Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30278/ltbWORW5D27Wqaiqvk5ZF-ofjmU.roa
File:                     ltbWORW5D27Wqaiqvk5ZF-ofjmU.roa (raw, json)
Hash identifier:          StxDTB9jKt3esZP1nmyJsoTFiE42nSC5rhhzO+dF2nY=
Subject key identifier:   96:D6:D6:39:15:B9:0F:6E:D6:A9:A8:AA:BE:4E:59:17:EA:1F:8E:65
Certificate issuer:       /CN=0B362BBEE67B929BB502A2AD011A1AA7C00D57BB
Certificate serial:       0C
Authority key identifier: 0B:36:2B:BE:E6:7B:92:9B:B5:02:A2:AD:01:1A:1A:A7:C0:0D:57:BB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CzYrvuZ7kpu1AqKtARoap8ANV7s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30278/ltbWORW5D27Wqaiqvk5ZF-ofjmU.roa
Signing time:             Wed 13 Dec 2023 08:23:47 +0000
ROA not before:           Wed 13 Dec 2023 08:23:47 +0000
ROA not after:            Thu 14 Nov 2024 01:30:03 +0000
asID:                     37904
IP address blocks:        2403:c780:7201::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30278/CzYrvuZ7kpu1AqKtARoap8ANV7s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30278/CzYrvuZ7kpu1AqKtARoap8ANV7s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CzYrvuZ7kpu1AqKtARoap8ANV7s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B362BBEE67B929BB502A2AD011A1AA7C00D57BB
        Validity
            Not Before: Dec 13 08:23:47 2023 GMT
            Not After : Nov 14 01:30:03 2024 GMT
        Subject: CN=96D6D63915B90F6ED6A9A8AABE4E5917EA1F8E65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:13:af:40:4c:ab:fb:60:d1:de:ae:cc:c1:6e:
                    56:1d:2c:30:c3:ed:e7:5a:21:d6:12:f7:4f:bb:00:
                    8c:f2:4f:61:2a:88:f4:17:9e:d7:a5:15:fe:8e:1d:
                    25:c4:64:1f:47:2a:22:02:60:be:40:b5:50:78:15:
                    29:46:d6:e1:19:60:a4:94:59:a0:21:40:b8:66:c2:
                    8c:58:cf:df:81:17:03:a5:03:67:cb:61:4e:82:b4:
                    ee:7a:13:28:06:35:ac:16:33:b0:48:e9:b4:4d:1a:
                    84:7a:9c:51:fb:f4:ab:a4:21:1d:3a:fd:e4:24:fc:
                    cb:33:63:b5:ab:d9:e9:40:d1:4d:11:b8:b0:19:a3:
                    d0:63:0f:ad:cb:eb:ff:50:75:90:1d:fd:65:ce:b3:
                    e2:ac:e7:bf:26:1c:bb:6d:39:cd:57:36:7c:aa:5a:
                    06:e0:76:3b:d0:73:ba:c5:9e:c2:34:6a:98:3a:fc:
                    da:65:5c:62:ca:4a:45:9f:cf:b6:2c:3a:c7:a4:a0:
                    72:24:f6:1b:7f:c4:2a:88:9c:e3:d5:cb:16:43:86:
                    67:6f:41:3c:db:57:72:ef:ed:04:62:82:97:82:d9:
                    0b:d5:72:c7:92:c0:ff:37:14:e5:17:12:cb:be:d3:
                    14:20:c0:69:5a:fb:ce:05:31:c2:69:62:ef:2a:92:
                    a8:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:D6:D6:39:15:B9:0F:6E:D6:A9:A8:AA:BE:4E:59:17:EA:1F:8E:65
            X509v3 Authority Key Identifier:
                keyid:0B:36:2B:BE:E6:7B:92:9B:B5:02:A2:AD:01:1A:1A:A7:C0:0D:57:BB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30278/CzYrvuZ7kpu1AqKtARoap8ANV7s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CzYrvuZ7kpu1AqKtARoap8ANV7s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30278/ltbWORW5D27Wqaiqvk5ZF-ofjmU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:c780:7201::/48

    Signature Algorithm: sha256WithRSAEncryption
         69:f1:b2:6b:5b:e7:1e:a2:dc:bf:30:81:1e:fb:2c:05:de:ea:
         2c:e1:a1:db:08:7c:a9:1f:3d:73:d8:da:9c:23:75:b7:d5:7a:
         6f:da:f2:29:c2:5e:51:43:04:f0:9c:78:3a:93:50:d1:f1:4e:
         d4:8b:66:66:24:4e:c6:21:0a:68:8c:bc:c7:a5:27:76:74:f6:
         ff:3a:34:30:a1:0c:e8:4d:0d:cd:3f:ae:c7:68:86:86:40:0e:
         59:ec:4d:4f:8f:88:08:ce:5f:93:f7:b9:4b:22:82:3b:67:63:
         70:f4:e4:bc:df:04:0e:38:ae:0a:49:41:a8:be:39:48:18:c8:
         77:44:7d:6a:57:af:54:a2:ea:c6:db:1d:b2:02:2c:78:45:b2:
         f3:85:f6:36:1e:2b:93:28:5c:7c:7a:7c:6d:22:75:98:b0:8a:
         28:25:06:56:f8:be:9e:25:df:f7:06:92:bd:14:df:cd:81:2e:
         c2:f7:0f:f0:4d:d9:21:58:04:a3:bd:f2:79:e4:43:09:0f:a7:
         f3:bd:ba:52:ba:af:a4:41:9a:91:91:00:5d:95:6a:42:52:fb:
         9e:04:f9:76:86:30:73:94:81:c4:b3:37:82:5d:e5:d3:b4:75:
         71:bc:38:53:81:af:a0:02:b9:5d:d2:2f:c1:04:6e:79:49:f5:
         30:25:2b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 03:38:45 2024 by rpki-client on console-ams.rpki-client.org