Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30187/qr1YSdWCyDF29Yhv4YtavqaqqBs.roa
File:                     qr1YSdWCyDF29Yhv4YtavqaqqBs.roa (raw, json)
Hash identifier:          XwERS8UdWaLMP+T0VDP/LlbeKjTufzTPjuJ+hFGJNRQ=
Subject key identifier:   AA:BD:58:49:D5:82:C8:31:76:F5:88:6F:E1:8B:5A:BE:A6:AA:A8:1B
Certificate issuer:       /CN=FC972C719F86C53B82DFBD681FB31F14CDABDCED
Certificate serial:       02
Authority key identifier: FC:97:2C:71:9F:86:C5:3B:82:DF:BD:68:1F:B3:1F:14:CD:AB:DC:ED
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_JcscZ-GxTuC371oH7MfFM2r3O0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30187/qr1YSdWCyDF29Yhv4YtavqaqqBs.roa
Signing time:             Fri 17 Nov 2023 07:13:22 +0000
ROA not before:           Fri 17 Nov 2023 07:13:22 +0000
ROA not after:            Sat 16 Nov 2024 07:01:55 +0000
asID:                     18278
IP address blocks:        2400:a300::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30187/_JcscZ-GxTuC371oH7MfFM2r3O0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30187/_JcscZ-GxTuC371oH7MfFM2r3O0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_JcscZ-GxTuC371oH7MfFM2r3O0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC972C719F86C53B82DFBD681FB31F14CDABDCED
        Validity
            Not Before: Nov 17 07:13:22 2023 GMT
            Not After : Nov 16 07:01:55 2024 GMT
        Subject: CN=AABD5849D582C83176F5886FE18B5ABEA6AAA81B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:88:20:17:b8:04:0f:75:62:63:8f:a5:6c:21:
                    b1:b7:a5:f1:30:72:e3:08:f9:e4:1e:d8:ca:6f:87:
                    ac:21:1a:f6:70:a9:14:fc:d2:0e:45:c8:20:3e:de:
                    74:70:93:c5:c8:78:97:19:da:30:02:2d:bc:61:5c:
                    9f:92:7f:64:cb:65:88:4a:25:d8:b7:0f:54:9a:87:
                    ff:cd:85:41:ca:d7:0e:84:06:73:a9:43:0a:69:5a:
                    8f:b3:ef:a5:60:64:90:18:03:46:4c:3d:c1:c0:3d:
                    6b:36:55:ff:01:7b:7f:e4:50:c6:9c:0f:5c:a7:ac:
                    bf:d3:69:3f:45:62:94:92:7d:55:ca:79:5a:10:7f:
                    47:3b:43:77:47:4e:6b:8d:12:fc:b8:fa:40:64:8f:
                    44:31:73:ff:09:4a:d4:45:de:fd:d3:d1:8c:d9:0d:
                    28:72:08:d9:e7:89:05:c8:7b:39:7f:a0:43:8f:69:
                    f1:e0:9e:c3:dd:a8:53:db:6d:e6:8e:6d:4a:4f:ec:
                    b4:c0:61:1d:7f:76:26:ef:79:82:30:9c:1d:7f:35:
                    4f:10:f4:9c:ea:88:a9:ca:cf:70:eb:ba:e3:85:7b:
                    ee:d3:f6:df:b0:45:63:5e:43:15:55:ce:26:2f:c9:
                    83:19:78:1d:d4:ff:c6:9e:eb:f8:62:6d:b4:c4:ce:
                    9b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:BD:58:49:D5:82:C8:31:76:F5:88:6F:E1:8B:5A:BE:A6:AA:A8:1B
            X509v3 Authority Key Identifier:
                keyid:FC:97:2C:71:9F:86:C5:3B:82:DF:BD:68:1F:B3:1F:14:CD:AB:DC:ED

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30187/_JcscZ-GxTuC371oH7MfFM2r3O0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_JcscZ-GxTuC371oH7MfFM2r3O0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30187/qr1YSdWCyDF29Yhv4YtavqaqqBs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:a300::/32

    Signature Algorithm: sha256WithRSAEncryption
         b7:be:e6:d3:8a:48:1f:b1:bd:c5:88:15:b2:4e:27:62:66:42:
         24:04:cc:d3:97:46:4d:a4:e5:39:40:84:5c:d4:2d:af:88:5e:
         d7:bf:95:21:16:89:0b:a7:9a:e4:da:29:80:a0:a6:57:4c:64:
         09:ad:d4:01:bb:a4:d6:44:b5:4a:60:f7:84:ec:7c:74:e4:0c:
         8a:22:e6:d6:ab:4e:46:38:2e:d8:a9:73:8b:ab:70:81:94:cc:
         e0:16:25:2f:6e:b0:d8:f1:0b:88:ce:ca:4c:fc:3c:a4:ec:36:
         77:49:e9:48:88:4a:36:5d:ff:9a:b3:92:d1:03:06:f9:62:01:
         11:38:ad:b8:c9:40:6c:80:26:ff:3a:cd:55:4a:d3:b4:7d:5e:
         6c:43:03:67:b0:71:ac:45:c5:a3:4f:60:39:8c:c3:0b:a1:22:
         d3:39:81:ee:13:87:da:21:4b:a8:a7:76:9f:ca:19:39:6f:16:
         ef:be:8a:9f:79:cf:55:f0:8b:b4:6f:34:a2:4e:8e:3b:bb:35:
         c0:3d:c4:a8:af:96:3c:aa:3f:87:b3:55:fd:c6:43:8a:d5:f6:
         10:a9:a3:42:24:c2:48:ae:37:cb:cc:ba:50:a1:4e:00:9f:56:
         d4:04:01:4d:cf:db:94:18:aa:d8:f2:b7:63:e3:bb:c1:33:cd:
         2c:17:18:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 03:38:44 2024 by rpki-client on console-ams.rpki-client.org