Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30228/3c0aaQ_D72rIkLvKNouKYLSRLec.roa
File:                     3c0aaQ_D72rIkLvKNouKYLSRLec.roa (raw, json)
Hash identifier:          erwu5mIVkvMR4u0KIdaJX4Y9Y9iu/DRWy4+smywNAR8=
Subject key identifier:   DD:CD:1A:69:0F:C3:EF:6A:C8:90:BB:CA:36:8B:8A:60:B4:91:2D:E7
Certificate issuer:       /CN=D10D886582BDDF48B041851C38C0B632115F5C21
Certificate serial:       67
Authority key identifier: D1:0D:88:65:82:BD:DF:48:B0:41:85:1C:38:C0:B6:32:11:5F:5C:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/3c0aaQ_D72rIkLvKNouKYLSRLec.roa
Signing time:             Thu 29 Feb 2024 01:29:29 +0000
ROA not before:           Thu 29 Feb 2024 01:29:29 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     10010
IP address blocks:        2403:7800::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/0Q2IZYK930iwQYUcOMC2MhFfXCE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/0Q2IZYK930iwQYUcOMC2MhFfXCE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 11:53:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103 (0x67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D10D886582BDDF48B041851C38C0B632115F5C21
        Validity
            Not Before: Feb 29 01:29:29 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=DDCD1A690FC3EF6AC890BBCA368B8A60B4912DE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:de:c4:39:8d:94:1e:6e:82:45:4e:05:7a:e8:
                    bb:97:fa:22:c4:78:21:f8:37:57:00:91:83:a9:6c:
                    9a:6a:8f:c0:f7:d5:90:b6:82:b9:9a:d3:98:de:d5:
                    68:0a:4c:da:84:41:cb:d4:63:f7:fc:9e:91:c0:0f:
                    ce:62:b6:f9:ab:75:83:80:e6:4c:d3:49:18:e0:72:
                    1f:2d:4c:63:83:74:43:39:f8:fa:0e:e8:65:51:b4:
                    6f:46:bd:af:88:19:79:42:e0:d5:2e:fc:3c:42:d8:
                    aa:77:1b:de:b7:55:16:9a:00:54:53:29:92:fe:9e:
                    5b:78:6a:41:35:10:cd:58:dc:ff:8e:49:b3:d4:ca:
                    5a:31:77:d8:87:88:4f:50:55:0b:e8:d4:eb:be:16:
                    37:2f:9d:ef:c4:85:ac:65:ed:a8:32:ff:84:ce:9b:
                    f4:3a:3e:31:89:20:e3:db:63:7b:72:07:da:48:d9:
                    40:4e:b3:1f:f9:cc:c4:03:52:ff:12:48:77:8c:93:
                    05:da:f6:0e:bd:7b:a5:56:e2:9e:8f:53:8d:4a:2d:
                    e0:dc:9b:2e:1b:b8:b2:6e:07:e4:f5:6a:7a:c6:a4:
                    40:27:51:d7:80:e1:52:68:9a:f6:52:d0:16:66:bc:
                    51:e7:08:92:4a:72:18:5b:80:57:a7:40:de:ca:c9:
                    b4:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:CD:1A:69:0F:C3:EF:6A:C8:90:BB:CA:36:8B:8A:60:B4:91:2D:E7
            X509v3 Authority Key Identifier:
                keyid:D1:0D:88:65:82:BD:DF:48:B0:41:85:1C:38:C0:B6:32:11:5F:5C:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/0Q2IZYK930iwQYUcOMC2MhFfXCE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/3c0aaQ_D72rIkLvKNouKYLSRLec.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:7800::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:d1:b6:a0:e1:ca:0a:1d:e5:ee:4b:0d:88:20:5d:75:1e:84:
         95:88:58:19:19:5b:b3:5a:22:0f:d1:3d:fe:cf:3a:b3:c6:4f:
         d9:c4:b5:04:30:56:1b:d5:e3:54:11:2f:47:ef:f3:eb:76:6c:
         e2:91:4f:31:bd:62:d0:79:d2:f0:6f:62:04:47:09:b5:05:1f:
         ab:9b:58:21:5e:04:a7:c2:e5:17:e5:c2:74:df:87:16:1c:95:
         66:81:52:a3:9d:ea:55:d6:3b:9a:37:44:d6:d2:cc:17:f2:ea:
         14:53:ce:c8:98:94:ed:6c:94:30:b0:7e:8b:8f:80:5e:de:eb:
         e1:93:63:91:51:39:17:55:40:94:50:74:1d:b7:fd:b9:04:60:
         e6:1c:f8:5d:2e:e3:7c:db:35:09:56:d1:6c:b4:d8:32:48:fd:
         f0:9c:4f:43:2e:e7:76:32:d7:37:61:13:f5:d8:ab:05:83:e2:
         29:3e:c1:3f:3e:4b:7f:8c:15:fa:70:43:a8:c1:15:b8:bb:75:
         13:aa:eb:14:15:bf:f9:ce:c3:93:a6:24:1a:4e:ec:af:79:f9:
         c2:41:96:50:a0:52:a7:81:7a:45:79:5a:c1:76:10:69:f5:0d:
         af:db:b0:d1:54:fa:9c:16:be:08:d9:63:1d:7f:71:48:35:f8:
         59:6e:e8:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 12:57:19 2024 by rpki-client on console-fra.rpki-client.org