Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30349/vTK8JP0AVzXOWjAUtPu_8LlE4FY.roa
File:                     vTK8JP0AVzXOWjAUtPu_8LlE4FY.roa (raw, json)
Hash identifier:          8pv2M3V+IHtvDUGslRoQfEnG/BNK9QZ/5KJ2WbCoHlQ=
Subject key identifier:   BD:32:BC:24:FD:00:57:35:CE:5A:30:14:B4:FB:BF:F0:B9:44:E0:56
Certificate issuer:       /CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
Certificate serial:       04
Authority key identifier: 5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/vTK8JP0AVzXOWjAUtPu_8LlE4FY.roa
Signing time:             Wed 18 Sep 2024 07:12:05 +0000
ROA not before:           Wed 18 Sep 2024 07:12:05 +0000
ROA not after:            Mon 15 Sep 2025 01:30:03 +0000
asID:                     0
IP address blocks:        2405:25c0:1000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 20:13:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
        Validity
            Not Before: Sep 18 07:12:05 2024 GMT
            Not After : Sep 15 01:30:03 2025 GMT
        Subject: CN=BD32BC24FD005735CE5A3014B4FBBFF0B944E056
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:6a:7c:af:ef:fa:6a:6a:ac:1a:25:f2:e9:fd:
                    e7:c3:51:c1:f3:30:d3:f1:11:d8:38:05:a0:34:a5:
                    c2:68:b5:6a:87:eb:12:33:63:87:25:d8:7a:74:fd:
                    63:e2:6c:6f:b3:ae:bc:d3:3c:a6:0c:57:34:75:e9:
                    a6:2a:89:a6:17:a4:77:2b:cb:be:50:ac:f3:dd:37:
                    0a:a2:00:02:43:07:78:b6:55:f3:ba:d5:44:23:c2:
                    d6:96:66:f4:c2:ac:e6:4e:80:12:7c:94:73:66:a2:
                    ef:a6:11:5c:39:45:de:5e:44:05:89:c6:c9:d2:5c:
                    b6:95:13:70:d5:c8:d9:eb:b0:29:a8:9e:35:22:01:
                    09:fa:2a:c6:ce:fc:03:08:a0:4c:f5:03:b6:88:3b:
                    06:ee:c6:80:8e:13:f8:32:25:3b:ce:c7:a3:f0:6a:
                    9c:31:5d:6f:b0:02:1b:83:c8:79:fa:8a:a5:10:f5:
                    e6:ce:02:ed:f5:12:a9:91:38:81:5b:0d:f3:73:cb:
                    d2:54:54:c7:e4:a1:2b:35:28:a9:fb:5a:8b:e6:ec:
                    dc:f8:65:e8:29:bd:7e:4d:78:75:c4:05:14:b9:bf:
                    7e:70:d3:ce:c8:27:8b:f5:7b:28:d6:2b:a9:0e:b1:
                    3a:26:b9:6a:55:c4:35:44:1f:8b:ac:18:aa:f8:42:
                    56:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:32:BC:24:FD:00:57:35:CE:5A:30:14:B4:FB:BF:F0:B9:44:E0:56
            X509v3 Authority Key Identifier:
                keyid:5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/vTK8JP0AVzXOWjAUtPu_8LlE4FY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:25c0:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         41:44:40:36:d1:43:3d:22:2a:bc:4a:35:d9:06:3b:41:73:f6:
         4b:26:f6:e1:f3:8b:01:3f:26:62:df:a0:ff:05:8c:cf:68:13:
         dc:19:66:e1:82:7d:5a:11:67:84:44:e2:8b:68:ed:c5:1f:41:
         2c:49:ec:2f:82:f4:0e:dd:c4:bd:a6:3a:93:3b:39:dc:65:aa:
         ff:fb:5b:74:44:c5:ad:fc:d2:df:6c:cf:78:1c:46:b9:80:58:
         09:13:d5:79:2f:a0:fa:40:fe:df:cd:43:56:8b:12:3a:32:58:
         b9:62:18:ec:a2:1a:42:85:3f:98:9b:e3:3d:f6:7d:28:5e:ea:
         1a:aa:6b:8e:5b:06:9e:30:fd:75:6b:95:a6:c1:20:75:50:7e:
         1d:b6:59:95:4f:66:4c:f7:ca:eb:78:ff:98:53:bb:49:76:a3:
         89:a6:f7:c4:6e:6a:46:31:46:c7:fd:d6:72:a6:70:62:4d:ba:
         9e:6e:7a:4e:83:95:92:b1:e9:8b:a4:9f:7b:da:8e:19:00:36:
         0b:3b:00:9a:a7:6e:a2:d9:ce:09:4d:c1:dc:b2:77:d1:26:f4:
         2d:88:af:7f:0d:67:c2:49:b1:6b:0d:f7:23:b1:62:97:5a:09:
         2f:b3:b0:ea:a7:f1:e4:fa:9a:b1:23:94:98:b2:39:0c:51:b1:
         77:78:c5:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:34:43 2024 by rpki-client on console-ams.rpki-client.org