Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30349/QKipjVHfoNIJTAlKEfx42fp5Njg.roa
File:                     QKipjVHfoNIJTAlKEfx42fp5Njg.roa (raw, json)
Hash identifier:          xO2EpiWqrzCfiB2iZ/yZVNY5lAsJFG94Qmsmr7RNFzE=
Subject key identifier:   40:A8:A9:8D:51:DF:A0:D2:09:4C:09:4A:11:FC:78:D9:FA:79:36:38
Certificate issuer:       /CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
Certificate serial:       1E
Authority key identifier: 5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/QKipjVHfoNIJTAlKEfx42fp5Njg.roa
Signing time:             Wed 18 Sep 2024 07:28:08 +0000
ROA not before:           Wed 18 Sep 2024 07:28:08 +0000
ROA not after:            Mon 15 Sep 2025 01:30:03 +0000
asID:                     131951
IP address blocks:        2405:25c0:a100::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30 (0x1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
        Validity
            Not Before: Sep 18 07:28:08 2024 GMT
            Not After : Sep 15 01:30:03 2025 GMT
        Subject: CN=40A8A98D51DFA0D2094C094A11FC78D9FA793638
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:04:27:b7:ea:a8:58:b4:5f:b9:91:c9:b1:7f:
                    1e:33:0d:8c:8c:cf:f9:00:8c:1d:9a:a8:de:e1:73:
                    cb:ad:68:11:c3:e1:c6:f1:be:22:73:c4:88:de:f1:
                    79:47:b3:b0:9c:08:41:06:f0:5a:2e:c1:35:22:f0:
                    68:39:22:4a:78:7a:36:a8:df:65:1b:48:c3:c1:d9:
                    37:1f:e1:3c:00:fd:ed:81:8e:f0:3e:0c:bb:0a:66:
                    2d:86:34:be:c9:86:01:ff:0f:50:08:71:36:e5:59:
                    2a:fb:88:2b:45:d2:cb:8f:00:19:88:6e:89:96:b9:
                    04:3e:33:85:ba:8f:52:ad:91:2f:92:13:b0:49:49:
                    58:d3:b6:91:e9:b0:07:53:1d:92:cf:9d:61:fc:4d:
                    44:43:29:fb:af:72:7b:23:da:a0:d8:27:ea:cf:a4:
                    bf:5f:7b:ac:76:27:c8:77:16:75:b9:5e:da:7e:c0:
                    73:65:09:e3:e3:5a:50:3f:cd:0a:24:df:42:41:60:
                    e5:fd:30:e6:35:f0:b4:be:1a:74:a7:f8:ce:35:ad:
                    7f:65:dc:97:a8:c1:fc:66:08:bd:2d:cf:91:63:2b:
                    7a:c5:82:b2:34:0c:ae:df:85:0b:db:d0:b4:ee:ce:
                    67:9d:07:44:b5:8d:96:84:2c:c7:da:0e:10:8b:ef:
                    99:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:A8:A9:8D:51:DF:A0:D2:09:4C:09:4A:11:FC:78:D9:FA:79:36:38
            X509v3 Authority Key Identifier:
                keyid:5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/QKipjVHfoNIJTAlKEfx42fp5Njg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:25c0:a100::/40

    Signature Algorithm: sha256WithRSAEncryption
         14:db:9b:af:a9:3e:b5:8f:de:24:9a:5a:16:60:f2:e5:46:16:
         14:aa:70:96:8e:80:e7:12:ca:98:1d:85:9a:9b:2d:5b:23:2a:
         83:e9:85:8a:20:2d:07:0b:58:7b:b3:8f:d0:d0:87:f8:71:5b:
         21:1d:7f:7e:b2:93:03:6c:9b:48:bf:37:41:62:28:5b:fb:62:
         24:34:e2:9b:ef:35:00:ed:5b:94:50:bd:88:10:69:fe:56:5e:
         1e:f7:4d:a7:8f:87:35:5f:c9:29:ff:e3:00:14:8a:82:31:e5:
         05:b8:94:8a:de:1a:51:c5:69:d0:aa:85:2b:b3:20:d4:c6:30:
         44:f5:f5:6d:c0:ad:56:6c:86:92:2c:75:0b:9e:b4:76:0f:3f:
         50:dc:f8:e9:d7:6c:6f:72:92:6d:ca:b9:5e:64:b9:50:b5:26:
         d2:95:9f:ba:c5:f5:a3:93:79:47:41:a8:1b:22:03:8d:72:ba:
         5b:a3:13:bf:24:98:d5:bf:eb:bb:00:14:c5:9f:ad:ae:57:6f:
         9e:be:63:24:30:a1:40:e8:e2:80:7c:19:32:0c:72:99:4c:de:
         9d:41:18:aa:6f:74:43:f3:24:ab:64:48:84:36:a2:c3:54:66:
         9b:cf:ab:29:e6:69:52:8d:28:dc:65:81:64:56:ec:81:35:05:
         ac:c0:97:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:31:25 2024 by rpki-client on console-fra.rpki-client.org