Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30175/sC37k6EIozJhy18zD1oew8MT8Dg.roa
File:                     sC37k6EIozJhy18zD1oew8MT8Dg.roa (raw, json)
Hash identifier:          aoUTi31k+ol/v/xgFXew45Y9SKwynq5R/0PdDIwjKKg=
Subject key identifier:   B0:2D:FB:93:A1:08:A3:32:61:CB:5F:33:0F:5A:1E:C3:C3:13:F0:38
Certificate issuer:       /CN=DFBCD3F8BCA91915C4533A2C0A69C3D35B2E688D
Certificate serial:       2D
Authority key identifier: DF:BC:D3:F8:BC:A9:19:15:C4:53:3A:2C:0A:69:C3:D3:5B:2E:68:8D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/37zT-LypGRXEUzosCmnD01suaI0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/sC37k6EIozJhy18zD1oew8MT8Dg.roa
Signing time:             Thu 31 Oct 2024 01:31:43 +0000
ROA not before:           Thu 31 Oct 2024 01:31:43 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     2516
IP address blocks:        240b:240::/26 maxlen: 26

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/37zT-LypGRXEUzosCmnD01suaI0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45 (0x2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFBCD3F8BCA91915C4533A2C0A69C3D35B2E688D
        Validity
            Not Before: Oct 31 01:31:43 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=B02DFB93A108A33261CB5F330F5A1EC3C313F038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:2a:d4:3b:d0:21:ed:9b:4a:d0:d8:f6:ba:95:
                    7f:1c:02:5e:ea:30:d9:54:6d:b8:1d:9c:7f:85:f8:
                    7b:e2:1d:00:1b:a9:43:1c:af:58:c4:3d:85:53:ac:
                    36:b5:98:b4:45:3e:82:d2:a7:79:80:05:6b:87:61:
                    f3:52:50:4b:14:98:53:c4:bc:1b:8f:2b:c4:53:fb:
                    5b:f2:fe:47:ec:f9:3a:fe:29:fb:bb:db:88:ad:fa:
                    02:10:08:c2:35:67:5a:99:91:e8:1e:e9:92:b7:4d:
                    7b:f2:27:ac:82:36:55:04:fb:6d:d4:0f:b3:f6:30:
                    69:f8:8a:05:ca:39:25:8c:4d:21:22:ce:1f:ae:2e:
                    53:0b:32:f6:92:76:05:0d:8d:6b:6b:87:65:33:75:
                    db:14:9a:b9:d2:a5:60:dd:31:94:2d:ee:06:fb:2a:
                    93:5d:bb:11:c9:6e:e8:0f:90:1f:20:e7:26:ec:84:
                    02:aa:f0:cf:30:3b:a2:57:89:87:d2:7e:da:59:66:
                    6b:80:5f:a2:13:73:ad:ae:cb:c3:9b:56:d8:7c:02:
                    76:53:49:b4:8f:f0:e9:25:35:60:4b:25:ff:71:9f:
                    b8:94:63:68:8c:69:1b:19:a4:73:af:ee:20:75:b2:
                    e8:1a:79:c1:71:8d:d1:31:4c:48:86:e5:96:f5:1d:
                    c9:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:2D:FB:93:A1:08:A3:32:61:CB:5F:33:0F:5A:1E:C3:C3:13:F0:38
            X509v3 Authority Key Identifier:
                keyid:DF:BC:D3:F8:BC:A9:19:15:C4:53:3A:2C:0A:69:C3:D3:5B:2E:68:8D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/37zT-LypGRXEUzosCmnD01suaI0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/sC37k6EIozJhy18zD1oew8MT8Dg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240b:240::/26

    Signature Algorithm: sha256WithRSAEncryption
         94:22:3d:b2:a7:cd:81:ea:e9:f8:cf:9f:67:d6:53:10:74:57:
         1d:68:79:16:6c:63:3d:ea:f2:aa:47:f8:5a:0e:e3:d0:0c:23:
         7c:6c:1a:d2:21:fa:1d:fa:be:c4:e2:a5:c4:47:b0:4a:eb:0c:
         5f:0e:58:0d:dc:bc:02:d5:7e:0d:45:63:cd:bc:75:ee:25:1f:
         e0:17:46:21:39:11:f9:d5:60:73:60:29:60:d7:16:55:d0:80:
         4c:27:51:d4:38:5e:d3:00:0d:8b:72:6c:a8:a7:36:c9:19:cb:
         4a:9b:47:19:dd:4b:63:64:6f:10:0d:e5:70:83:67:1f:7e:6d:
         88:35:9a:ce:f0:ef:30:1a:3f:b2:99:2f:f1:9a:2f:04:24:b0:
         66:d5:1b:c1:c6:17:0e:36:a2:bb:d0:91:6a:bb:60:41:7a:f9:
         a0:0a:40:ea:d7:6b:47:2f:b5:8a:1f:0c:f9:4b:3c:fb:eb:5d:
         b2:56:19:fa:5a:73:39:e8:c5:6c:e2:5c:42:9a:e5:08:ba:0a:
         df:9b:1e:5a:31:02:04:29:ce:81:26:1e:07:9a:aa:0d:0e:14:
         9f:35:9a:e1:4c:9f:16:d5:66:ef:20:f8:6d:e7:1b:c2:4d:2e:
         2d:13:e3:35:f2:26:f0:e9:36:d0:98:13:0a:ac:07:a1:77:88:
         98:fe:8a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:31 2024 by rpki-client on console-ams.rpki-client.org