Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30359/24qM09NdTdNTYYec820kwWlvXns.roa
File:                     24qM09NdTdNTYYec820kwWlvXns.roa (raw, json)
Hash identifier:          Vtt59R6rDihpCFOBrfuOpd+7dJW08/RTv5xHIueKTZo=
Subject key identifier:   DB:8A:8C:D3:D3:5D:4D:D3:53:61:87:9C:F3:6D:24:C1:69:6F:5E:7B
Certificate issuer:       /CN=675815DB7349C2ACFBC48AA75306520050C26248
Certificate serial:       39
Authority key identifier: 67:58:15:DB:73:49:C2:AC:FB:C4:8A:A7:53:06:52:00:50:C2:62:48
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z1gV23NJwqz7xIqnUwZSAFDCYkg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30359/24qM09NdTdNTYYec820kwWlvXns.roa
Signing time:             Sun 30 Jun 2024 01:31:45 +0000
ROA not before:           Sun 30 Jun 2024 01:31:45 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     55898
IP address blocks:        2405:8500::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30359/Z1gV23NJwqz7xIqnUwZSAFDCYkg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30359/Z1gV23NJwqz7xIqnUwZSAFDCYkg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z1gV23NJwqz7xIqnUwZSAFDCYkg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57 (0x39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=675815DB7349C2ACFBC48AA75306520050C26248
        Validity
            Not Before: Jun 30 01:31:45 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=DB8A8CD3D35D4DD35361879CF36D24C1696F5E7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:20:5a:65:d7:cc:9c:8e:77:92:98:c9:ec:14:
                    74:4e:d0:0a:e4:b9:47:3d:59:64:b8:7e:c2:b2:d2:
                    f3:bf:67:96:16:e1:33:6a:00:52:63:42:9a:b8:07:
                    da:67:6b:09:36:cc:a6:fb:74:11:69:d9:00:bb:78:
                    28:97:6e:44:2a:8c:f8:6a:f4:f8:cc:4f:44:4a:4c:
                    1c:d5:5c:02:7f:1b:2b:8e:55:48:53:d9:96:d8:77:
                    fc:85:d1:aa:fa:1f:ae:c1:ae:f4:f8:c2:00:a9:84:
                    7e:fb:50:20:e5:da:9e:70:0e:e5:04:9c:66:64:1b:
                    32:7f:cd:44:ba:6f:6e:3c:1c:84:3f:19:0e:0f:bb:
                    f6:1b:f7:1b:33:f4:6f:81:d8:1b:fa:f2:9b:36:de:
                    43:24:0a:93:b0:fc:2f:28:68:ae:8a:b1:d0:ae:29:
                    92:6b:03:9a:53:2a:30:b6:46:51:b4:07:dd:61:68:
                    c6:93:fa:15:3b:5f:d2:1d:1d:73:21:6d:be:0d:df:
                    5d:46:6a:82:04:4c:86:3d:95:c7:9b:12:4d:44:b7:
                    e1:83:74:60:7a:3c:0d:3d:1b:1a:c1:83:32:f6:fc:
                    d7:db:c9:7a:79:4d:ed:7f:12:d9:4b:a5:3a:d1:d7:
                    db:de:38:c9:29:9b:e2:67:f6:a2:44:25:44:94:9f:
                    06:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:8A:8C:D3:D3:5D:4D:D3:53:61:87:9C:F3:6D:24:C1:69:6F:5E:7B
            X509v3 Authority Key Identifier:
                keyid:67:58:15:DB:73:49:C2:AC:FB:C4:8A:A7:53:06:52:00:50:C2:62:48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30359/Z1gV23NJwqz7xIqnUwZSAFDCYkg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Z1gV23NJwqz7xIqnUwZSAFDCYkg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30359/24qM09NdTdNTYYec820kwWlvXns.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:8500::/32

    Signature Algorithm: sha256WithRSAEncryption
         a5:6b:f1:63:98:15:02:14:60:19:19:8c:e5:04:24:fe:4d:75:
         af:97:90:23:33:ab:2e:74:2d:44:c2:d2:4a:c8:c6:1f:ad:24:
         d1:ff:61:80:31:88:84:92:8e:b4:2e:45:fd:22:3b:68:0f:85:
         0d:28:6c:36:b9:c0:13:2f:9f:b2:5c:4a:21:73:3f:56:49:ad:
         3e:b6:a9:2a:14:df:93:e4:d1:37:25:2f:32:a9:0f:4c:9a:0e:
         a3:0c:bd:c8:0c:2f:36:c0:80:07:a0:56:c7:88:f1:02:f8:5d:
         d1:f9:b3:3d:66:c0:01:a8:ec:74:b3:6e:4b:c8:c9:5b:96:3d:
         d3:c6:ae:2e:14:0d:67:f0:13:a3:ec:71:d8:d0:c3:11:c6:f2:
         6f:5e:53:69:75:9a:71:cb:af:75:2b:6c:bd:37:4a:ce:b4:64:
         3a:3c:02:6a:d9:9f:19:ee:8a:ce:20:7f:51:ab:e7:57:f8:94:
         de:9e:08:ed:f2:11:1c:bd:97:e1:91:44:50:1c:a8:70:4c:5f:
         01:d3:81:ba:47:c3:fc:1e:a7:3c:b2:e5:23:a6:17:ee:72:41:
         d2:4d:9e:c6:de:5d:cb:7e:da:b5:95:c7:44:e4:dd:df:96:6c:
         20:7c:de:00:11:e3:0f:60:0b:db:ca:dd:3c:03:21:be:ed:0c:
         a9:18:62:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:08 2024 by rpki-client on console-fra.rpki-client.org