Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30349/CU6DPjZ9RTj92QKGY-sTdMTDB98.roa
File:                     CU6DPjZ9RTj92QKGY-sTdMTDB98.roa (raw, json)
Hash identifier:          BnIBiHlYg38lWd6htzIi5NseIwbONfku66f8ickHJac=
Subject key identifier:   09:4E:83:3E:36:7D:45:38:FD:D9:02:86:63:EB:13:74:C4:C3:07:DF
Certificate issuer:       /CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
Certificate serial:       20
Authority key identifier: 5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/CU6DPjZ9RTj92QKGY-sTdMTDB98.roa
Signing time:             Wed 18 Sep 2024 07:40:05 +0000
ROA not before:           Wed 18 Sep 2024 07:40:05 +0000
ROA not after:            Mon 15 Sep 2025 01:30:03 +0000
asID:                     131969
IP address blocks:        2405:25c0:a2f1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Oct 2024 13:49:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32 (0x20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
        Validity
            Not Before: Sep 18 07:40:05 2024 GMT
            Not After : Sep 15 01:30:03 2025 GMT
        Subject: CN=094E833E367D4538FDD9028663EB1374C4C307DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9e:7f:e4:12:6e:1b:91:fe:99:7b:08:fb:89:
                    4c:f2:d3:bc:64:cb:a5:e1:23:44:87:0e:6c:cf:df:
                    4d:4f:8d:bc:e9:c4:62:29:80:c4:11:32:a1:f0:aa:
                    e0:b7:34:8d:da:7c:e8:5f:3f:59:0b:f8:21:76:fc:
                    fd:fc:ea:b5:ee:ab:57:f6:a7:38:34:62:c5:a6:7b:
                    ed:22:f8:7a:12:01:6c:d4:e4:a7:db:d7:f8:2b:a9:
                    54:12:f5:2d:2a:80:43:94:a6:3f:26:2a:ca:c9:8f:
                    9b:c2:34:14:e6:f2:a4:39:9c:e6:a3:cf:a9:03:4d:
                    44:58:f4:ed:17:83:d1:8f:da:73:53:ec:29:9d:26:
                    a2:fe:4f:71:11:ed:6c:3f:3a:25:53:7e:d3:a1:dd:
                    55:87:f9:08:9f:8b:3a:5d:41:2e:53:a4:2e:8c:ee:
                    bb:87:5d:1a:f1:06:ba:2a:68:e3:bb:c8:8f:08:ba:
                    43:38:8b:50:91:aa:9a:ea:b6:4e:8f:d6:2b:f9:de:
                    b3:52:3a:8f:28:1b:70:cf:6f:b9:1d:be:f6:c4:e8:
                    33:82:e3:e6:a6:00:73:aa:ca:19:72:42:eb:cb:74:
                    d1:d0:9b:c9:be:fd:9e:a9:ee:1c:b4:39:23:01:5f:
                    cb:9c:10:7a:7c:b2:75:97:40:4d:65:62:d2:86:37:
                    b9:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:4E:83:3E:36:7D:45:38:FD:D9:02:86:63:EB:13:74:C4:C3:07:DF
            X509v3 Authority Key Identifier:
                keyid:5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/CU6DPjZ9RTj92QKGY-sTdMTDB98.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:25c0:a2f1::/48

    Signature Algorithm: sha256WithRSAEncryption
         a1:8d:52:24:aa:56:21:2f:48:d1:21:34:a3:b0:4d:11:ad:6c:
         04:a8:f7:80:33:8e:91:63:b4:b8:63:2d:51:a7:21:85:61:c4:
         32:b6:a9:82:b1:81:75:7f:fb:40:5d:19:66:81:29:14:cb:b6:
         cb:0f:25:f4:34:fd:e0:77:f9:6d:52:e1:63:4b:bb:30:5b:d6:
         dc:be:8a:02:41:e0:f2:fb:ae:e7:60:cc:47:87:89:f2:96:26:
         21:db:62:79:85:31:b7:4d:f1:c3:33:19:d8:22:bd:86:cd:ec:
         43:d8:36:0c:0c:50:1d:68:a6:e4:a7:7f:5b:7d:37:40:1d:87:
         76:d6:ea:6e:bd:e9:38:03:6b:70:38:35:63:08:bb:a0:59:60:
         e8:43:4d:0c:38:3c:14:61:af:4a:ba:7d:31:e0:59:b8:fd:27:
         25:ab:ab:be:e4:5f:b2:98:c2:3a:55:d9:18:a1:79:e9:15:2e:
         2b:7e:ba:ef:36:b5:9d:8e:1d:e3:cb:41:c7:a3:96:08:d8:46:
         37:72:28:bc:6c:14:5a:e1:e4:2b:ec:c1:de:2e:d3:da:3b:58:
         4b:05:ca:95:76:00:31:2f:38:0e:f1:12:a9:6d:85:50:64:4d:
         2f:f2:c6:c2:3c:42:4e:5b:8b:04:66:24:c3:04:7a:b8:3b:de:
         32:be:a8:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 15:00:05 2024 by rpki-client on console-fra.rpki-client.org