Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30349/ZOElFpFoptRBIcvwprxPzyCIZsI.roa
File:                     ZOElFpFoptRBIcvwprxPzyCIZsI.roa (raw, json)
Hash identifier:          fzJoX/bhDwQHZ0FuwPY5kn3ktuw6g8Z01Ryviz5YarI=
Subject key identifier:   64:E1:25:16:91:68:A6:D4:41:21:CB:F0:A6:BC:4F:CF:20:88:66:C2
Certificate issuer:       /CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
Certificate serial:       19
Authority key identifier: 5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/ZOElFpFoptRBIcvwprxPzyCIZsI.roa
Signing time:             Wed 18 Sep 2024 07:24:05 +0000
ROA not before:           Wed 18 Sep 2024 07:24:05 +0000
ROA not after:            Mon 15 Sep 2025 01:30:03 +0000
asID:                     0
IP address blocks:        2405:25c0:b000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Oct 2024 13:49:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25 (0x19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
        Validity
            Not Before: Sep 18 07:24:05 2024 GMT
            Not After : Sep 15 01:30:03 2025 GMT
        Subject: CN=64E125169168A6D44121CBF0A6BC4FCF208866C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:be:58:34:23:bd:be:a8:68:ab:55:84:a8:8f:
                    be:ca:61:88:f8:ef:a5:3f:01:ad:45:c5:ab:e4:2c:
                    df:a8:e9:a2:1b:0b:10:23:64:2b:34:a2:ff:9e:cd:
                    5e:dd:9a:b8:fb:86:d6:06:22:80:c7:6e:03:6f:cc:
                    a8:fd:c2:55:9d:fd:22:d8:7d:97:e9:82:3b:eb:6a:
                    24:5c:a5:36:3d:a9:ee:d7:a4:09:2f:be:3f:c9:c4:
                    c2:64:3a:21:ce:2d:cc:1b:34:1f:72:12:11:07:9c:
                    0f:70:cc:be:35:66:e6:0a:73:19:a3:b6:9f:cd:68:
                    85:2f:3d:46:3f:22:1e:8b:59:73:18:06:92:88:2a:
                    f1:1f:78:f8:04:9e:4f:d6:2b:9d:e8:ab:90:5a:5b:
                    0b:43:94:e1:ee:ed:b9:a9:b1:42:c2:f8:e5:39:bd:
                    02:96:82:81:9b:8c:ed:51:24:a6:89:f0:49:4f:67:
                    34:5c:6c:ff:0f:43:f8:18:e8:62:6b:9c:d2:01:d9:
                    31:88:3a:66:2a:d4:d8:90:3e:3b:1c:6d:fb:49:95:
                    10:67:70:71:1e:04:e7:c9:ed:f7:61:89:dd:d3:6f:
                    c9:46:d4:8e:99:b5:e0:06:cd:cf:78:a0:e3:29:56:
                    75:f4:23:13:88:fb:49:85:6b:74:0a:09:da:89:2c:
                    12:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:E1:25:16:91:68:A6:D4:41:21:CB:F0:A6:BC:4F:CF:20:88:66:C2
            X509v3 Authority Key Identifier:
                keyid:5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/ZOElFpFoptRBIcvwprxPzyCIZsI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:25c0:b000::/36

    Signature Algorithm: sha256WithRSAEncryption
         a2:36:50:a9:aa:b7:ae:95:d9:81:97:77:2a:0d:3a:07:7d:d2:
         e7:da:18:db:dd:2f:76:63:00:df:fe:49:14:08:36:44:38:ce:
         89:6c:a0:a3:13:c5:b4:52:d3:1a:1d:47:3d:a5:b9:35:29:9d:
         a1:84:3b:98:32:85:5d:e4:fe:22:8c:41:46:67:a8:19:04:58:
         3a:17:de:38:3b:00:38:b2:61:4f:23:29:23:81:83:83:90:d9:
         f6:dc:49:4b:93:bc:db:01:72:de:b1:5e:6e:d9:c6:32:79:fc:
         1b:cf:00:d1:70:e3:e6:26:74:a0:82:f8:fe:67:e8:36:60:cb:
         b3:d8:18:11:87:ba:93:32:10:ca:22:63:99:04:ab:40:b1:aa:
         8d:61:9a:f2:62:da:1e:70:07:cb:8e:90:41:a5:83:1e:b2:15:
         16:a8:18:9d:5e:f3:55:40:1a:f1:19:ef:dc:63:09:60:9a:53:
         1a:b4:d5:f0:54:e8:cb:53:80:03:13:02:b3:ad:4b:04:28:80:
         f2:ea:25:4a:9f:5b:1a:60:4f:eb:7a:55:92:89:9e:7a:e4:1a:
         1d:bd:44:0a:2b:8d:23:a0:6d:bb:fc:19:3e:a2:af:84:a4:b5:
         bf:28:a1:13:38:a5:86:b3:46:0c:e7:ed:c1:d9:04:d0:b9:1c:
         60:68:4e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 15:30:39 2024 by rpki-client on console-ams.rpki-client.org