Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30349/vF6bBKrPoPUa-AbkHkKpMtRBXeo.roa
File:                     vF6bBKrPoPUa-AbkHkKpMtRBXeo.roa (raw, json)
Hash identifier:          JIXl/S6S9EMPgXnMZEl2cdQhd2ml/2ERY7jlXBG3SLE=
Subject key identifier:   BC:5E:9B:04:AA:CF:A0:F5:1A:F8:06:E4:1E:42:A9:32:D4:41:5D:EA
Certificate issuer:       /CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
Certificate serial:       0D
Authority key identifier: 5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/vF6bBKrPoPUa-AbkHkKpMtRBXeo.roa
Signing time:             Wed 18 Sep 2024 07:16:12 +0000
ROA not before:           Wed 18 Sep 2024 07:16:12 +0000
ROA not after:            Mon 15 Sep 2025 01:30:03 +0000
asID:                     0
IP address blocks:        2405:25c0:a000::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 20:13:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13 (0xd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
        Validity
            Not Before: Sep 18 07:16:12 2024 GMT
            Not After : Sep 15 01:30:03 2025 GMT
        Subject: CN=BC5E9B04AACFA0F51AF806E41E42A932D4415DEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fc:74:d4:fa:62:d5:c4:22:2d:50:67:0f:a9:
                    b5:7a:4e:36:ba:64:0f:03:3a:b8:7f:53:71:d4:a3:
                    40:f0:fc:80:1b:54:70:ff:15:a0:a1:95:15:63:d7:
                    cd:29:e2:43:be:29:83:61:4a:0c:e4:e2:07:a4:ec:
                    34:31:f5:e2:45:11:c0:26:35:08:d7:e7:e0:e5:14:
                    dd:c8:77:45:04:2e:46:16:cd:07:2a:cc:4b:3c:06:
                    38:52:1b:7c:86:8c:88:9a:7a:49:be:2f:be:1b:dc:
                    1a:43:47:66:7c:58:50:bb:53:b7:1f:6c:c8:5f:7a:
                    d1:aa:92:b3:62:60:24:89:ba:b9:d0:0e:1a:58:3f:
                    5e:5c:43:2a:78:14:13:33:79:df:fb:5f:90:8b:6c:
                    82:52:af:9a:50:00:b8:ab:96:a4:71:46:30:cf:70:
                    99:d4:47:4f:8a:19:3e:84:28:46:8c:12:3d:0f:69:
                    34:92:83:bf:9c:02:e6:01:df:04:c1:9f:86:af:8b:
                    6f:3f:93:b5:f0:4f:6b:60:1f:5d:68:3c:86:b2:79:
                    52:87:21:30:47:dc:d5:cd:cb:52:dd:05:b1:9d:fc:
                    36:64:af:d2:19:24:ba:90:f1:28:c6:de:90:19:e7:
                    c0:92:6b:73:7b:a5:e0:63:43:6d:99:55:c7:8d:a9:
                    cd:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:5E:9B:04:AA:CF:A0:F5:1A:F8:06:E4:1E:42:A9:32:D4:41:5D:EA
            X509v3 Authority Key Identifier:
                keyid:5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/vF6bBKrPoPUa-AbkHkKpMtRBXeo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:25c0:a000::/40

    Signature Algorithm: sha256WithRSAEncryption
         b4:d5:a6:18:8f:6f:3e:f0:7c:37:be:c8:b5:2a:39:2d:cc:46:
         82:db:63:5e:c1:da:64:d6:e5:57:46:25:a5:f7:c4:97:de:19:
         ae:8d:64:03:ea:9e:76:e3:d1:c8:96:26:82:e5:6e:57:a6:72:
         2e:27:bc:9e:12:8c:75:ac:1a:6f:cf:81:6a:cc:6d:65:de:57:
         63:7a:e8:fb:fe:b3:1b:1d:4a:23:71:e1:d6:f4:16:29:90:1c:
         d6:54:13:64:54:a7:43:07:72:73:5c:9a:dc:e8:3e:b1:58:ab:
         7a:83:a1:5a:d4:c2:1e:c6:19:bb:6a:bc:4b:c3:01:1d:c2:a5:
         44:94:d0:68:e6:51:88:fb:72:fc:d4:ab:c7:b5:6c:78:7c:1e:
         90:7d:e2:d4:8a:2d:28:ee:2c:dd:15:38:b9:0e:8d:32:42:55:
         d2:1f:6d:45:c9:d4:90:3c:f3:98:24:2a:eb:1a:f1:dd:4d:4f:
         58:9b:aa:9c:a3:5f:97:d5:cc:b4:8f:72:b7:35:3f:d0:ad:be:
         4c:28:16:71:b8:2f:2d:32:ba:9b:b5:ca:97:ae:11:9d:b3:b9:
         c2:07:57:6f:26:33:6a:99:31:ea:fd:22:77:fa:43:06:c7:bf:
         c0:b3:7c:2c:d8:3b:b5:c9:93:bd:90:58:fc:7a:73:a5:42:24:
         04:0e:f0:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:23:15 2024 by rpki-client on console-fra.rpki-client.org