Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30175/o32ZrkRTBmqfwSbKrzdg2AOqrYk.roa
File:                     o32ZrkRTBmqfwSbKrzdg2AOqrYk.roa (raw, json)
Hash identifier:          meW0nsMc2BVSCFZ5bfZSHqON37zIk9GYab3o/+F8v9M=
Subject key identifier:   A3:7D:99:AE:44:53:06:6A:9F:C1:26:CA:AF:37:60:D8:03:AA:AD:89
Certificate issuer:       /CN=DFBCD3F8BCA91915C4533A2C0A69C3D35B2E688D
Certificate serial:       12
Authority key identifier: DF:BC:D3:F8:BC:A9:19:15:C4:53:3A:2C:0A:69:C3:D3:5B:2E:68:8D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/37zT-LypGRXEUzosCmnD01suaI0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/o32ZrkRTBmqfwSbKrzdg2AOqrYk.roa
Signing time:             Tue 28 Nov 2023 04:19:24 +0000
ROA not before:           Tue 28 Nov 2023 04:19:24 +0000
ROA not after:            Thu 14 Nov 2024 01:30:03 +0000
asID:                     37899
IP address blocks:        240b:251::/32 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/37zT-LypGRXEUzosCmnD01suaI0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18 (0x12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFBCD3F8BCA91915C4533A2C0A69C3D35B2E688D
        Validity
            Not Before: Nov 28 04:19:24 2023 GMT
            Not After : Nov 14 01:30:03 2024 GMT
        Subject: CN=A37D99AE4453066A9FC126CAAF3760D803AAAD89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:21:8f:6c:6b:f9:a0:37:9b:15:6c:85:d5:bc:
                    bf:10:fd:03:46:52:be:69:a2:dd:33:9b:fb:a2:9a:
                    c8:92:31:05:77:de:74:58:33:28:5f:a5:5d:1b:76:
                    3f:96:dc:63:a0:d9:ca:02:4f:d2:e5:b8:c7:5f:5d:
                    c9:d6:98:3f:09:0a:11:a3:12:bc:88:6d:d2:4d:3c:
                    2f:bd:45:b9:ed:2d:0c:86:ed:80:0e:b1:43:b2:3d:
                    3a:26:9e:1f:de:65:58:69:b8:35:4f:ef:79:f2:f8:
                    84:ba:12:79:05:ae:cc:40:b5:b2:cd:ac:bb:8c:a2:
                    b2:d2:a8:f9:a8:70:fb:92:ee:a3:b8:bf:64:7a:86:
                    21:23:c3:a9:d5:ee:53:28:1d:10:03:f2:4f:6d:52:
                    26:6d:0d:d5:8f:59:13:0d:20:70:53:6d:8d:1f:f6:
                    d6:5b:6e:25:a7:b9:50:c4:b5:72:94:f7:ca:54:01:
                    32:b2:4b:21:33:9f:06:72:d3:c0:de:61:67:d6:2d:
                    58:90:1b:33:26:25:cf:2a:55:10:9d:39:8c:7f:fb:
                    0b:c1:61:a7:1e:22:d5:29:bc:8b:50:c0:fd:3f:76:
                    1b:57:09:fb:5e:6b:27:48:c7:ab:45:59:e0:9e:c0:
                    b0:fa:47:c5:e4:72:9e:55:62:a3:28:f6:d7:0c:3f:
                    59:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:7D:99:AE:44:53:06:6A:9F:C1:26:CA:AF:37:60:D8:03:AA:AD:89
            X509v3 Authority Key Identifier:
                keyid:DF:BC:D3:F8:BC:A9:19:15:C4:53:3A:2C:0A:69:C3:D3:5B:2E:68:8D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/37zT-LypGRXEUzosCmnD01suaI0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/o32ZrkRTBmqfwSbKrzdg2AOqrYk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240b:251::/32

    Signature Algorithm: sha256WithRSAEncryption
         9f:01:33:38:b7:43:f5:2e:fe:93:f7:8d:23:9b:85:ce:9b:f1:
         7d:17:63:22:b4:29:8c:c8:ed:43:c4:3f:0b:9d:a5:6e:51:ff:
         1d:1e:f1:10:c3:d8:39:a1:b6:ea:87:27:af:73:57:4b:85:2a:
         85:38:2e:9c:19:f7:a1:b0:68:71:4f:f6:8e:de:5c:a5:1d:1e:
         52:0a:c9:80:59:0f:42:f7:fb:fc:c5:cd:c4:41:23:69:6b:7f:
         18:42:b8:64:72:a6:59:74:4d:3f:d0:3e:21:a1:3a:f4:0a:06:
         6e:aa:89:06:1a:b9:22:a3:b5:85:82:67:16:f4:4f:a5:0b:0c:
         ca:e6:b0:4f:85:00:7b:24:14:cc:60:b2:a2:7b:ef:a8:b2:7d:
         cf:18:a2:e0:47:60:8d:4d:7d:e3:5d:f3:69:51:f6:c6:b4:04:
         57:cc:3f:39:12:10:bd:e2:60:9a:51:19:d4:97:b3:1e:b3:27:
         ed:a4:e5:dc:71:06:7d:47:1f:fe:a7:df:08:0e:a1:a9:98:57:
         ac:00:86:66:fd:1e:03:54:5a:8a:a3:31:15:10:d1:69:f7:08:
         4d:2b:c3:f8:0b:90:9d:61:73:b5:19:5f:21:b6:06:ef:95:7c:
         3e:b2:c9:16:ff:7e:d5:1c:c6:d3:81:30:7c:67:10:6e:34:1c:
         ea:dc:42:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 14:56:16 2024 by rpki-client on console-fra.rpki-client.org