Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30357/c386CtxXfMknRjTHmxBEl0gQeF0.roa
File:                     c386CtxXfMknRjTHmxBEl0gQeF0.roa (raw, json)
Hash identifier:          pgCR+TE4xnDJZ5a0CaG6zd/doHxLglTTjgR2Jn62Wd0=
Subject key identifier:   73:7F:3A:0A:DC:57:7C:C9:27:46:34:C7:9B:10:44:97:48:10:78:5D
Certificate issuer:       /CN=A147363993399A2355D9A8BC90FB61382A2E8C38
Certificate serial:       1E
Authority key identifier: A1:47:36:39:93:39:9A:23:55:D9:A8:BC:90:FB:61:38:2A:2E:8C:38
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/oUc2OZM5miNV2ai8kPthOCoujDg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30357/c386CtxXfMknRjTHmxBEl0gQeF0.roa
Signing time:             Mon 01 Jul 2024 06:40:04 +0000
ROA not before:           Mon 01 Jul 2024 06:40:04 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     38631
IP address blocks:        2400:dcc0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30357/oUc2OZM5miNV2ai8kPthOCoujDg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30357/oUc2OZM5miNV2ai8kPthOCoujDg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/oUc2OZM5miNV2ai8kPthOCoujDg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30 (0x1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A147363993399A2355D9A8BC90FB61382A2E8C38
        Validity
            Not Before: Jul  1 06:40:04 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=737F3A0ADC577CC9274634C79B1044974810785D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4c:9f:23:ce:d1:d0:60:1d:c7:18:b7:ae:40:
                    62:3f:38:13:34:5b:ba:82:10:8a:1d:65:9c:f2:f5:
                    fd:81:7a:bc:82:5f:55:c4:38:5e:f6:43:08:f1:c5:
                    08:60:69:f9:30:ea:c8:5f:22:68:db:68:e6:bf:7c:
                    d4:a9:f8:21:be:47:7b:fc:47:8c:06:e7:6f:73:1c:
                    0e:c3:29:7f:b4:e2:9b:76:1d:05:6a:60:79:91:1d:
                    c7:92:a6:da:4d:59:49:43:13:13:a3:60:f4:78:82:
                    a5:fb:95:72:9a:fe:95:4f:76:ba:a5:95:ea:9b:6f:
                    c8:1f:92:9f:f1:19:1b:30:17:db:fa:ac:3e:ce:12:
                    b3:60:69:c5:e7:57:7a:a5:67:73:7b:8f:df:e1:23:
                    b7:6d:80:8c:60:8c:7e:c4:a1:04:37:a3:b8:9c:1a:
                    d0:31:14:56:cb:d4:eb:f9:cf:08:8e:cb:fb:eb:60:
                    6d:68:5f:45:cb:1f:61:60:f1:1f:a7:0f:6a:11:5a:
                    88:a8:19:e9:2c:ba:bf:af:52:c8:9d:3d:7e:18:0d:
                    85:0e:0f:84:0a:2b:3a:68:da:ef:c4:96:f8:9c:e1:
                    b7:83:fb:92:45:4e:c5:12:82:64:c0:d1:e3:2d:ad:
                    4a:88:9b:28:0b:75:4d:af:31:e1:1e:0a:cd:d1:21:
                    7d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:7F:3A:0A:DC:57:7C:C9:27:46:34:C7:9B:10:44:97:48:10:78:5D
            X509v3 Authority Key Identifier:
                keyid:A1:47:36:39:93:39:9A:23:55:D9:A8:BC:90:FB:61:38:2A:2E:8C:38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30357/oUc2OZM5miNV2ai8kPthOCoujDg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/oUc2OZM5miNV2ai8kPthOCoujDg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30357/c386CtxXfMknRjTHmxBEl0gQeF0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:dcc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:3d:00:10:d8:d0:3f:8c:50:39:e4:94:81:b7:4c:a5:7f:b9:
         2f:7b:27:fd:5c:24:a8:6f:20:06:87:92:c0:09:2f:ae:95:cc:
         b2:04:ae:3e:9e:16:1f:46:18:b9:15:e1:c0:87:0f:61:43:0e:
         46:99:5c:e8:2f:b2:e3:ef:b2:cb:ea:c7:1b:a7:55:65:c1:86:
         a4:6f:f6:e7:bc:f5:1c:b7:cd:7a:2f:ce:83:8f:bf:45:bf:78:
         25:79:18:05:bf:d6:f6:21:64:f9:49:80:03:94:5b:71:30:0c:
         f0:86:4f:7c:50:f7:c2:2e:e3:61:3e:ba:81:7f:39:29:f5:bf:
         9d:58:dc:e1:5e:95:f1:31:03:85:20:3d:6d:66:87:5b:af:c6:
         ac:d3:04:f1:3c:9c:a3:e0:df:40:d3:46:c2:91:6d:36:49:f9:
         53:59:cb:d5:ac:fc:38:9d:be:e4:2d:b5:44:57:de:57:44:18:
         f6:4b:75:f8:f0:e1:51:bf:ee:81:b0:bf:71:ef:57:1c:55:f6:
         81:b8:fe:44:b0:8d:db:1a:65:1f:fb:f7:6e:71:53:e7:a1:25:
         32:0b:a3:05:e0:b0:a0:62:e0:a6:6d:bf:cf:e5:48:bf:05:8c:
         78:16:77:52:62:3a:77:28:17:38:8d:ca:b8:86:f6:ff:52:4e:
         90:30:40:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:32 2024 by rpki-client on console-ams.rpki-client.org