Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30175/Aq6pa4TyNrmyEc5uo52d9M5fDs8.roa
File:                     Aq6pa4TyNrmyEc5uo52d9M5fDs8.roa (raw, json)
Hash identifier:          RYNdp/HKjoZgyAO1adYCrfypygzYH4CZerdziKjaB8c=
Subject key identifier:   02:AE:A9:6B:84:F2:36:B9:B2:11:CE:6E:A3:9D:9D:F4:CE:5F:0E:CF
Certificate issuer:       /CN=DFBCD3F8BCA91915C4533A2C0A69C3D35B2E688D
Certificate serial:       0C
Authority key identifier: DF:BC:D3:F8:BC:A9:19:15:C4:53:3A:2C:0A:69:C3:D3:5B:2E:68:8D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/37zT-LypGRXEUzosCmnD01suaI0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/Aq6pa4TyNrmyEc5uo52d9M5fDs8.roa
Signing time:             Tue 21 Nov 2023 06:24:33 +0000
ROA not before:           Tue 21 Nov 2023 06:24:33 +0000
ROA not after:            Thu 14 Nov 2024 01:30:03 +0000
asID:                     37901
IP address blocks:        240b:10::/32 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/37zT-LypGRXEUzosCmnD01suaI0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFBCD3F8BCA91915C4533A2C0A69C3D35B2E688D
        Validity
            Not Before: Nov 21 06:24:33 2023 GMT
            Not After : Nov 14 01:30:03 2024 GMT
        Subject: CN=02AEA96B84F236B9B211CE6EA39D9DF4CE5F0ECF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1b:9b:15:5b:c9:24:1e:51:07:f6:7a:c4:b2:
                    07:8e:46:a4:6b:ff:6b:82:b4:80:64:28:b3:52:a5:
                    f8:15:f0:cf:d7:c7:38:c4:75:3b:1d:c8:ed:e3:a3:
                    5e:db:31:b8:8d:50:53:86:e3:cb:69:02:b7:ee:12:
                    48:7f:1c:b0:dc:30:76:48:71:4b:f8:ed:97:31:18:
                    c8:4d:3b:f7:17:a8:f8:e5:25:7e:f0:dd:0a:88:af:
                    fe:ed:36:56:a3:6e:de:1b:85:3f:d5:e9:be:95:13:
                    8b:6a:1b:9f:7c:9b:17:8e:5e:23:1d:cd:e9:f5:d8:
                    57:52:2c:31:7d:04:5a:a7:bd:94:50:02:83:de:3e:
                    5a:a5:51:06:fd:78:45:aa:1d:ce:a4:94:82:b3:ff:
                    23:bb:a9:ee:ea:c2:72:eb:ff:ed:5c:b2:e7:20:5d:
                    79:12:cb:19:ad:bc:76:56:f1:ba:49:6b:82:a0:4a:
                    b5:df:51:6e:bc:75:27:ad:c4:0e:c8:24:6a:ff:3a:
                    82:9f:5d:b5:21:0f:dd:7c:a9:c1:80:78:50:32:fb:
                    41:bc:ce:f0:c7:f2:c5:f9:8a:5f:e3:c7:b6:81:9c:
                    bf:74:d4:da:a8:18:a6:21:b9:a8:5f:e4:88:a5:03:
                    88:e9:0a:3e:04:a2:dc:25:28:a1:31:9d:64:4d:9d:
                    10:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:AE:A9:6B:84:F2:36:B9:B2:11:CE:6E:A3:9D:9D:F4:CE:5F:0E:CF
            X509v3 Authority Key Identifier:
                keyid:DF:BC:D3:F8:BC:A9:19:15:C4:53:3A:2C:0A:69:C3:D3:5B:2E:68:8D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/37zT-LypGRXEUzosCmnD01suaI0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/Aq6pa4TyNrmyEc5uo52d9M5fDs8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240b:10::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:79:b1:9c:37:05:a7:3c:6b:68:d9:09:2c:5a:e9:bc:df:7a:
         36:7f:5b:86:cb:f9:18:94:2a:7f:4a:14:f0:56:f4:ba:c4:86:
         e2:2a:a2:f3:6b:22:9d:4a:1d:c7:f5:4c:49:d6:50:fa:41:fc:
         25:1e:fe:17:a7:ab:ca:29:6b:78:4b:3e:71:f4:36:a3:6c:53:
         11:60:cd:66:3d:ef:d6:bc:a7:f0:b9:46:cd:93:59:6f:e7:9c:
         c5:47:e6:f8:23:c8:ea:e6:1f:61:f2:2b:11:80:98:59:f2:20:
         24:96:5f:74:5d:c0:52:9d:87:67:fc:3e:6f:e0:de:4b:86:6c:
         32:da:0c:6c:c7:37:67:79:be:d4:24:4a:4d:de:d4:a0:42:82:
         6b:07:68:49:03:3f:4e:e3:e2:fa:81:7c:0f:86:e3:3e:ef:58:
         79:5a:20:a2:81:00:3e:29:94:a3:3c:41:a9:f1:cb:d4:80:6d:
         ac:a1:f3:d7:35:22:21:6b:d8:bd:76:81:0d:55:16:52:23:19:
         76:d4:f9:06:38:3b:b3:c2:c1:96:eb:41:cf:ab:0a:96:e2:bb:
         71:69:57:3c:4d:f2:3b:48:ad:7f:48:79:e1:d5:08:34:8e:ff:
         9a:57:2d:3f:9a:ef:1b:76:a6:b6:7a:12:61:6c:9f:9c:65:be:
         a1:22:08:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 15:06:34 2024 by rpki-client on console-ams.rpki-client.org