Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30358/f40ZJYCYbwJHcQoEOa90jgcbnEY.roa
File:                     f40ZJYCYbwJHcQoEOa90jgcbnEY.roa (raw, json)
Hash identifier:          cO3xRM/bvfeXQkBgCxKTjeTcG4M2mO1lF1hHOOQtMHA=
Subject key identifier:   7F:8D:19:25:80:98:6F:02:47:71:0A:04:39:AF:74:8E:07:1B:9C:46
Certificate issuer:       /CN=6BAC2A0E3E5791799D19FB3BE007F1E84D869796
Certificate serial:       2B
Authority key identifier: 6B:AC:2A:0E:3E:57:91:79:9D:19:FB:3B:E0:07:F1:E8:4D:86:97:96
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/a6wqDj5XkXmdGfs74Afx6E2Gl5Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30358/f40ZJYCYbwJHcQoEOa90jgcbnEY.roa
Signing time:             Tue 01 Aug 2023 01:28:59 +0000
ROA not before:           Tue 01 Aug 2023 01:28:59 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     131898
IP address blocks:        2400:48c0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30358/a6wqDj5XkXmdGfs74Afx6E2Gl5Y.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30358/a6wqDj5XkXmdGfs74Afx6E2Gl5Y.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/a6wqDj5XkXmdGfs74Afx6E2Gl5Y.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 30 Jun 2024 06:27:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43 (0x2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BAC2A0E3E5791799D19FB3BE007F1E84D869796
        Validity
            Not Before: Aug  1 01:28:59 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=7F8D192580986F0247710A0439AF748E071B9C46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:4c:61:d2:1a:d7:72:fa:46:ee:73:da:fb:6f:
                    1f:86:25:20:22:1c:df:ed:dd:d9:48:51:94:bf:1a:
                    01:fd:61:e5:05:69:3a:ea:83:b8:fc:e0:98:31:a0:
                    47:48:4d:73:24:b0:b4:13:02:2b:d5:a9:46:e1:55:
                    14:7c:f7:b8:f3:db:4c:9b:8d:86:31:a0:c6:37:e4:
                    25:e7:74:9d:9c:cb:e8:2e:e2:c9:02:ba:94:1b:af:
                    86:62:5c:cf:63:cd:6f:f7:e5:63:44:90:11:8f:f7:
                    17:76:60:ec:0d:1b:f8:60:45:49:e1:8c:46:e8:b1:
                    57:eb:f8:9b:1d:ea:a1:24:b0:bc:21:5e:b1:e9:de:
                    c7:cc:74:8f:f9:de:90:7b:78:d7:b6:10:03:fc:b0:
                    0a:40:bc:ac:21:33:bb:60:8b:bc:8c:42:f1:e0:e7:
                    13:4c:01:02:07:d2:8f:91:12:5c:bc:e1:ee:2b:30:
                    aa:eb:97:14:38:4f:d1:43:6f:49:a1:01:46:8a:a7:
                    f2:b8:21:41:bd:73:a1:fa:55:2f:92:67:50:27:94:
                    94:0f:c9:62:46:b8:ee:5b:c1:b6:b1:22:9c:d7:22:
                    ab:dd:06:ba:0b:14:01:b2:20:3b:0a:96:a0:26:d3:
                    ad:6d:97:7d:08:a5:2a:9d:32:73:08:66:9d:c5:af:
                    bd:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:8D:19:25:80:98:6F:02:47:71:0A:04:39:AF:74:8E:07:1B:9C:46
            X509v3 Authority Key Identifier:
                keyid:6B:AC:2A:0E:3E:57:91:79:9D:19:FB:3B:E0:07:F1:E8:4D:86:97:96

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30358/a6wqDj5XkXmdGfs74Afx6E2Gl5Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/a6wqDj5XkXmdGfs74Afx6E2Gl5Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30358/f40ZJYCYbwJHcQoEOa90jgcbnEY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:48c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a5:1e:34:ee:fb:39:5f:97:67:cd:c9:88:a2:2e:ab:05:e2:2c:
         7d:78:39:f9:7a:9b:d6:9a:0d:58:3b:5e:1f:bc:eb:04:ef:f0:
         89:33:39:05:84:a5:4b:7b:a0:39:72:b0:83:11:41:c4:fe:45:
         d3:8b:65:1f:14:01:c8:4d:bd:ca:30:58:8d:ed:bb:c0:b3:93:
         e5:d0:00:99:fa:f3:26:6f:e8:dd:9a:dc:68:59:fd:57:59:a1:
         27:18:09:57:b2:43:90:56:26:3a:d0:f0:47:f9:af:e9:04:94:
         d8:8d:75:cc:ac:25:df:19:96:ee:c8:a8:2f:5f:fd:d1:d5:05:
         81:90:a1:4b:55:f1:4f:93:9d:d8:3f:ee:e2:96:ca:ac:af:78:
         59:0c:25:39:00:a3:71:a2:cc:80:16:a0:40:bc:61:c7:70:9a:
         83:17:ad:0c:7a:a0:8e:d3:c3:35:b6:85:85:9d:62:0a:e8:85:
         0e:4b:03:0b:1b:25:f6:89:e0:d3:27:e8:73:02:d0:a2:cf:09:
         82:10:b3:5c:cd:cb:55:81:19:f2:0a:4e:ef:ff:a5:6f:1f:58:
         22:ae:f6:4c:f7:f7:31:e6:3a:ea:d4:c8:b0:79:16:a2:ae:78:
         a9:20:06:3e:84:69:c1:e3:34:bb:b0:57:b9:bf:39:a9:a5:12:
         47:62:62:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 00:52:50 2024 by rpki-client on console-ams.rpki-client.org