Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30247/RgvEsKsD7UvjdvQbeZEhrJXfAng.roa
File:                     RgvEsKsD7UvjdvQbeZEhrJXfAng.roa (raw, json)
Hash identifier:          cXjNWp4dxejpXgD5D2qgT8F+AiElYxKQt6MFVtyydZQ=
Subject key identifier:   46:0B:C4:B0:AB:03:ED:4B:E3:76:F4:1B:79:91:21:AC:95:DF:02:78
Certificate issuer:       /CN=D441672C555CFF0A58A8CF9AEEE7803264BF2D28
Certificate serial:       4D
Authority key identifier: D4:41:67:2C:55:5C:FF:0A:58:A8:CF:9A:EE:E7:80:32:64:BF:2D:28
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1EFnLFVc_wpYqM-a7ueAMmS_LSg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30247/RgvEsKsD7UvjdvQbeZEhrJXfAng.roa
Signing time:             Sun 31 Mar 2024 01:28:49 +0000
ROA not before:           Sun 31 Mar 2024 01:28:49 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     59099
IP address blocks:        2405:f000:150::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30247/1EFnLFVc_wpYqM-a7ueAMmS_LSg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30247/1EFnLFVc_wpYqM-a7ueAMmS_LSg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1EFnLFVc_wpYqM-a7ueAMmS_LSg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77 (0x4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D441672C555CFF0A58A8CF9AEEE7803264BF2D28
        Validity
            Not Before: Mar 31 01:28:49 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=460BC4B0AB03ED4BE376F41B799121AC95DF0278
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:14:bd:2b:49:90:e5:58:07:9d:a3:15:e0:ec:
                    ef:61:1d:48:1c:6f:95:06:ad:be:e1:e0:5e:71:24:
                    48:95:5c:c9:5a:ef:3d:eb:69:cd:54:6d:b8:c1:bd:
                    c3:12:62:7f:8b:85:e3:cb:02:4b:14:c7:73:b5:22:
                    88:69:13:42:7d:97:61:06:64:a1:69:7b:17:cc:65:
                    61:dc:90:b4:68:69:50:45:b0:8f:3a:47:10:8a:9b:
                    22:fb:2b:00:99:e5:5e:09:49:b1:26:ab:91:28:5f:
                    0b:f2:01:4b:d8:d6:bd:3e:7d:03:29:0d:a7:0c:bb:
                    4f:15:02:4c:49:bb:db:6b:72:b0:0e:38:b0:5d:4c:
                    d1:cb:b3:3d:7b:d5:b1:16:df:a3:da:0d:55:e5:8c:
                    68:40:04:39:21:a8:b8:f8:23:f2:14:ef:0a:23:c6:
                    8a:43:08:ff:66:2a:bf:0d:a2:c5:92:e3:59:81:10:
                    b1:9d:a5:fd:a6:7a:74:8b:8f:33:84:51:df:ef:c9:
                    b0:01:c2:39:f6:ba:61:19:b1:5a:35:c2:9e:87:20:
                    2c:32:61:0c:a8:5e:fd:3c:4d:a0:15:8e:24:cd:35:
                    a2:ef:2b:7c:6d:d0:a0:a5:ed:dd:7c:2d:43:c9:23:
                    0e:e7:06:20:f6:49:5c:04:f5:85:3b:cd:60:04:d6:
                    ff:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:0B:C4:B0:AB:03:ED:4B:E3:76:F4:1B:79:91:21:AC:95:DF:02:78
            X509v3 Authority Key Identifier:
                keyid:D4:41:67:2C:55:5C:FF:0A:58:A8:CF:9A:EE:E7:80:32:64:BF:2D:28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30247/1EFnLFVc_wpYqM-a7ueAMmS_LSg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1EFnLFVc_wpYqM-a7ueAMmS_LSg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30247/RgvEsKsD7UvjdvQbeZEhrJXfAng.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:f000:150::/48

    Signature Algorithm: sha256WithRSAEncryption
         87:5e:6a:2b:ee:0e:db:cc:49:f2:ac:9d:02:8f:df:e0:44:c8:
         76:33:ed:2c:31:c8:6b:c1:da:39:82:5e:ea:f9:c6:a2:3e:a3:
         01:8c:12:9b:d6:0b:f6:22:74:35:de:62:3d:fc:0b:96:ea:69:
         ce:e2:d7:01:14:05:4c:06:48:85:40:f0:43:f7:80:9d:a9:7e:
         2c:13:c8:63:aa:5d:de:bc:37:48:c4:4d:41:53:c5:53:5b:7e:
         2d:03:d2:33:d3:46:db:fb:8a:57:a1:1e:03:bb:7f:65:fe:44:
         1b:79:88:d9:21:b5:ce:91:f1:81:03:85:88:54:a0:57:10:69:
         9e:b4:26:7a:02:56:40:09:bb:af:38:bb:59:81:e1:a2:bf:f5:
         96:0b:bd:c9:eb:68:3e:de:bf:ff:ac:c6:77:f3:94:58:31:e7:
         40:7d:03:b6:cf:b4:e3:49:bf:c7:76:59:a7:2c:83:dd:b5:3d:
         99:ce:35:ba:11:e8:60:7e:f6:af:9d:12:0e:66:5e:10:e2:b2:
         56:1d:ec:11:b0:2b:d9:4b:7b:32:5b:10:57:d4:a9:94:72:ab:
         5d:73:84:76:26:ac:ae:9a:aa:bb:98:7b:dc:10:7c:c8:f4:eb:
         d3:0a:f2:82:a2:fe:b8:2f:a1:79:f3:e6:31:5a:39:97:9e:d2:
         04:94:6e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:45 2024 by rpki-client on console-fra.rpki-client.org