Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30349/ZCn2MTSdpdZmBU76h1OP2lFZt9c.roa
File:                     ZCn2MTSdpdZmBU76h1OP2lFZt9c.roa (raw, json)
Hash identifier:          nWzw3AwEolbIvPAI1kXxm7NJMndVANc9rkv70w/eXn4=
Subject key identifier:   64:29:F6:31:34:9D:A5:D6:66:05:4E:FA:87:53:8F:DA:51:59:B7:D7
Certificate issuer:       /CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
Certificate serial:       11
Authority key identifier: 5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/ZCn2MTSdpdZmBU76h1OP2lFZt9c.roa
Signing time:             Wed 18 Sep 2024 07:20:11 +0000
ROA not before:           Wed 18 Sep 2024 07:20:11 +0000
ROA not after:            Mon 15 Sep 2025 01:30:03 +0000
asID:                     0
IP address blocks:        2405:25c0:a800::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Oct 2024 13:49:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17 (0x11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
        Validity
            Not Before: Sep 18 07:20:11 2024 GMT
            Not After : Sep 15 01:30:03 2025 GMT
        Subject: CN=6429F631349DA5D666054EFA87538FDA5159B7D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:32:c4:1f:0c:f1:bf:c8:a5:be:91:67:de:e8:
                    4b:53:ea:3f:15:c9:da:3f:07:0d:c5:ab:96:93:a1:
                    3e:e3:d7:70:9e:bc:0e:bc:de:e1:b3:25:cf:6c:79:
                    e6:8f:ba:96:ff:1a:a7:fa:10:3c:c5:3d:04:de:05:
                    ca:5d:66:d8:ed:8e:ca:2e:52:a4:38:28:2c:b1:ec:
                    61:01:96:c8:2a:53:ee:a7:6d:45:1c:59:47:36:9c:
                    a0:a8:5c:c9:cd:e9:97:23:f1:3a:30:41:89:d3:51:
                    ad:b4:f2:68:5f:2e:dd:2e:06:79:db:f8:52:84:5f:
                    89:68:50:42:de:ad:7d:06:8a:43:c6:9c:df:ed:ed:
                    04:b6:66:c5:5d:62:34:c1:43:23:90:3c:31:f5:b1:
                    1c:d3:89:95:23:82:38:d7:2c:a7:23:d8:d7:63:d9:
                    9d:3d:fe:ba:c1:f1:66:02:58:a2:16:ed:f5:4b:bd:
                    02:c4:f2:99:a4:cf:10:ef:97:f2:26:21:68:a7:2c:
                    27:20:f6:a8:04:d3:5b:4d:23:68:7b:77:27:5f:20:
                    d6:28:f9:94:9a:59:8c:27:a0:4c:e4:d9:8f:1e:ad:
                    c7:97:bc:3a:49:01:25:3f:7d:b7:d6:9e:7c:0f:81:
                    1d:c7:24:5c:33:64:54:b6:f3:13:03:86:d1:33:3c:
                    8d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:29:F6:31:34:9D:A5:D6:66:05:4E:FA:87:53:8F:DA:51:59:B7:D7
            X509v3 Authority Key Identifier:
                keyid:5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/ZCn2MTSdpdZmBU76h1OP2lFZt9c.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:25c0:a800::/40

    Signature Algorithm: sha256WithRSAEncryption
         a7:f2:6f:eb:53:e6:e4:7d:61:4d:8b:d7:48:9e:da:79:e1:aa:
         85:3a:21:e8:3f:77:d8:11:37:e1:81:f1:bd:08:e0:56:92:0a:
         b2:bc:1f:ff:3f:1f:5b:56:58:bc:84:94:d2:65:55:83:24:9b:
         2a:5e:0f:34:e3:d3:b8:29:9c:d4:29:40:c0:35:9d:ca:8b:9c:
         b5:16:41:4e:0e:9b:1d:b9:c1:4d:6f:c1:fc:09:79:78:a8:ab:
         6f:72:d7:4c:c1:61:72:16:7c:02:42:b6:7b:a6:1a:34:8f:b4:
         ff:96:a3:cd:89:2e:02:fd:8d:d3:6b:43:97:8b:34:59:3c:29:
         8d:a3:5b:8f:4d:9c:75:ef:3a:8c:3e:33:7a:f7:b2:5e:ac:f1:
         e9:e9:e7:92:c9:52:6f:76:30:c9:3a:b5:7b:c6:9b:b6:cf:46:
         90:19:52:e6:56:75:76:3c:e8:f2:a7:43:aa:0a:89:5a:0a:97:
         d4:68:d0:dc:cb:b9:c8:6a:ff:ab:c6:3b:f0:32:57:c1:67:49:
         7d:b0:13:0e:61:44:2d:b9:3f:b2:78:b8:ed:59:ea:6b:59:a4:
         9f:10:02:f6:aa:37:0e:d5:bc:d3:f3:1d:8b:21:b7:6e:e5:aa:
         fe:f9:f7:2a:df:dd:9d:1f:2c:bb:46:6e:f0:13:82:f1:3b:42:
         9d:80:82:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 15:00:05 2024 by rpki-client on console-fra.rpki-client.org