Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30360/P6-ffseNZqNBI407QXA8BUNGyqw.roa
File:                     P6-ffseNZqNBI407QXA8BUNGyqw.roa (raw, json)
Hash identifier:          BU8ccJJvWU94/aeHuUlue2yuU+HmGmvLi1NIJnXahkU=
Subject key identifier:   3F:AF:9F:7E:C7:8D:66:A3:41:23:8D:3B:41:70:3C:05:43:46:CA:AC
Certificate issuer:       /CN=FD31644EFA52879E57FCE1026B05325FE2118D65
Certificate serial:       02
Authority key identifier: FD:31:64:4E:FA:52:87:9E:57:FC:E1:02:6B:05:32:5F:E2:11:8D:65
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_TFkTvpSh55X_OECawUyX-IRjWU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30360/P6-ffseNZqNBI407QXA8BUNGyqw.roa
Signing time:             Tue 14 Nov 2023 09:02:11 +0000
ROA not before:           Tue 14 Nov 2023 09:02:11 +0000
ROA not after:            Wed 13 Nov 2024 08:47:05 +0000
asID:                     23618
IP address blocks:        2405:fe40::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30360/_TFkTvpSh55X_OECawUyX-IRjWU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30360/_TFkTvpSh55X_OECawUyX-IRjWU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_TFkTvpSh55X_OECawUyX-IRjWU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD31644EFA52879E57FCE1026B05325FE2118D65
        Validity
            Not Before: Nov 14 09:02:11 2023 GMT
            Not After : Nov 13 08:47:05 2024 GMT
        Subject: CN=3FAF9F7EC78D66A341238D3B41703C054346CAAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:cc:44:cb:e2:2f:61:66:9a:cd:4b:e7:b7:fe:
                    4c:b9:84:fd:9d:bf:18:b0:00:5a:10:d0:7b:4a:e2:
                    ce:af:f5:0e:fb:e6:3c:cf:f7:3d:68:ff:db:f5:3c:
                    20:bf:4b:32:25:53:a2:ea:e7:36:47:e6:90:7b:b1:
                    1c:f8:a4:35:55:c1:29:0a:85:90:e1:34:ac:af:3f:
                    12:c6:51:85:68:2f:c6:54:3f:b8:56:b8:d6:09:1e:
                    65:e9:39:2c:7e:cf:0a:45:e4:44:01:11:25:b5:b2:
                    c8:8e:dc:e6:bc:74:99:75:a2:d9:db:71:d6:5b:2e:
                    22:2b:07:ef:1b:11:9f:18:f9:be:f9:35:e0:cd:0e:
                    8f:06:44:57:9b:1d:48:a7:ec:4a:c6:9b:08:cd:0e:
                    7e:a3:7c:a6:08:fc:d1:c9:d7:df:ed:90:7a:dd:4e:
                    49:0c:ba:a7:a3:a7:7e:e1:af:1f:c6:ce:6b:8b:14:
                    ea:e9:86:7e:b1:39:95:a1:47:a5:d3:65:27:e3:36:
                    14:3f:b4:98:f0:b7:bb:3d:19:b2:82:64:cc:cf:27:
                    d4:8c:24:29:4d:38:4e:aa:0d:3d:69:26:fa:bc:28:
                    02:c4:52:58:80:e9:56:26:ff:18:31:ba:51:bf:d3:
                    1c:2e:3f:b8:b7:3d:b5:f2:87:cb:3f:64:07:dc:63:
                    a4:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:AF:9F:7E:C7:8D:66:A3:41:23:8D:3B:41:70:3C:05:43:46:CA:AC
            X509v3 Authority Key Identifier:
                keyid:FD:31:64:4E:FA:52:87:9E:57:FC:E1:02:6B:05:32:5F:E2:11:8D:65

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30360/_TFkTvpSh55X_OECawUyX-IRjWU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_TFkTvpSh55X_OECawUyX-IRjWU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30360/P6-ffseNZqNBI407QXA8BUNGyqw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:fe40::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:d5:19:7a:7b:b5:0e:75:dc:dc:36:cf:6e:a8:6a:73:8c:c3:
         25:fb:2e:db:ca:d6:ff:6f:31:5f:b0:b9:b4:40:56:03:ce:d4:
         50:67:f7:4f:11:84:e6:47:14:ea:dd:ff:5e:0d:6a:67:bd:10:
         81:c2:c1:0e:4e:dc:14:b1:d5:7f:fa:cc:53:a7:a3:c0:db:f0:
         b8:8f:11:bb:7e:34:03:ef:a2:0f:ed:a5:10:23:2e:bd:b0:e5:
         55:0e:0a:1c:ae:29:6d:7f:82:b7:0e:50:a0:5e:eb:2a:20:3b:
         1a:31:1c:1b:5b:80:57:17:a6:b8:d3:d9:c7:14:1a:bb:48:db:
         d1:63:64:b2:5a:d0:5a:97:1b:e2:a2:2f:83:d9:32:84:35:33:
         7c:18:32:44:20:9b:05:97:5e:b3:45:77:44:0c:97:c3:f9:8c:
         ec:3a:d0:69:3f:ce:a2:c6:01:8f:1a:da:43:73:25:18:95:2a:
         df:e3:77:17:39:54:2a:9c:ac:70:70:23:16:a3:8a:10:61:e8:
         ff:af:9d:e6:c4:4b:e6:1b:ac:0c:64:d4:86:38:db:57:82:22:
         51:dd:e3:90:c7:f5:ac:fd:fb:02:bc:88:55:83:c6:d2:df:d9:
         d3:ed:a1:cb:d0:17:75:ba:7f:37:7e:32:2a:29:37:12:86:2b:
         11:17:af:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 03:08:53 2024 by rpki-client on console-fra.rpki-client.org