Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30228/I1DC8SSTPHccbLSBaEnyadDNJyw.roa
File:                     I1DC8SSTPHccbLSBaEnyadDNJyw.roa (raw, json)
Hash identifier:          tFMPfWuCO6FS4SQpK5PeapByU+ja1IFZ2AnhT4yQRC4=
Subject key identifier:   23:50:C2:F1:24:93:3C:77:1C:6C:B4:81:68:49:F2:69:D0:CD:27:2C
Certificate issuer:       /CN=D10D886582BDDF48B041851C38C0B632115F5C21
Certificate serial:       6A
Authority key identifier: D1:0D:88:65:82:BD:DF:48:B0:41:85:1C:38:C0:B6:32:11:5F:5C:21
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/I1DC8SSTPHccbLSBaEnyadDNJyw.roa
Signing time:             Sun 31 Mar 2024 01:28:42 +0000
ROA not before:           Sun 31 Mar 2024 01:28:42 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     10010
IP address blocks:        2403:7800::/32 maxlen: 56

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/0Q2IZYK930iwQYUcOMC2MhFfXCE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/0Q2IZYK930iwQYUcOMC2MhFfXCE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 22 Jun 2024 01:30:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106 (0x6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D10D886582BDDF48B041851C38C0B632115F5C21
        Validity
            Not Before: Mar 31 01:28:42 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=2350C2F124933C771C6CB4816849F269D0CD272C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:80:aa:cf:fe:08:02:02:ca:83:80:26:e7:2f:
                    5b:b5:9c:26:00:dd:af:be:ec:0d:2b:96:e2:3e:35:
                    1c:bd:2e:e8:40:6f:e8:d1:5c:a9:f0:ad:1c:23:16:
                    86:af:eb:ba:b2:58:e9:14:13:8d:b2:06:ce:e4:5e:
                    3f:e3:7f:3c:6a:0d:99:f1:54:ba:a4:09:cb:4e:4c:
                    87:c6:a3:53:08:1c:63:f2:f5:18:d4:74:2f:90:32:
                    a4:0e:7c:e2:8d:8b:cc:92:cf:83:eb:ae:bb:cc:c6:
                    d8:97:cd:24:15:46:40:4b:35:e3:7f:71:5c:ef:c4:
                    08:31:44:70:c0:3a:43:bf:60:1a:87:0d:00:c6:6f:
                    5c:77:b0:ca:ed:2b:75:da:c5:1d:55:a9:5f:cd:0b:
                    a4:0e:84:02:e4:5d:7e:2b:cd:c0:4a:e8:b3:b6:3e:
                    39:05:5b:64:3b:a1:bd:70:fc:47:6b:e4:ed:6f:06:
                    a5:51:fb:f2:36:1c:f0:fa:81:fe:2b:fb:f1:89:b9:
                    3f:ac:ea:38:3f:90:66:b1:2c:d3:43:54:70:d7:e7:
                    53:ff:ef:48:fe:2f:c8:e2:0d:b3:b6:17:21:0f:ba:
                    d3:2b:df:c6:28:ed:7f:3e:d1:ab:42:74:89:f6:f2:
                    e6:d5:40:77:cd:73:3a:63:db:19:1a:e1:f0:fd:d2:
                    47:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:50:C2:F1:24:93:3C:77:1C:6C:B4:81:68:49:F2:69:D0:CD:27:2C
            X509v3 Authority Key Identifier:
                keyid:D1:0D:88:65:82:BD:DF:48:B0:41:85:1C:38:C0:B6:32:11:5F:5C:21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/0Q2IZYK930iwQYUcOMC2MhFfXCE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0Q2IZYK930iwQYUcOMC2MhFfXCE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30228/I1DC8SSTPHccbLSBaEnyadDNJyw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:7800::/32

    Signature Algorithm: sha256WithRSAEncryption
         91:1e:b0:93:9c:1c:d2:95:67:0c:32:fd:bc:b7:69:e7:49:82:
         84:6e:c3:f7:5c:2c:f3:c1:d5:ad:bd:20:bb:c8:be:6c:02:b9:
         54:10:c6:bd:42:4e:7a:09:14:ef:ad:bb:26:3f:cc:c6:13:3a:
         cb:8a:50:c9:c6:e7:ab:64:5a:d6:93:eb:c6:79:29:f1:c6:c8:
         d8:c9:69:a8:2d:1b:a7:96:cb:8a:c6:d6:2c:71:8e:e1:09:aa:
         93:e8:6e:d4:99:49:a6:2c:a4:99:f3:28:8d:ac:50:d3:f0:9e:
         c2:5f:56:61:d7:ed:f4:f8:58:e1:5e:b0:96:ef:b7:c1:61:0d:
         17:eb:4a:ec:ff:03:cb:8e:d8:56:15:e4:5e:05:c5:6e:a3:a3:
         e5:0b:60:d4:47:6c:18:d3:e5:d4:53:9f:bf:8a:f3:c5:0b:57:
         20:3c:c3:67:26:11:31:1e:fd:f4:f5:ce:55:6a:22:9e:8e:63:
         69:ba:61:cb:73:a2:08:9e:d2:55:81:a2:fa:28:c7:5b:9f:a4:
         d1:32:3a:11:f9:79:55:44:03:f6:71:e9:17:d4:e5:be:cf:63:
         c0:53:d6:1f:59:df:a0:bd:0a:bc:50:f1:93:f6:d8:6d:bb:e4:
         d1:3b:e6:4a:e2:1a:8a:f1:6a:b4:81:0d:38:fc:2b:a4:20:9b:
         91:2b:e2:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 02:01:40 2024 by rpki-client on console-fra.rpki-client.org