Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30272/sVrqBzMrXoZIpINLAWSL0wQqr10.roa
File:                     sVrqBzMrXoZIpINLAWSL0wQqr10.roa (raw, json)
Hash identifier:          zL9MmPeI2Q8QaG39AvPMJxCM6Pyq9LSYozVE5atzlQs=
Subject key identifier:   B1:5A:EA:07:33:2B:5E:86:48:A4:83:4B:01:64:8B:D3:04:2A:AF:5D
Certificate issuer:       /CN=5F468B31DB275A5DDAE7A549AC058DC20D7F8C9C
Certificate serial:       10
Authority key identifier: 5F:46:8B:31:DB:27:5A:5D:DA:E7:A5:49:AC:05:8D:C2:0D:7F:8C:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/X0aLMdsnWl3a56VJrAWNwg1_jJw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30272/sVrqBzMrXoZIpINLAWSL0wQqr10.roa
Signing time:             Tue 12 Sep 2023 01:18:00 +0000
ROA not before:           Tue 12 Sep 2023 01:18:00 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     17682
IP address blocks:        2402:1580:2000::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30272/X0aLMdsnWl3a56VJrAWNwg1_jJw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30272/X0aLMdsnWl3a56VJrAWNwg1_jJw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/X0aLMdsnWl3a56VJrAWNwg1_jJw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F468B31DB275A5DDAE7A549AC058DC20D7F8C9C
        Validity
            Not Before: Sep 12 01:18:00 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=B15AEA07332B5E8648A4834B01648BD3042AAF5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:54:ce:40:fd:3b:f8:58:1f:4b:52:c1:b2:c4:
                    34:51:01:89:45:36:8b:35:07:32:d6:73:24:a8:1a:
                    8a:ee:d6:9b:e9:86:ce:b5:98:94:30:ef:80:5b:01:
                    a3:1c:f1:12:aa:75:d7:76:5c:7e:6c:c9:4b:59:e2:
                    ac:12:85:0a:91:80:d8:8a:14:30:76:38:60:1e:a1:
                    5f:82:ac:dd:36:65:4b:a5:0f:e0:e3:f4:22:af:9b:
                    d3:9f:04:00:35:0d:2a:2f:7d:3e:bf:fb:06:76:13:
                    ad:39:fb:75:15:b1:4e:b9:e8:78:f5:f5:6b:0d:fd:
                    81:95:dc:ba:f1:8a:a4:c7:3c:fe:8c:3e:0f:4c:48:
                    c9:52:4d:4e:c6:7a:7c:0d:4f:f9:67:80:a5:f5:e8:
                    21:17:29:a2:46:5a:26:c8:26:3f:a2:ba:44:dc:23:
                    af:05:a9:e6:68:9e:50:27:c3:72:c6:23:ce:08:eb:
                    c1:e9:bb:57:ad:11:72:71:6d:8a:f5:22:00:0f:d6:
                    6f:34:24:89:4c:62:d4:b7:8e:5d:ea:ea:1c:93:d0:
                    e8:6a:af:b7:94:3e:82:69:08:c5:f5:fa:79:f5:46:
                    c8:c2:95:7d:c7:93:dc:93:8d:7f:6f:3b:b8:45:9f:
                    b9:f4:16:4b:5f:30:69:21:9d:60:ad:36:2e:c7:6d:
                    66:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:5A:EA:07:33:2B:5E:86:48:A4:83:4B:01:64:8B:D3:04:2A:AF:5D
            X509v3 Authority Key Identifier:
                keyid:5F:46:8B:31:DB:27:5A:5D:DA:E7:A5:49:AC:05:8D:C2:0D:7F:8C:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30272/X0aLMdsnWl3a56VJrAWNwg1_jJw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/X0aLMdsnWl3a56VJrAWNwg1_jJw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30272/sVrqBzMrXoZIpINLAWSL0wQqr10.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:1580:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         85:16:df:b5:92:bc:0d:f6:7d:89:3a:1c:af:ac:e1:4f:a5:ae:
         8c:16:f5:ba:11:d5:a9:b4:2d:67:30:6e:cd:c2:40:09:c9:26:
         8b:a9:4d:8d:1e:05:97:fa:bd:a5:33:11:45:1a:73:f2:20:91:
         36:3d:a2:3f:7d:f0:7a:45:6b:87:4d:cc:eb:08:10:37:22:35:
         20:cc:20:4a:f4:8d:df:01:4c:97:38:0b:f5:13:0d:e0:cb:85:
         27:f5:48:e7:4d:ae:e3:c0:e5:92:18:89:a7:44:f3:43:f3:ed:
         81:13:b8:50:46:17:1c:47:ef:54:0a:ed:c0:d5:b5:a7:b3:4a:
         8b:6b:2f:b0:39:1c:ae:0b:55:fd:e3:04:32:aa:7d:49:43:0d:
         af:60:bf:6b:7d:58:7d:0f:fb:df:94:22:c7:c4:b4:fb:f4:96:
         29:76:b6:b5:3a:d6:d0:f5:b3:48:d2:ef:6d:03:d0:01:bf:e6:
         b2:08:95:ab:39:9e:90:d0:85:ba:10:74:05:1a:1c:f3:4e:cd:
         b3:fe:62:a1:86:6e:10:29:8b:f9:b7:cd:ad:cc:f9:13:eb:cf:
         67:b1:9c:bd:bb:af:2b:1d:be:74:ec:da:84:83:b8:59:77:c4:
         a5:77:ad:6c:ed:c5:57:fa:69:1c:49:d9:99:5a:28:d9:96:f8:
         59:e8:ed:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 03:08:53 2024 by rpki-client on console-fra.rpki-client.org