIAYZ_cRVG0W-0dqJ4_Jo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76 (0x4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=540D04AB978801867F711546D16FB476A278FC9A
        Validity
            Not Before: Feb 29 01:29:27 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=79BF5D88CAAAD83954204C096586F76A849A7021
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ba:95:6b:50:e4:53:b5:6b:7e:8f:ea:d7:6c:
                    2f:b6:54:95:77:bd:0d:59:3f:80:62:14:4d:65:8d:
                    a5:92:32:58:08:88:a6:79:cb:9a:a5:14:62:9e:20:
                    43:2d:45:28:2a:42:c7:10:63:d0:bf:cf:49:3e:a2:
                    04:c1:f6:9d:23:65:92:99:23:eb:ef:2e:93:65:d1:
                    19:36:2a:4e:7d:4e:00:a8:93:3e:60:78:8a:9c:36:
                    76:5e:c8:eb:f7:d2:76:a2:db:05:49:3c:60:25:8d:
                    74:e1:a9:91:8f:d0:66:be:eb:73:a0:fe:5f:e5:60:
                    b0:73:2b:76:f1:58:78:38:01:7c:30:62:3c:60:33:
                    e7:79:8f:48:6f:ac:5c:bf:62:33:db:a5:b1:f3:72:
                    f2:b1:d4:29:70:8e:db:4a:de:75:f6:67:bd:55:36:
                    11:df:74:28:18:f0:c1:60:21:10:bd:54:60:1e:5f:
                    06:b7:69:96:74:b5:ca:fe:89:a2:0d:f2:44:60:93:
                    bf:bc:10:c8:34:44:b2:d6:28:66:9d:40:e1:fd:d9:
                    ef:93:c0:86:84:a1:18:73:7e:f5:66:2b:37:e2:e8:
                    b5:c8:53:72:df:40:35:0f:26:4a:c0:de:0d:60:7f:
                    d3:b2:71:34:93:68:c1:84:fc:71:8f:84:3f:7b:bb:
                    fc:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:BF:5D:88:CA:AA:D8:39:54:20:4C:09:65:86:F7:6A:84:9A:70:21
            X509v3 Authority Key Identifier:
                keyid:54:0D:04:AB:97:88:01:86:7F:71:15:46:D1:6F:B4:76:A2:78:FC:9A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30155/VA0Eq5eIAYZ_cRVG0W-0dqJ4_Jo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VA0Eq5eIAYZ_cRVG0W-0dqJ4_Jo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30155/eb9diMqq2DlUIEwJZYb3aoSacCE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2409:10::/28

    Signature Algorithm: sha256WithRSAEncryption
         26:91:c3:0d:9d:0d:14:9a:37:ff:84:7b:3c:13:48:6e:e2:58:
         3e:60:45:8a:d6:a8:d6:3c:5a:80:a2:cb:ef:20:02:bd:b8:79:
         07:d8:7f:7d:e4:e9:4b:e5:86:c5:45:67:a4:b9:ed:30:fb:82:
         bc:b0:a7:29:5f:ed:0a:ce:fa:87:c4:ec:df:1a:e0:ec:79:a3:
         62:df:5d:21:db:3b:0f:4b:eb:ed:17:e5:c4:d8:74:e2:dd:4e:
         3c:fa:81:fb:c1:6c:8e:fe:70:81:03:99:98:59:9b:43:3e:12:
         99:e3:c9:83:92:9b:10:65:06:90:bf:70:b6:cb:9d:a2:d7:e5:
         80:84:dc:e3:45:cc:8e:c7:31:af:d3:3b:c2:f7:da:e7:2d:e1:
         ba:7f:99:12:f5:c5:d9:c7:3a:b3:03:d4:85:11:73:4c:ee:42:
         83:d1:53:c6:55:3a:6d:56:9c:df:63:e9:e8:f0:25:32:60:13:
         ce:f9:a0:c8:9c:ee:4a:c7:a4:74:d7:dd:6a:bd:94:00:76:99:
         4a:f3:ff:e5:5b:92:58:7f:b1:b0:6c:fd:60:e8:d3:97:24:77:
         19:a3:53:da:ae:6c:a2:9b:b3:a0:42:18:74:85:f5:94:49:a7:
         2b:c9:a1:23:9a:e7:40:e8:3a:32:22:fb:9e:4d:73:f5:b5:3e:
         33:44:eb:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 03:38:44 2024 by rpki-client on console-ams.rpki-client.org