Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30349/1pGpqglCWp2efju-8iq2bZIoih0.roa
File:                     1pGpqglCWp2efju-8iq2bZIoih0.roa (raw, json)
Hash identifier:          nN4rLYADUlNDB//+4VR7V1nh9GZcBaB/Oc1XARXzlz0=
Subject key identifier:   D6:91:A9:AA:09:42:5A:9D:9E:7E:3B:BE:F2:2A:B6:6D:92:28:8A:1D
Certificate issuer:       /CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
Certificate serial:       23
Authority key identifier: 5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/1pGpqglCWp2efju-8iq2bZIoih0.roa
Signing time:             Wed 18 Sep 2024 07:40:07 +0000
ROA not before:           Wed 18 Sep 2024 07:40:07 +0000
ROA not after:            Mon 15 Sep 2025 01:30:03 +0000
asID:                     146986
IP address blocks:        2405:25c0:a400::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Oct 2024 13:49:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35 (0x23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
        Validity
            Not Before: Sep 18 07:40:07 2024 GMT
            Not After : Sep 15 01:30:03 2025 GMT
        Subject: CN=D691A9AA09425A9D9E7E3BBEF22AB66D92288A1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:87:85:58:cc:0e:c0:ae:b9:17:87:8d:2b:09:
                    f5:ab:b4:74:da:35:3f:bf:18:f4:23:06:92:5c:d5:
                    7f:67:ee:6b:82:2e:37:d1:c6:83:ba:1a:75:c7:2a:
                    37:2d:f6:1c:ae:db:ae:2f:83:5c:cf:ee:65:8c:7d:
                    78:3d:e4:dc:6a:9d:7e:3f:ef:3e:54:8e:a1:c6:1c:
                    fc:58:88:94:ef:77:99:7b:c3:bc:8a:84:7d:e0:2d:
                    e6:9a:63:2c:62:9d:13:74:3a:a9:de:eb:37:00:6e:
                    13:d4:c5:a1:7f:1b:9d:50:c5:3f:fc:cd:2d:7f:f0:
                    00:95:a6:67:7c:42:66:d5:9d:72:64:80:7a:40:28:
                    4b:cd:b8:82:ed:3a:86:93:64:5e:41:55:a4:28:9c:
                    50:aa:6b:ae:07:2f:49:35:ee:65:c4:f0:05:9e:14:
                    58:eb:38:64:42:a1:c7:f8:6b:43:3b:7a:3c:5e:15:
                    0c:94:1c:5f:09:a8:88:52:68:a7:28:86:a3:7d:b8:
                    a3:4b:ed:e7:98:d2:91:90:cb:4c:61:92:1e:b9:fd:
                    61:d2:22:be:35:c5:65:cc:7e:61:d8:15:6c:13:ff:
                    c9:d8:9d:e8:35:59:22:95:0f:66:2a:c0:7c:b9:69:
                    94:8d:d8:a2:d2:8d:14:f1:2b:0a:be:ff:cb:2e:7c:
                    a7:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:91:A9:AA:09:42:5A:9D:9E:7E:3B:BE:F2:2A:B6:6D:92:28:8A:1D
            X509v3 Authority Key Identifier:
                keyid:5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/1pGpqglCWp2efju-8iq2bZIoih0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:25c0:a400::/40

    Signature Algorithm: sha256WithRSAEncryption
         2a:95:24:1b:ac:ac:9c:f2:40:5a:7f:af:58:6d:5d:a2:39:08:
         1d:78:fd:5b:60:21:2b:48:5e:00:23:d0:c6:9a:00:3b:4a:b6:
         b4:3c:64:5d:43:89:32:22:19:4e:be:91:5a:42:61:bf:b0:a0:
         23:00:5b:b1:23:17:f2:94:50:b7:20:79:ce:f0:12:ab:56:42:
         fc:ad:d7:28:75:86:9b:90:a2:32:8a:51:d3:d8:d7:19:af:cc:
         da:ad:12:5d:04:a0:cc:6a:bc:d5:9a:c1:b8:c8:9e:a0:bd:56:
         97:53:11:4d:4d:bb:ed:5d:fb:65:71:15:f1:11:da:5f:6e:f0:
         ee:6a:df:83:93:c7:1e:6b:57:c4:7c:c1:40:3b:a9:05:be:1f:
         bd:1e:4d:2d:e1:14:bf:38:5f:0c:22:ce:84:a6:78:ae:62:63:
         33:47:bf:4b:e9:05:ee:3d:7e:c6:38:de:5b:db:db:12:3f:3e:
         60:f3:29:7d:da:f9:c6:76:48:9e:8b:81:99:cf:b1:ab:b8:fd:
         7b:5b:eb:a8:50:e6:2f:b9:37:96:74:cd:0c:87:80:71:93:d4:
         72:b8:1a:cd:c6:af:80:57:43:9b:58:7c:5a:4d:a7:8a:03:e5:
         c5:4a:f7:99:59:7c:6c:35:1b:9c:38:94:12:31:04:d3:31:f9:
         85:f3:af:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 15:00:05 2024 by rpki-client on console-fra.rpki-client.org