Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30267/jcyHZf0dwXXvJH42tFiEnkMzr-U.roa
File:                     jcyHZf0dwXXvJH42tFiEnkMzr-U.roa (raw, json)
Hash identifier:          /peSXzQYSSygUPq6p31lNUkXpA+UPMn12APRJwaGwOg=
Subject key identifier:   8D:CC:87:65:FD:1D:C1:75:EF:24:7E:36:B4:58:84:9E:43:33:AF:E5
Certificate issuer:       /CN=AB99FE69A832191F847C33B243442E9D68AD1433
Certificate serial:       44
Authority key identifier: AB:99:FE:69:A8:32:19:1F:84:7C:33:B2:43:44:2E:9D:68:AD:14:33
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/q5n-aagyGR-EfDOyQ0QunWitFDM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30267/jcyHZf0dwXXvJH42tFiEnkMzr-U.roa
Signing time:             Sun 31 Mar 2024 01:30:10 +0000
ROA not before:           Sun 31 Mar 2024 01:30:10 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     14618
IP address blocks:        2401:af80:9011::/56 maxlen: 56

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30267/q5n-aagyGR-EfDOyQ0QunWitFDM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30267/q5n-aagyGR-EfDOyQ0QunWitFDM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/q5n-aagyGR-EfDOyQ0QunWitFDM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 20:13:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68 (0x44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB99FE69A832191F847C33B243442E9D68AD1433
        Validity
            Not Before: Mar 31 01:30:10 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=8DCC8765FD1DC175EF247E36B458849E4333AFE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5a:d9:d3:cf:7d:88:ad:04:92:09:ce:90:86:
                    ee:fa:4a:ca:0f:28:76:cb:7a:ee:75:8a:0d:a3:2d:
                    6d:63:c3:5c:f7:dc:a6:c0:0f:e4:dd:49:4a:f7:3d:
                    a7:de:4b:8d:47:04:b0:35:7f:9b:d1:8f:77:23:97:
                    d7:65:11:c6:4d:06:b5:69:eb:0a:1d:92:5f:7a:c0:
                    62:c8:ef:1d:e9:98:66:42:9d:17:e6:e9:2c:93:e0:
                    35:b3:9d:3b:2e:af:68:43:3b:86:43:68:5b:78:55:
                    de:40:90:91:d7:b8:cd:c9:d0:7b:48:4d:f8:92:0a:
                    18:22:68:1d:87:3d:58:06:e4:58:2b:f3:2a:d8:74:
                    da:89:ba:02:a4:08:8f:97:5a:dc:09:42:85:92:4e:
                    b7:8d:c2:f2:9d:63:03:7d:dc:b5:58:f7:af:6b:ce:
                    1b:a9:7a:34:4a:56:0d:02:d9:24:c9:25:61:0f:4d:
                    27:a5:03:e9:6b:c2:ce:e1:04:2f:50:f5:a7:fc:2a:
                    29:52:a4:3f:9a:c4:56:97:5f:93:97:fb:c4:eb:c7:
                    8f:23:3e:d8:94:6b:84:f5:51:78:25:51:bf:a0:51:
                    38:8c:1f:dc:1f:91:d8:40:50:a5:78:82:6b:5f:ab:
                    10:d3:f2:c5:59:d5:69:a0:c1:1e:6c:16:31:06:2f:
                    dd:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:CC:87:65:FD:1D:C1:75:EF:24:7E:36:B4:58:84:9E:43:33:AF:E5
            X509v3 Authority Key Identifier:
                keyid:AB:99:FE:69:A8:32:19:1F:84:7C:33:B2:43:44:2E:9D:68:AD:14:33

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30267/q5n-aagyGR-EfDOyQ0QunWitFDM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/q5n-aagyGR-EfDOyQ0QunWitFDM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30267/jcyHZf0dwXXvJH42tFiEnkMzr-U.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:af80:9011::/56

    Signature Algorithm: sha256WithRSAEncryption
         4d:9d:f2:9e:67:dd:8c:6f:7e:d1:0c:3b:64:94:5c:10:e9:55:
         d9:28:36:c1:8e:cc:24:c1:3c:f5:34:04:ce:cf:80:6e:bb:a5:
         8b:b4:61:8a:2a:41:df:f0:32:a9:73:44:60:f8:46:39:a3:a1:
         4c:42:d9:2e:40:1d:95:ed:1a:99:41:18:6b:e5:b7:9a:4d:46:
         ca:78:04:48:a2:21:e0:e7:88:0c:59:ee:8e:d4:2a:3d:02:34:
         b0:e5:cc:23:c8:35:c6:61:21:61:bd:99:16:2c:66:11:4e:48:
         77:87:d7:8e:96:2c:43:73:a9:2b:dd:3f:44:db:4d:2b:da:ef:
         cf:4e:ae:6a:09:5b:1b:97:51:cd:a6:cf:a7:7d:8e:b4:77:05:
         32:ab:48:fd:4f:38:6c:5a:ec:eb:14:91:f8:d5:cb:8b:46:1f:
         62:69:fc:ed:1c:b1:c1:1c:b8:e9:b7:c6:c6:b3:ed:60:4a:f1:
         41:a9:6f:f8:7f:1b:d6:9f:0b:9c:31:3e:8a:36:04:5b:7d:6d:
         52:30:64:8d:a3:eb:d5:69:36:33:07:41:73:e1:2d:c7:52:75:
         70:f0:bb:74:46:60:ac:95:b5:89:93:0f:7c:58:cf:18:1e:16:
         aa:86:a4:44:a7:45:f1:b2:5a:b5:e2:b6:30:ab:f2:2f:07:45:
         1f:dc:93:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:07:20 2024 by rpki-client on console-fra.rpki-client.org