Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30247/Ot3g85Oy5ix1cAnII-etiguD6Ew.roa
File:                     Ot3g85Oy5ix1cAnII-etiguD6Ew.roa (raw, json)
Hash identifier:          Fc4RWTX2P8+oYPf/xv4U/nXwEXOQJbeMVQnMrMn62N0=
Subject key identifier:   3A:DD:E0:F3:93:B2:E6:2C:75:70:09:C8:23:E7:AD:8A:0B:83:E8:4C
Certificate issuer:       /CN=D441672C555CFF0A58A8CF9AEEE7803264BF2D28
Certificate serial:       4C
Authority key identifier: D4:41:67:2C:55:5C:FF:0A:58:A8:CF:9A:EE:E7:80:32:64:BF:2D:28
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1EFnLFVc_wpYqM-a7ueAMmS_LSg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30247/Ot3g85Oy5ix1cAnII-etiguD6Ew.roa
Signing time:             Sun 31 Mar 2024 01:28:49 +0000
ROA not before:           Sun 31 Mar 2024 01:28:49 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     7530
IP address blocks:        2405:f000::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30247/1EFnLFVc_wpYqM-a7ueAMmS_LSg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30247/1EFnLFVc_wpYqM-a7ueAMmS_LSg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1EFnLFVc_wpYqM-a7ueAMmS_LSg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76 (0x4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D441672C555CFF0A58A8CF9AEEE7803264BF2D28
        Validity
            Not Before: Mar 31 01:28:49 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=3ADDE0F393B2E62C757009C823E7AD8A0B83E84C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e6:ea:fa:e1:a8:4c:cf:33:01:5c:60:15:ff:
                    38:55:48:09:bd:ec:75:3e:3e:98:f6:d0:d8:f2:dd:
                    9c:db:31:ac:ce:aa:21:c6:19:f2:c7:8a:8d:52:a8:
                    a2:08:3a:14:0b:b6:62:06:b9:5a:7d:2c:ec:93:26:
                    59:65:ec:c8:b8:1b:01:e4:66:33:b9:f8:fd:97:90:
                    37:58:c5:b5:be:33:88:09:29:1e:01:d8:d1:28:c7:
                    48:c7:28:40:e3:ba:d5:4b:a5:26:97:d8:41:4c:3a:
                    2b:29:fa:dd:0a:80:9f:fe:b8:72:a9:65:16:72:38:
                    41:46:1a:cb:29:46:44:7e:03:ae:cd:32:eb:66:3c:
                    9b:fe:b2:fc:33:51:32:a2:41:52:79:4d:b7:9b:73:
                    33:13:46:b8:08:42:18:f8:f0:eb:09:4b:34:6f:ea:
                    29:b6:f1:cb:51:5b:98:82:c4:f4:9e:e2:b8:6c:60:
                    a9:b3:3b:51:87:83:ca:cd:24:e4:80:5c:1a:aa:51:
                    3b:40:f9:14:52:18:07:3c:f9:55:f4:b8:a4:3f:71:
                    c5:44:52:33:2b:19:23:09:d8:14:8b:3f:d5:21:02:
                    4d:c2:2f:81:e0:33:39:b6:c0:3c:f4:80:45:ba:73:
                    65:d9:de:56:91:c8:24:77:8b:a8:9b:1c:a2:37:92:
                    34:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:DD:E0:F3:93:B2:E6:2C:75:70:09:C8:23:E7:AD:8A:0B:83:E8:4C
            X509v3 Authority Key Identifier:
                keyid:D4:41:67:2C:55:5C:FF:0A:58:A8:CF:9A:EE:E7:80:32:64:BF:2D:28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30247/1EFnLFVc_wpYqM-a7ueAMmS_LSg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1EFnLFVc_wpYqM-a7ueAMmS_LSg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30247/Ot3g85Oy5ix1cAnII-etiguD6Ew.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:f000::/32

    Signature Algorithm: sha256WithRSAEncryption
         a4:a5:6a:9c:8e:12:90:db:5b:49:23:d4:fb:20:46:21:bc:67:
         71:12:db:f4:a1:ca:e0:ad:eb:cd:68:88:c9:8f:a2:f7:96:3b:
         56:29:00:dd:bb:23:73:29:ea:b2:a2:64:7d:e4:36:6c:07:cb:
         fa:3b:5c:75:71:ad:64:3d:71:59:54:e7:68:91:78:34:c3:8e:
         a1:90:c0:27:9b:f0:4c:07:3d:05:ab:fa:ac:bc:b6:67:26:5f:
         64:03:91:37:ea:86:bf:a7:f3:a7:75:a5:dc:bf:32:b0:16:74:
         fd:8b:94:c5:82:17:8a:1d:0d:7e:4e:7d:4f:90:16:69:d7:5f:
         f1:0e:20:0e:7c:6d:d5:e9:02:c1:45:2c:6d:1e:7d:71:3e:61:
         01:ab:95:1e:c3:b4:62:93:b2:23:8f:2c:34:ef:11:21:49:0e:
         d7:5f:1b:f4:9f:9f:d4:40:05:d1:19:7e:ec:3b:90:c5:b3:21:
         cc:c7:77:2d:3f:f9:e6:58:8a:6c:68:ea:58:38:17:96:37:b5:
         dd:6b:0d:0f:97:66:fb:d5:3e:bf:cf:82:f3:53:5b:27:21:3a:
         e3:90:27:73:b0:10:6e:f4:b2:aa:4d:f8:26:00:99:76:81:43:
         e8:b8:19:1d:ae:c8:8f:08:5f:5a:58:09:52:29:e7:f2:2e:ee:
         c8:d8:79:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:32 2024 by rpki-client on console-ams.rpki-client.org