Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30349/LpYllIyoYeILKPzUrUx47G1AjIg.roa
File:                     LpYllIyoYeILKPzUrUx47G1AjIg.roa (raw, json)
Hash identifier:          ik7uaSVstyEjQ0TLO4ga3ceg70/vsbNp7wiZAkhlAN0=
Subject key identifier:   2E:96:25:94:8C:A8:61:E2:0B:28:FC:D4:AD:4C:78:EC:6D:40:8C:88
Certificate issuer:       /CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
Certificate serial:       1D
Authority key identifier: 5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/LpYllIyoYeILKPzUrUx47G1AjIg.roa
Signing time:             Wed 18 Sep 2024 07:24:06 +0000
ROA not before:           Wed 18 Sep 2024 07:24:06 +0000
ROA not after:            Mon 15 Sep 2025 01:30:03 +0000
asID:                     0
IP address blocks:        2405:25c0:f000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Oct 2024 13:49:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29 (0x1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
        Validity
            Not Before: Sep 18 07:24:06 2024 GMT
            Not After : Sep 15 01:30:03 2025 GMT
        Subject: CN=2E9625948CA861E20B28FCD4AD4C78EC6D408C88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:2e:46:8a:92:56:8f:af:26:94:cd:5a:8b:8d:
                    aa:b7:37:53:44:93:55:26:4b:61:0b:d6:13:c7:62:
                    f6:96:68:26:07:ce:1a:96:11:f5:5a:74:21:a6:a6:
                    85:ef:db:18:c0:2b:cf:1c:61:c2:0c:17:40:8c:0d:
                    ad:59:47:0d:95:4d:59:e2:96:d6:3b:3e:ad:17:8e:
                    7a:a7:e4:6e:81:65:24:55:79:ae:10:11:e6:d7:55:
                    29:19:a0:65:3a:03:26:c0:94:02:1e:69:fc:95:ec:
                    61:21:0b:7b:1a:d3:d2:6d:67:0e:77:0b:0f:34:81:
                    90:8a:96:b5:a4:19:3b:68:6a:44:31:ff:ae:1d:ac:
                    0a:9b:34:1d:28:1e:b8:0f:d3:06:ec:4b:5d:a2:a4:
                    58:75:1e:61:5b:ec:40:cd:fa:35:a2:40:cc:f8:09:
                    6a:cf:87:e1:d3:af:83:a4:f0:2c:53:93:1b:29:aa:
                    9a:5e:cc:15:0d:61:ad:3b:00:59:69:21:01:ca:27:
                    be:bb:c5:c4:70:bc:3c:4a:e5:2c:ed:e3:b3:d6:a8:
                    1e:e2:3c:fe:cc:20:d2:17:4a:d5:cd:52:36:24:53:
                    ca:59:dd:59:87:66:57:2e:4e:df:9f:90:5e:c3:99:
                    20:6b:df:68:7d:2d:19:9c:51:11:e9:4b:80:8c:30:
                    8f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:96:25:94:8C:A8:61:E2:0B:28:FC:D4:AD:4C:78:EC:6D:40:8C:88
            X509v3 Authority Key Identifier:
                keyid:5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/LpYllIyoYeILKPzUrUx47G1AjIg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:25c0:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         4a:5d:25:7d:2e:54:35:21:46:5b:31:34:94:60:e8:03:23:b8:
         94:53:a8:01:4c:f9:b5:91:00:ff:f7:38:6b:85:ab:ec:f6:6e:
         6b:9d:d7:e2:a1:8d:7c:2d:e5:da:8c:33:7f:9e:83:99:c1:68:
         a4:c9:92:f7:f5:78:89:6c:84:91:30:ab:1d:7c:ad:cf:c0:67:
         ef:1c:85:29:39:ba:a9:6b:79:c9:da:2f:0a:a8:e3:e0:63:4a:
         e6:db:d6:a8:50:22:d4:70:6d:6d:ab:52:e2:bf:a6:78:10:06:
         67:0a:8e:21:3f:dd:8c:5c:c4:ab:4e:6c:56:9c:44:e0:4c:09:
         d8:19:51:a3:32:73:f4:96:51:c2:05:58:a6:ec:20:eb:26:1d:
         f5:df:c9:04:ed:36:1b:f8:a8:a2:39:b8:b3:61:d0:59:e0:a3:
         0b:ef:31:2c:f8:85:4b:4f:a8:9e:0f:e5:0b:7e:81:f3:57:e9:
         51:8a:51:8a:0a:94:7b:f9:c7:2d:2d:71:da:91:19:27:5c:c7:
         62:fd:e8:a0:3a:04:61:87:1d:58:ea:4f:ac:4e:ab:09:82:07:
         44:e2:bb:31:00:78:10:1e:c7:f0:d7:b1:43:0e:8f:79:d5:36:
         c7:fd:d4:2e:f8:4b:50:2e:7f:42:f3:a5:34:ae:9c:3f:a6:46:
         35:44:0d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 15:30:39 2024 by rpki-client on console-ams.rpki-client.org