Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30349/a9MHAZkJVSfIJ7PQam7Am8ezX3M.roa
File:                     a9MHAZkJVSfIJ7PQam7Am8ezX3M.roa (raw, json)
Hash identifier:          U+BpGFxRSWaGdPzkzhl0/A1L0xJW+8k9p6kInWu+sBU=
Subject key identifier:   6B:D3:07:01:99:09:55:27:C8:27:B3:D0:6A:6E:C0:9B:C7:B3:5F:73
Certificate issuer:       /CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
Certificate serial:       18
Authority key identifier: 5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/a9MHAZkJVSfIJ7PQam7Am8ezX3M.roa
Signing time:             Wed 18 Sep 2024 07:24:04 +0000
ROA not before:           Wed 18 Sep 2024 07:24:04 +0000
ROA not after:            Mon 15 Sep 2025 01:30:03 +0000
asID:                     0
IP address blocks:        2405:25c0:af00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Oct 2024 13:49:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
        Validity
            Not Before: Sep 18 07:24:04 2024 GMT
            Not After : Sep 15 01:30:03 2025 GMT
        Subject: CN=6BD3070199095527C827B3D06A6EC09BC7B35F73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:db:89:09:b7:51:73:15:a1:f4:9b:21:ea:67:
                    af:4f:66:ad:82:e8:23:e6:6e:4f:08:1e:0f:f8:d7:
                    e0:2f:ef:29:c9:da:b3:86:86:89:6f:ed:9c:ac:49:
                    bc:43:06:a9:25:7e:00:c3:58:91:29:66:37:92:72:
                    1c:c1:4d:94:36:b4:85:f1:ec:bb:03:81:a1:b3:94:
                    54:15:8b:81:2f:53:fa:86:8d:57:c7:fc:8e:ed:ca:
                    d6:2e:07:3c:d4:48:a3:c4:c4:c5:c1:fa:0b:13:79:
                    73:8b:c8:d7:26:58:e8:15:0d:18:a7:95:4a:c9:3d:
                    f5:4b:87:97:43:0c:d0:7a:9b:f7:c9:fd:a7:8c:50:
                    0d:54:58:41:0e:69:96:22:3e:c2:a0:f6:25:1f:d4:
                    93:e5:69:e9:05:a4:0c:cf:81:23:6a:8c:d0:d6:cc:
                    9f:9f:43:e1:0a:34:d1:8d:79:83:ab:78:20:a0:11:
                    3e:e6:ce:02:41:86:cb:75:b0:f2:4d:16:af:0f:ca:
                    fa:08:79:11:bd:c4:58:66:5f:d9:52:3c:67:f2:d6:
                    84:a7:df:91:14:03:c0:0c:74:c8:c6:42:53:09:85:
                    ec:5f:d0:8c:18:95:01:06:49:64:ae:58:b3:47:a7:
                    b7:55:d4:1f:22:05:20:33:14:fd:24:98:8f:86:c5:
                    3e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:D3:07:01:99:09:55:27:C8:27:B3:D0:6A:6E:C0:9B:C7:B3:5F:73
            X509v3 Authority Key Identifier:
                keyid:5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/a9MHAZkJVSfIJ7PQam7Am8ezX3M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:25c0:af00::/40

    Signature Algorithm: sha256WithRSAEncryption
         58:68:47:fd:d3:f6:1a:17:54:87:3b:a2:43:d7:40:f3:29:85:
         93:e6:4e:5c:4a:20:50:65:d7:69:d1:c6:0f:6c:42:bf:7c:97:
         0c:1e:4b:ca:83:37:b8:eb:1b:eb:27:aa:d9:85:52:f1:17:da:
         82:9f:3f:35:ab:a9:66:01:28:4f:48:1d:4a:45:da:35:56:29:
         41:ca:77:df:9f:25:43:d9:11:79:44:8f:7c:36:d7:79:ab:41:
         e9:f6:01:1d:0c:16:6d:35:d4:e5:a5:be:a6:33:f9:69:e9:77:
         74:b4:bb:a4:51:a7:d6:f1:e1:43:94:91:b8:24:47:11:bc:16:
         08:2d:e3:18:ae:c8:7e:c4:0c:62:b8:f3:fd:1d:c8:d6:b5:e5:
         f8:06:dd:59:30:b2:fd:e0:36:c8:ba:8d:c2:71:e6:51:68:9b:
         a5:d5:26:17:b0:02:37:07:ed:f8:65:77:fd:d8:13:65:43:16:
         12:9d:ae:6d:9a:c1:f2:3e:4c:75:3a:17:35:b5:66:4d:7f:53:
         64:b9:06:b8:c4:dd:f8:d9:77:fa:0e:4d:fc:06:e1:1d:30:29:
         72:1e:81:eb:9d:2f:fb:7c:59:71:76:6e:84:64:46:3a:ae:4d:
         8b:c2:5e:bb:1d:56:7b:ce:65:e8:72:8e:41:2a:63:2d:b4:7e:
         28:b5:b2:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 15:00:05 2024 by rpki-client on console-fra.rpki-client.org