Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30208/pCqFXEfZ34x4u_5jRudQS86jZZw.roa
File:                     pCqFXEfZ34x4u_5jRudQS86jZZw.roa (raw, json)
Hash identifier:          v2cS2y1s9xA9EycCKWwxRqh6DMEBFWTnbR28EgyFvvE=
Subject key identifier:   A4:2A:85:5C:47:D9:DF:8C:78:BB:FE:63:46:E7:50:4B:CE:A3:65:9C
Certificate issuer:       /CN=DFF122974C1A7D89D168BBB5345BFF1BBF341626
Certificate serial:       2B
Authority key identifier: DF:F1:22:97:4C:1A:7D:89:D1:68:BB:B5:34:5B:FF:1B:BF:34:16:26
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3_Eil0wafYnRaLu1NFv_G780FiY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30208/pCqFXEfZ34x4u_5jRudQS86jZZw.roa
Signing time:             Fri 01 Sep 2023 01:29:43 +0000
ROA not before:           Fri 01 Sep 2023 01:29:43 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     38651
IP address blocks:        2401:f100::/32 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30208/3_Eil0wafYnRaLu1NFv_G780FiY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30208/3_Eil0wafYnRaLu1NFv_G780FiY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3_Eil0wafYnRaLu1NFv_G780FiY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 16 Jun 2024 02:07:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43 (0x2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFF122974C1A7D89D168BBB5345BFF1BBF341626
        Validity
            Not Before: Sep  1 01:29:43 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=A42A855C47D9DF8C78BBFE6346E7504BCEA3659C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:dd:c8:be:e9:62:e8:7b:3d:5c:f2:03:d1:1f:
                    4b:69:5d:e9:50:8e:4e:8a:70:fd:fb:ea:38:e9:a1:
                    5d:73:e7:6a:77:36:b4:01:c8:3f:89:af:ea:eb:54:
                    5b:69:6a:9d:01:1f:ad:d5:f9:bb:17:7a:43:43:ff:
                    30:bf:c8:69:b4:b2:91:d2:36:97:6e:c8:42:15:f2:
                    84:f2:a7:fd:bc:b5:d0:02:96:e2:a4:c8:0b:95:87:
                    78:06:36:57:f5:56:58:91:4a:09:9d:4e:bf:1c:55:
                    24:43:86:8b:30:a4:64:bc:ad:b1:6f:47:ce:4c:89:
                    9f:7b:46:52:96:6c:c9:7a:c9:d7:08:44:07:5d:8f:
                    3e:33:cc:bb:f2:81:cd:cb:b5:ad:f5:2f:fc:fe:60:
                    2f:92:20:08:be:71:0b:c9:37:5e:68:8a:39:a4:09:
                    48:d7:f2:8b:74:24:82:f1:01:67:3e:99:1b:65:26:
                    b2:e3:2c:d8:3e:9c:b9:4b:a7:7e:3b:59:35:d8:a0:
                    73:3f:4b:15:94:92:35:6d:80:96:43:d3:7d:e3:3a:
                    58:5c:1f:c2:af:c4:fc:86:bb:ba:f2:56:fa:97:51:
                    85:fa:94:76:b1:22:b2:68:33:77:45:12:50:65:97:
                    59:6c:93:71:9a:75:84:ae:36:62:0e:b4:f0:3d:ef:
                    ee:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:2A:85:5C:47:D9:DF:8C:78:BB:FE:63:46:E7:50:4B:CE:A3:65:9C
            X509v3 Authority Key Identifier:
                keyid:DF:F1:22:97:4C:1A:7D:89:D1:68:BB:B5:34:5B:FF:1B:BF:34:16:26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30208/3_Eil0wafYnRaLu1NFv_G780FiY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3_Eil0wafYnRaLu1NFv_G780FiY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30208/pCqFXEfZ34x4u_5jRudQS86jZZw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:f100::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:f1:43:3f:61:4d:c9:7b:60:81:c6:b2:dc:85:84:d0:b2:0c:
         d7:e4:1c:2f:10:0a:0a:46:d5:1f:4b:eb:85:be:7a:df:c7:77:
         d1:db:b1:96:04:52:5b:46:89:0a:03:cc:10:67:ee:20:c6:f1:
         bf:c9:5d:b9:11:07:48:a0:63:4e:05:46:4f:49:50:86:99:4e:
         92:7f:c1:8b:cb:18:0e:4e:4c:c1:4d:bb:43:b5:43:3e:10:0a:
         75:4d:8a:94:1e:90:0d:bb:01:b5:d4:04:5f:d8:15:7a:4f:86:
         65:98:ab:a5:cb:4d:7f:97:7a:29:71:cf:63:e6:ab:f6:f5:14:
         6e:93:e0:e2:28:a2:27:2e:21:d6:c3:06:ba:6b:8c:17:d1:c4:
         67:c0:87:cc:44:1a:73:02:94:b2:69:3f:16:56:a4:3b:5a:46:
         7e:93:fe:de:58:5d:a9:d3:15:c9:02:5b:61:08:e8:e7:68:1a:
         82:09:01:4e:ac:61:7e:5a:e7:10:1b:2a:6f:39:bf:af:33:ae:
         c5:ee:78:a5:a2:8b:e3:6b:a7:10:1a:c4:3e:e8:cc:e3:30:1f:
         7c:21:09:22:cf:de:9a:24:2c:50:97:da:9a:1b:fb:46:99:dc:
         27:b4:f2:ff:c7:3d:3a:b6:85:29:c2:6c:d8:8a:e7:31:09:f8:
         cf:c9:36:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 10:26:10 2024 by rpki-client on console-fra.rpki-client.org