Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30156/D7Q9uSt9XGi9hOW18HrJHjcOAj8.roa
File:                     D7Q9uSt9XGi9hOW18HrJHjcOAj8.roa (raw, json)
Hash identifier:          ym/lywcDvWywOhfMyVKn98ElWVgtiCp+Q7TFivf8xNA=
Subject key identifier:   0F:B4:3D:B9:2B:7D:5C:68:BD:84:E5:B5:F0:7A:C9:1E:37:0E:02:3F
Certificate issuer:       /CN=66BB158F422A7BC0ADAE187EE4858F3A1DA91312
Certificate serial:       4C
Authority key identifier: 66:BB:15:8F:42:2A:7B:C0:AD:AE:18:7E:E4:85:8F:3A:1D:A9:13:12
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZrsVj0Iqe8Ctrhh-5IWPOh2pExI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30156/D7Q9uSt9XGi9hOW18HrJHjcOAj8.roa
Signing time:             Thu 29 Feb 2024 01:29:28 +0000
ROA not before:           Thu 29 Feb 2024 01:29:28 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     55392
IP address blocks:        2409:250::/28 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30156/ZrsVj0Iqe8Ctrhh-5IWPOh2pExI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30156/ZrsVj0Iqe8Ctrhh-5IWPOh2pExI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZrsVj0Iqe8Ctrhh-5IWPOh2pExI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76 (0x4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66BB158F422A7BC0ADAE187EE4858F3A1DA91312
        Validity
            Not Before: Feb 29 01:29:28 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=0FB43DB92B7D5C68BD84E5B5F07AC91E370E023F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c6:ef:02:09:a2:0c:9f:89:b4:3c:b8:c0:bb:
                    ad:cf:74:71:ad:9f:49:50:34:21:d1:62:3a:30:15:
                    4a:07:82:ce:ce:59:85:4b:82:4c:60:15:73:ec:16:
                    40:4a:05:dc:e1:cc:e7:0b:6f:e6:a8:27:8d:72:dc:
                    9b:18:bc:1c:a4:d3:2f:6f:29:f6:8e:cd:7a:49:0d:
                    9f:a0:35:cf:ab:d6:9c:c3:3a:2d:88:45:ea:1a:b7:
                    7c:91:78:23:71:cd:4e:03:a9:dd:19:8e:be:72:a0:
                    0a:f0:fb:f0:20:63:46:5d:4b:e7:6a:13:20:d0:83:
                    b3:16:d1:24:f0:a7:3e:82:cb:60:17:fd:14:27:f7:
                    6f:00:5f:8e:ca:87:c5:02:fe:bb:d4:73:f1:58:ee:
                    c3:f3:80:97:c9:b4:22:a6:cd:9e:85:c2:32:12:ef:
                    51:29:71:dc:a9:78:72:82:b2:40:51:c1:e3:f0:2b:
                    18:70:33:09:6b:30:55:fc:ac:27:f2:74:1d:a7:a0:
                    7b:2d:dd:1c:a3:24:8a:f7:02:f3:76:e0:f9:86:a9:
                    7f:39:9a:9b:04:0e:12:ea:3e:e7:d8:9e:90:2d:e3:
                    31:ff:7f:c0:a1:54:64:d8:c2:bb:17:a2:02:1f:b0:
                    26:37:25:e9:62:e8:b7:69:9e:bf:c7:10:f7:e7:83:
                    7b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:B4:3D:B9:2B:7D:5C:68:BD:84:E5:B5:F0:7A:C9:1E:37:0E:02:3F
            X509v3 Authority Key Identifier:
                keyid:66:BB:15:8F:42:2A:7B:C0:AD:AE:18:7E:E4:85:8F:3A:1D:A9:13:12

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30156/ZrsVj0Iqe8Ctrhh-5IWPOh2pExI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZrsVj0Iqe8Ctrhh-5IWPOh2pExI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30156/D7Q9uSt9XGi9hOW18HrJHjcOAj8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2409:250::/28

    Signature Algorithm: sha256WithRSAEncryption
         0f:9e:e1:6c:94:9e:46:cb:22:6e:50:a6:2b:88:0e:b3:b2:b3:
         e4:8c:13:e3:cf:83:32:78:ac:c8:89:17:df:33:43:f9:08:2a:
         61:4d:7a:94:d7:38:fa:f6:a2:56:f9:13:7b:18:aa:ad:a2:47:
         b6:35:ba:c4:88:40:f7:bd:cc:b4:b5:50:67:02:9f:fc:4a:45:
         0f:b1:31:95:eb:9c:ca:b5:5d:3c:6b:c5:8a:7e:ef:db:63:ab:
         0c:cd:ec:52:cd:d7:20:b4:83:b8:39:0f:94:a9:5b:de:ca:b6:
         35:22:b6:12:fd:5b:32:ae:12:bf:b4:10:18:15:ac:2b:60:aa:
         45:ef:89:a9:fc:d6:07:87:0c:51:7e:92:89:f1:97:67:aa:fc:
         38:d6:aa:26:94:36:7e:19:40:7d:22:ca:22:f8:fa:8e:30:f8:
         1b:b8:b5:01:dd:08:37:a3:76:d3:1f:00:72:33:20:78:d2:f3:
         e4:00:6d:9a:d5:0b:75:f8:7b:ae:a4:30:fc:5f:d3:b5:5c:31:
         46:ce:f9:c8:8a:a4:db:8d:95:90:fe:25:c7:52:30:22:63:c0:
         97:54:52:4a:5b:57:05:bf:4d:7f:0e:47:70:de:39:b2:05:95:
         46:ff:3a:ad:40:16:76:79:98:50:de:ce:55:50:85:35:85:e9:
         de:92:a2:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:31 2024 by rpki-client on console-ams.rpki-client.org