Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30340/FIXLbXMyr_XHL9F7FW63VPM2Yd0.roa
File:                     FIXLbXMyr_XHL9F7FW63VPM2Yd0.roa (raw, json)
Hash identifier:          l1tMK20dCWOLL71GjErJuRVHK0qY8uCUxH0yRT+SZK0=
Subject key identifier:   14:85:CB:6D:73:32:AF:F5:C7:2F:D1:7B:15:6E:B7:54:F3:36:61:DD
Certificate issuer:       /CN=C0119CFB25B3886ED092938A864A5E911C557407
Certificate serial:       02
Authority key identifier: C0:11:9C:FB:25:B3:88:6E:D0:92:93:8A:86:4A:5E:91:1C:55:74:07
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wBGc-yWziG7QkpOKhkpekRxVdAc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30340/FIXLbXMyr_XHL9F7FW63VPM2Yd0.roa
Signing time:             Tue 19 Mar 2024 05:20:12 +0000
ROA not before:           Tue 19 Mar 2024 05:20:12 +0000
ROA not after:            Wed 19 Mar 2025 05:13:08 +0000
asID:                     24249
IP address blocks:        2404:df40::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30340/wBGc-yWziG7QkpOKhkpekRxVdAc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30340/wBGc-yWziG7QkpOKhkpekRxVdAc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wBGc-yWziG7QkpOKhkpekRxVdAc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0119CFB25B3886ED092938A864A5E911C557407
        Validity
            Not Before: Mar 19 05:20:12 2024 GMT
            Not After : Mar 19 05:13:08 2025 GMT
        Subject: CN=1485CB6D7332AFF5C72FD17B156EB754F33661DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:22:15:17:77:ac:b7:fc:1e:98:a3:9b:c1:65:
                    4a:9d:84:3b:6d:e4:85:e4:e0:5c:82:52:10:a8:b5:
                    35:fb:eb:4f:1f:b2:d3:df:71:28:a6:a3:b4:b1:45:
                    b5:4f:6e:9a:7e:63:7e:35:10:bc:e5:b6:5a:ab:9f:
                    ee:18:86:cd:f4:03:5a:e1:c5:35:f7:0b:5d:bb:df:
                    5e:77:13:46:3f:a6:62:ea:6a:2d:76:33:45:68:9d:
                    22:8b:fa:2a:24:c0:47:82:18:b0:8d:a4:8a:74:54:
                    58:b0:e3:2a:5d:42:e1:0a:78:4e:18:cb:cd:a1:d0:
                    d3:75:66:66:dc:51:cd:3f:40:aa:d2:08:eb:9b:ba:
                    3b:59:df:85:59:e9:69:1a:e7:b0:fb:db:e5:4b:be:
                    a2:09:bd:f5:7c:85:ae:17:3e:23:c6:07:23:00:5e:
                    4e:06:ec:4f:f5:91:2b:9f:b4:40:99:cc:e0:b1:3b:
                    b9:b3:48:37:64:64:4f:88:9b:a1:cf:64:be:57:4e:
                    23:ea:9f:35:45:a0:9e:eb:bd:e6:d3:68:ad:2f:50:
                    82:86:bb:ad:40:20:f8:b3:39:3a:b0:e9:5f:7e:4c:
                    64:ca:4b:e9:46:8e:82:90:60:9d:2e:69:f9:9a:21:
                    8d:85:23:88:b8:e6:50:12:6c:d6:24:b5:12:8c:63:
                    43:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:85:CB:6D:73:32:AF:F5:C7:2F:D1:7B:15:6E:B7:54:F3:36:61:DD
            X509v3 Authority Key Identifier:
                keyid:C0:11:9C:FB:25:B3:88:6E:D0:92:93:8A:86:4A:5E:91:1C:55:74:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30340/wBGc-yWziG7QkpOKhkpekRxVdAc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wBGc-yWziG7QkpOKhkpekRxVdAc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30340/FIXLbXMyr_XHL9F7FW63VPM2Yd0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:df40::/32

    Signature Algorithm: sha256WithRSAEncryption
         76:8c:82:ef:81:bd:3e:d8:7f:e3:95:8c:75:01:c3:29:2b:b3:
         73:33:43:e7:45:5a:76:e3:fd:73:3e:09:c7:7c:4f:99:74:07:
         a3:fd:21:25:cf:2c:48:68:e8:e7:b3:e8:5b:ac:14:a8:60:77:
         22:8e:39:6a:50:45:11:80:ac:e4:9d:de:33:bd:41:37:6c:88:
         12:05:46:72:63:b6:83:96:58:f6:45:30:52:c8:db:ff:33:c9:
         7b:1d:ad:79:3d:a1:38:1c:e7:01:8b:80:98:16:f1:58:04:b1:
         08:10:26:da:c9:47:78:05:88:fd:90:7d:66:5d:d3:59:b8:a2:
         ea:ff:8f:00:ae:f4:ee:b1:34:22:2d:9a:a0:f3:82:f5:a9:63:
         e4:a4:4d:55:5d:9a:79:e6:df:2e:b0:87:75:b6:34:f0:a9:a8:
         a7:00:19:d9:28:67:e0:85:e4:d5:0e:12:24:39:b1:f8:6d:73:
         34:50:40:37:20:ee:78:34:22:ef:a9:a5:78:08:e6:f3:65:62:
         e7:87:3e:df:84:2c:19:81:ef:af:67:bf:bf:9e:e6:78:a8:1a:
         a3:11:d2:cb:90:e0:7c:86:12:a1:e1:99:a9:4c:56:3f:ab:fa:
         93:a4:63:7a:46:ba:a2:c8:0e:33:e1:c7:7b:a8:03:73:c5:d7:
         ca:40:7b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:08 2024 by rpki-client on console-fra.rpki-client.org