Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30305/qUO9ukwQFVkCBXjoa8z8Qulx6QI.roa
File:                     qUO9ukwQFVkCBXjoa8z8Qulx6QI.roa (raw, json)
Hash identifier:          j3ZA0gw+loczuCNKJxGIhJN5u6uoRoK4W7/FE7G8HIM=
Subject key identifier:   A9:43:BD:BA:4C:10:15:59:02:05:78:E8:6B:CC:FC:42:E9:71:E9:02
Certificate issuer:       /CN=F9702167D1CAF36891642C8BB6206EBD407D4AA4
Certificate serial:       10
Authority key identifier: F9:70:21:67:D1:CA:F3:68:91:64:2C:8B:B6:20:6E:BD:40:7D:4A:A4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-XAhZ9HK82iRZCyLtiBuvUB9SqQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30305/qUO9ukwQFVkCBXjoa8z8Qulx6QI.roa
Signing time:             Fri 30 Aug 2024 05:45:49 +0000
ROA not before:           Fri 30 Aug 2024 05:45:49 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     15830
IP address blocks:        2402:c600::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30305/-XAhZ9HK82iRZCyLtiBuvUB9SqQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30305/-XAhZ9HK82iRZCyLtiBuvUB9SqQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-XAhZ9HK82iRZCyLtiBuvUB9SqQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 20:13:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9702167D1CAF36891642C8BB6206EBD407D4AA4
        Validity
            Not Before: Aug 30 05:45:49 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=A943BDBA4C101559020578E86BCCFC42E971E902
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:15:0f:08:24:2a:c7:6f:bd:7d:b2:23:17:98:
                    c9:65:43:1e:c3:ee:78:7a:4b:3b:0c:a0:0b:ac:e1:
                    3a:4c:80:ed:95:d5:bd:09:8a:b0:35:9c:91:dd:0a:
                    d6:8b:c3:f1:fa:0f:0f:8a:54:da:d8:25:f0:01:8a:
                    84:ee:e5:dd:df:05:c8:67:c5:2e:c2:9a:3d:af:2b:
                    d9:c2:41:3d:49:16:2f:59:bd:31:3f:b8:05:6b:d1:
                    78:96:4d:1a:48:e4:74:52:51:89:b0:58:09:3a:f6:
                    5f:e4:c4:39:43:06:ee:30:ef:5c:fe:9c:dd:20:e3:
                    cf:87:af:b4:37:76:95:94:90:6c:4f:7d:90:e0:c1:
                    9d:1e:38:75:26:f7:5f:d0:50:ab:aa:a2:7b:fc:d2:
                    8d:0f:48:e9:54:b3:96:f7:47:61:95:3b:46:a5:af:
                    f9:04:40:36:10:12:b9:b4:e7:63:c9:f4:11:e6:d1:
                    cb:0a:f9:a1:b7:dd:87:92:03:b1:32:ac:3d:86:87:
                    79:3e:98:35:f6:9e:86:63:4a:3b:83:c9:49:7e:7f:
                    6f:2c:c5:9d:e2:16:6b:4e:cd:03:a8:be:28:d7:27:
                    10:f7:ab:4e:69:84:b0:f4:14:69:fb:a4:00:d0:5a:
                    f7:af:bb:2c:be:29:75:14:7a:c1:48:5d:24:af:40:
                    d8:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:43:BD:BA:4C:10:15:59:02:05:78:E8:6B:CC:FC:42:E9:71:E9:02
            X509v3 Authority Key Identifier:
                keyid:F9:70:21:67:D1:CA:F3:68:91:64:2C:8B:B6:20:6E:BD:40:7D:4A:A4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30305/-XAhZ9HK82iRZCyLtiBuvUB9SqQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-XAhZ9HK82iRZCyLtiBuvUB9SqQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30305/qUO9ukwQFVkCBXjoa8z8Qulx6QI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:c600::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:e2:57:9b:48:9d:58:1c:28:8c:a8:6e:c5:c7:49:ca:20:c8:
         7e:c7:02:24:d3:96:8c:03:62:43:92:e3:d8:a7:67:2f:e5:4d:
         ed:f6:89:2f:02:75:b2:5e:21:d4:9a:05:0b:35:eb:98:a1:2e:
         5c:fb:ea:ac:96:72:79:ee:4e:36:15:c2:9a:0a:2a:22:56:dd:
         98:99:cd:dc:9a:93:dc:3f:bb:12:a2:2d:05:32:3b:08:5a:e7:
         07:8f:c2:dc:f6:25:33:88:88:8b:70:2b:a9:93:f3:09:89:6a:
         cd:6e:40:dd:d5:99:37:a5:22:d5:74:b5:58:36:f7:61:fd:c7:
         7a:ed:d4:7f:fb:e7:02:ee:f7:52:96:6f:48:e5:5f:08:9e:38:
         40:be:ea:b7:70:fb:59:41:e0:ac:65:77:81:e5:50:75:f8:26:
         b7:40:d6:31:a6:5c:25:10:28:27:c3:1a:e2:25:2f:7b:98:ad:
         cc:e5:ab:ec:01:3a:ed:b9:79:65:dc:7d:bd:11:2d:07:31:d4:
         dd:3c:94:31:3d:9b:33:8b:31:d6:ce:62:a2:2b:40:0f:15:c2:
         85:9a:f8:24:e2:07:53:95:71:a0:7b:12:33:01:47:6b:bd:a8:
         c7:db:72:6f:63:8d:64:99:95:4b:b3:76:3e:e3:69:d3:a8:45:
         cf:d1:88:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:33:22 2024 by rpki-client on console-ams.rpki-client.org