Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30175/h00a7vBkuwk_8EAb3Ornv3uxXi8.roa
File:                     h00a7vBkuwk_8EAb3Ornv3uxXi8.roa (raw, json)
Hash identifier:          Q3Hefu0tC1zDy635eKkTyBmG6OE0b81QRRceX/NKuaU=
Subject key identifier:   87:4D:1A:EE:F0:64:BB:09:3F:F0:40:1B:DC:EA:E7:BF:7B:B1:5E:2F
Certificate issuer:       /CN=DFBCD3F8BCA91915C4533A2C0A69C3D35B2E688D
Certificate serial:       2A
Authority key identifier: DF:BC:D3:F8:BC:A9:19:15:C4:53:3A:2C:0A:69:C3:D3:5B:2E:68:8D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/37zT-LypGRXEUzosCmnD01suaI0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/h00a7vBkuwk_8EAb3Ornv3uxXi8.roa
Signing time:             Thu 31 Oct 2024 01:31:42 +0000
ROA not before:           Thu 31 Oct 2024 01:31:42 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     37899
IP address blocks:        240b:251::/32 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/37zT-LypGRXEUzosCmnD01suaI0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42 (0x2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFBCD3F8BCA91915C4533A2C0A69C3D35B2E688D
        Validity
            Not Before: Oct 31 01:31:42 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=874D1AEEF064BB093FF0401BDCEAE7BF7BB15E2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:67:b0:79:42:d7:01:11:30:92:a5:db:1a:64:
                    b5:80:de:f5:da:8d:77:ba:78:40:38:98:fe:81:6f:
                    23:e7:d0:c4:68:10:7f:fb:91:06:c9:f7:e5:2d:15:
                    19:66:01:4f:85:18:4f:3f:b3:36:ef:91:5b:a6:33:
                    7e:06:8d:a5:36:71:2d:d0:6b:b4:22:c8:c6:76:5b:
                    38:4f:26:37:74:5c:87:dc:af:cc:6b:60:e4:85:e5:
                    5c:c7:46:a5:69:84:06:e8:ab:09:dc:4f:23:05:fb:
                    19:29:66:83:f6:e9:73:5a:c6:75:14:74:a0:42:a3:
                    cb:58:fc:ee:28:11:63:4e:82:1a:da:9d:2a:c8:c9:
                    bd:f7:b5:89:ed:3b:3f:d6:a6:30:6d:7d:fb:2e:da:
                    17:37:a9:c2:c1:72:d4:03:86:9c:db:29:b2:3a:26:
                    4b:0f:87:f8:d5:0c:cb:03:18:87:5b:08:fd:cf:47:
                    51:82:f8:17:63:b6:ad:7e:8a:1d:42:31:3a:de:07:
                    3d:90:78:2a:f3:c3:4c:d2:0a:96:85:29:c0:c5:a0:
                    48:61:82:89:a2:c5:4d:ff:44:7f:69:8c:b0:83:f3:
                    59:e2:0a:10:80:1d:ed:f3:20:e2:05:f7:86:f6:a5:
                    5d:1e:6e:cd:28:20:1e:2c:73:e8:e2:29:a4:bd:02:
                    8f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:4D:1A:EE:F0:64:BB:09:3F:F0:40:1B:DC:EA:E7:BF:7B:B1:5E:2F
            X509v3 Authority Key Identifier:
                keyid:DF:BC:D3:F8:BC:A9:19:15:C4:53:3A:2C:0A:69:C3:D3:5B:2E:68:8D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/37zT-LypGRXEUzosCmnD01suaI0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/h00a7vBkuwk_8EAb3Ornv3uxXi8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240b:251::/32

    Signature Algorithm: sha256WithRSAEncryption
         a2:fd:86:01:7d:ef:2c:99:17:0d:f9:da:ab:51:49:2a:08:30:
         3e:11:a9:50:d1:18:96:0d:ee:48:63:27:3b:65:86:df:78:54:
         92:8c:f1:86:62:35:68:ee:ce:ca:2c:a3:89:69:3c:0b:9f:ea:
         a6:ac:24:f9:36:fb:12:e5:bf:72:00:45:33:77:2f:ad:ad:88:
         d1:98:f8:da:a5:bc:14:db:9f:d8:15:2b:36:19:8f:75:a7:85:
         52:af:fa:75:05:bc:5e:8a:d0:f8:17:f5:00:08:75:99:4e:72:
         00:10:9b:3d:76:58:9f:d3:e0:b6:06:b0:0d:18:50:c5:aa:b7:
         bf:cc:0e:d8:fe:62:04:55:78:e2:db:86:6b:ab:f7:ef:69:f1:
         d1:7b:b0:2e:a0:ed:49:0c:5f:de:3e:43:2e:81:ea:ca:0d:82:
         f2:96:92:44:df:27:30:cc:cc:49:e1:b5:52:5c:26:ff:51:c4:
         e5:d3:f6:e6:9b:a7:99:52:55:2d:28:95:cb:7d:2d:d0:68:86:
         45:9a:05:12:6a:77:b0:29:44:d4:2c:d2:b0:ca:8b:59:3e:af:
         26:42:c7:f9:fe:65:76:e0:8f:0e:25:2f:59:5d:f1:ee:51:f3:
         92:9c:23:32:0c:d9:8b:d9:9c:d5:31:cf:37:95:0b:78:ca:08:
         b8:1f:59:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:34 2024 by rpki-client on console-ams.rpki-client.org