Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30272/9yA2Vn-TBDMh2qhXSxvcCJYBgKY.roa
File:                     9yA2Vn-TBDMh2qhXSxvcCJYBgKY.roa (raw, json)
Hash identifier:          8/OxL24jwBfstGx7w1Hc8AvmqhRvfjDYyUEyaTeAGaA=
Subject key identifier:   F7:20:36:56:7F:93:04:33:21:DA:A8:57:4B:1B:DC:08:96:01:80:A6
Certificate issuer:       /CN=5F468B31DB275A5DDAE7A549AC058DC20D7F8C9C
Certificate serial:       20
Authority key identifier: 5F:46:8B:31:DB:27:5A:5D:DA:E7:A5:49:AC:05:8D:C2:0D:7F:8C:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/X0aLMdsnWl3a56VJrAWNwg1_jJw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30272/9yA2Vn-TBDMh2qhXSxvcCJYBgKY.roa
Signing time:             Wed 31 Jul 2024 01:32:03 +0000
ROA not before:           Wed 31 Jul 2024 01:32:03 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     17682
IP address blocks:        2402:1580:2000::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30272/X0aLMdsnWl3a56VJrAWNwg1_jJw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30272/X0aLMdsnWl3a56VJrAWNwg1_jJw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/X0aLMdsnWl3a56VJrAWNwg1_jJw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Dec 2024 00:11:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32 (0x20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F468B31DB275A5DDAE7A549AC058DC20D7F8C9C
        Validity
            Not Before: Jul 31 01:32:03 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=F72036567F93043321DAA8574B1BDC08960180A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:37:91:be:05:28:ff:47:a6:80:5b:ca:db:46:
                    df:aa:d4:1b:c1:80:45:8d:25:2c:d0:c8:09:e5:25:
                    02:d6:3a:ed:b2:cb:6f:55:9a:29:9d:3b:9c:ab:ce:
                    df:2d:d3:fd:15:59:40:9a:4a:bf:c2:d7:2f:28:80:
                    e8:63:c8:68:bf:96:67:61:f6:aa:9c:9f:51:f4:4b:
                    6a:91:23:e7:99:b4:12:c9:d0:29:88:ac:0b:1f:20:
                    ec:58:78:dc:72:10:04:53:9e:34:25:78:b6:ae:a8:
                    8a:df:c4:4b:e7:cd:38:b0:08:a6:3e:81:f9:d6:28:
                    7f:6d:e5:c7:1e:05:9a:5b:12:f0:ed:7a:72:4c:16:
                    4b:09:4e:56:63:2c:1c:6f:85:45:37:1f:a2:91:76:
                    0a:b3:be:fb:15:0c:80:2a:42:2d:8d:69:85:9c:48:
                    6e:05:43:ad:93:39:c0:ac:76:1e:b9:da:b2:3e:43:
                    15:cd:e8:2e:73:97:5f:64:9e:02:6e:da:5d:94:b8:
                    80:32:13:06:ed:5c:4c:b6:f2:7f:53:43:d4:cf:df:
                    57:50:22:71:e1:e4:01:66:4a:18:e3:ff:75:5f:ce:
                    7b:68:e7:f9:52:2d:69:c3:87:cf:88:e6:bd:96:3b:
                    70:f3:93:a1:cd:ec:81:0e:dc:f0:28:4b:6d:5b:fe:
                    98:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:20:36:56:7F:93:04:33:21:DA:A8:57:4B:1B:DC:08:96:01:80:A6
            X509v3 Authority Key Identifier:
                keyid:5F:46:8B:31:DB:27:5A:5D:DA:E7:A5:49:AC:05:8D:C2:0D:7F:8C:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30272/X0aLMdsnWl3a56VJrAWNwg1_jJw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/X0aLMdsnWl3a56VJrAWNwg1_jJw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30272/9yA2Vn-TBDMh2qhXSxvcCJYBgKY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:1580:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         86:00:cb:dd:d2:dd:ee:2d:b6:69:6b:31:6f:8c:30:01:cd:af:
         6f:10:24:6a:e6:f3:d9:cd:48:5f:c2:3a:25:1e:1e:21:62:98:
         d1:22:5d:40:1b:11:d1:53:b0:13:f7:1c:a4:b0:0d:fd:77:fe:
         3b:45:91:88:96:85:49:d7:a2:aa:29:cc:bb:b9:18:7c:5f:31:
         74:ae:c8:7f:d4:83:b6:50:ca:cf:7d:e5:5c:1b:52:94:42:52:
         2a:d7:e5:f5:d5:1c:2b:db:24:90:8b:72:83:c2:f1:a1:1d:1e:
         cc:59:82:a8:66:c6:eb:ae:f2:6b:a7:64:7e:b2:03:3d:1f:6b:
         cd:55:4c:8b:0d:37:fe:d0:c3:2e:b4:5e:26:5a:4a:30:4b:82:
         64:16:dc:f6:9d:20:c6:73:7c:e9:5c:0e:a7:ad:37:8d:3d:98:
         fd:20:2d:c5:04:9d:b5:9e:10:41:8c:dd:e1:76:29:6b:0d:1f:
         d2:4f:02:a7:41:89:8d:77:b8:b3:ba:fc:94:92:e0:b9:14:a6:
         25:65:d7:91:8c:90:c0:6f:26:9a:f5:67:c8:2e:85:00:d8:1d:
         3b:f6:0b:c8:ed:f1:e3:22:25:dd:33:a5:98:5b:be:10:14:17:
         6f:4e:24:cd:8e:15:53:88:b7:53:57:3f:03:03:c9:c2:3e:e2:
         e7:b1:95:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:27:06 2024 by rpki-client on console-ams.rpki-client.org