Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30349/8DY9AKFXs35oo7SR-kiCgiSnPFY.roa
File:                     8DY9AKFXs35oo7SR-kiCgiSnPFY.roa (raw, json)
Hash identifier:          Zni0OWj7NVg45ls855CW6duTctfI3qPoSPVzyHNJFuc=
Subject key identifier:   F0:36:3D:00:A1:57:B3:7E:68:A3:B4:91:FA:48:82:82:24:A7:3C:56
Certificate issuer:       /CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
Certificate serial:       15
Authority key identifier: 5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/8DY9AKFXs35oo7SR-kiCgiSnPFY.roa
Signing time:             Wed 18 Sep 2024 07:20:13 +0000
ROA not before:           Wed 18 Sep 2024 07:20:13 +0000
ROA not after:            Mon 15 Sep 2025 01:30:03 +0000
asID:                     0
IP address blocks:        2405:25c0:ac00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Oct 2024 13:49:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21 (0x15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
        Validity
            Not Before: Sep 18 07:20:13 2024 GMT
            Not After : Sep 15 01:30:03 2025 GMT
        Subject: CN=F0363D00A157B37E68A3B491FA48828224A73C56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:36:e7:25:08:a6:6b:5e:e2:78:78:c0:dc:89:
                    52:f6:35:c0:31:73:10:cd:72:d6:5f:f9:bc:db:a1:
                    b2:04:71:f0:1a:e2:40:37:de:9e:a8:d5:10:85:c2:
                    ed:17:40:52:21:eb:13:b3:ed:9c:d8:28:52:36:69:
                    13:a9:63:7a:1e:cb:04:8a:56:3d:7e:5c:82:ce:e6:
                    20:c6:d3:b1:6c:db:78:93:d5:de:72:85:56:45:0c:
                    39:31:f5:9c:e8:41:43:d8:92:cd:45:80:5d:1f:62:
                    b3:81:ef:f5:4d:4c:10:ce:d9:b0:70:70:9a:91:24:
                    d6:92:f6:2f:d5:81:85:c6:42:b2:c1:2d:f4:78:3f:
                    78:c6:0e:1b:de:65:33:a3:57:64:4e:48:fd:db:32:
                    78:9f:48:73:e6:2f:9e:24:df:5a:b4:10:6a:81:68:
                    52:bc:70:7c:e9:02:1a:46:61:e7:88:69:96:44:33:
                    83:b8:bc:b3:68:96:37:5d:89:7e:8c:cd:7b:4e:b4:
                    7e:1e:2f:05:7e:d1:0d:fd:e3:19:18:f9:0f:9e:da:
                    0d:8b:19:f4:88:43:41:07:fa:fc:89:d4:f1:a8:af:
                    c2:5d:1e:fd:e2:12:bd:61:8b:a1:b9:3a:d0:c6:a0:
                    e6:66:fb:a2:1e:4a:24:0f:24:5d:a2:49:07:bb:ba:
                    f1:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:36:3D:00:A1:57:B3:7E:68:A3:B4:91:FA:48:82:82:24:A7:3C:56
            X509v3 Authority Key Identifier:
                keyid:5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/8DY9AKFXs35oo7SR-kiCgiSnPFY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:25c0:ac00::/40

    Signature Algorithm: sha256WithRSAEncryption
         17:ad:73:f4:0d:aa:5e:47:5a:36:b3:19:2e:83:d1:a5:27:37:
         5e:7c:01:1d:92:f0:c6:b2:d9:14:62:e2:46:48:fa:de:93:5f:
         87:34:a4:fa:6f:dd:dd:3c:1c:30:de:d3:62:64:f4:9c:ab:e5:
         1c:d1:0a:45:40:67:70:ab:ca:9e:74:4a:e9:c4:93:d1:a3:dd:
         5c:8f:74:99:3e:e2:0c:15:f3:74:95:87:80:88:be:38:1d:22:
         1e:99:7b:e2:b3:6c:3d:a4:5b:49:9b:4a:f8:e3:ed:b2:22:d5:
         35:3d:ed:a4:2d:62:1b:22:2d:00:a7:01:96:f2:9f:bb:26:fd:
         bc:93:09:5d:28:f4:bf:27:54:29:5b:e6:16:31:8b:76:67:0a:
         bd:b4:69:14:d1:86:b6:c0:b3:53:fb:ca:be:28:df:82:bb:10:
         56:c6:25:28:00:34:55:f1:9f:c0:ac:87:62:3b:f4:dc:66:d7:
         d9:55:e8:ec:7e:bd:9e:1f:67:ab:25:b6:80:92:87:75:b8:4c:
         6d:96:a9:eb:17:3e:29:e7:1b:f6:8e:77:95:7d:4a:97:07:6d:
         df:5b:4c:fb:a2:1d:fe:02:aa:4d:ef:72:4d:41:56:18:f5:eb:
         83:77:8f:57:25:9e:fe:34:ca:75:7f:e2:39:52:0b:4c:60:a5:
         0d:ee:6e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 15:30:39 2024 by rpki-client on console-ams.rpki-client.org