Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30349/uifuwfU1QHDC3O4nntYLsUk65K4.roa
File:                     uifuwfU1QHDC3O4nntYLsUk65K4.roa (raw, json)
Hash identifier:          bDIk6kE49274Vt/CdAk3lOW97GPlBGWt+7njvLZ1PtA=
Subject key identifier:   BA:27:EE:C1:F5:35:40:70:C2:DC:EE:27:9E:D6:0B:B1:49:3A:E4:AE
Certificate issuer:       /CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
Certificate serial:       03
Authority key identifier: 5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/uifuwfU1QHDC3O4nntYLsUk65K4.roa
Signing time:             Wed 18 Sep 2024 07:08:03 +0000
ROA not before:           Wed 18 Sep 2024 07:08:03 +0000
ROA not after:            Mon 15 Sep 2025 01:30:03 +0000
asID:                     0
IP address blocks:        2405:25c0::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Oct 2024 13:49:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
        Validity
            Not Before: Sep 18 07:08:03 2024 GMT
            Not After : Sep 15 01:30:03 2025 GMT
        Subject: CN=BA27EEC1F5354070C2DCEE279ED60BB1493AE4AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:05:fe:e8:93:3b:d4:a7:e7:f8:38:76:06:bb:
                    56:af:4d:b9:d1:13:43:04:65:39:8e:4d:5a:bb:1f:
                    11:45:72:01:b4:80:09:e1:90:97:c7:db:f0:35:e1:
                    55:a6:26:9e:46:07:30:00:93:85:41:21:53:fa:7d:
                    08:9c:19:be:e5:3b:45:91:72:da:bc:17:66:4d:a2:
                    31:74:33:c4:25:f7:7f:34:8e:71:72:30:89:a2:24:
                    6a:19:db:86:11:0b:d4:72:ee:8c:f5:0f:2d:e1:10:
                    18:5a:d1:26:e4:6f:80:69:50:09:ec:0d:12:ab:8f:
                    4c:f0:10:c8:08:b8:0e:e4:4a:2b:f6:9d:31:0c:66:
                    5b:df:3f:48:48:95:86:0b:8e:e7:05:c0:04:e0:49:
                    ac:15:92:8b:ea:02:3a:34:57:f3:b5:c3:6b:86:0c:
                    1d:76:9f:24:af:f1:0e:e3:66:7d:f2:92:1a:73:71:
                    fb:ad:69:ba:72:c4:2e:15:3a:89:13:db:2d:29:5e:
                    37:26:22:81:c5:d7:65:e0:b7:3a:1d:13:51:6f:f5:
                    c1:1c:8f:e8:65:81:b3:c8:cb:83:ad:ea:79:73:e4:
                    aa:9a:e5:23:6c:cc:71:70:75:17:70:7c:de:78:76:
                    e6:7d:c4:14:54:b0:37:00:c6:6d:5f:9e:b1:e7:5d:
                    3f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:27:EE:C1:F5:35:40:70:C2:DC:EE:27:9E:D6:0B:B1:49:3A:E4:AE
            X509v3 Authority Key Identifier:
                keyid:5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/uifuwfU1QHDC3O4nntYLsUk65K4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:25c0::/36

    Signature Algorithm: sha256WithRSAEncryption
         24:44:4b:96:9b:1d:a9:fa:43:d9:a6:9d:3a:5c:b4:ec:e2:82:
         92:ef:68:b3:8f:53:82:c1:ec:17:f1:75:39:67:fb:1d:3a:19:
         ac:fe:a7:e4:74:ed:5b:9e:77:f9:90:1a:18:7a:8f:3e:2b:d0:
         44:c0:af:5e:4d:a6:59:58:a4:e2:68:36:c7:5f:c1:ee:44:cf:
         d2:1d:f3:9a:9c:3c:90:94:6c:28:b1:4e:df:fb:45:f2:82:10:
         e7:27:e5:96:c2:c9:65:c1:74:e3:d7:30:b2:ed:5a:f9:79:10:
         9b:a8:cb:b6:8c:9d:5c:22:35:4c:71:df:c3:2d:c8:eb:eb:a7:
         b2:7d:d7:7e:5e:cd:9a:dd:fa:10:f0:1d:04:ca:97:c0:22:71:
         e2:5d:63:92:04:c9:6e:9d:f9:64:90:01:d3:5a:d9:ff:d1:aa:
         26:b4:3c:18:69:95:d4:62:d3:62:bb:a6:56:88:5d:6a:e4:9a:
         71:b4:6b:5d:bd:74:e5:ea:cb:c3:1e:50:e8:55:fa:a4:2d:5d:
         38:e9:cd:b2:1f:b9:43:87:60:8a:b5:30:69:81:7c:74:c9:35:
         0b:49:95:b4:c3:9b:95:73:74:14:05:1a:7b:c4:dc:57:7e:a0:
         d7:77:54:02:0e:e7:b4:6e:26:f4:b8:80:6f:a0:41:c0:10:bc:
         1b:c8:87:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 15:30:39 2024 by rpki-client on console-ams.rpki-client.org