Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30366/L8E8_u1vR3kI-iw2OjqEGtKcozs.roa
File:                     L8E8_u1vR3kI-iw2OjqEGtKcozs.roa (raw, json)
Hash identifier:          38Vs6uz2+D913GS+RMDA4okX7EUaCD73lBMKDIyd9pw=
Subject key identifier:   2F:C1:3C:FE:ED:6F:47:79:08:FA:2C:36:3A:3A:84:1A:D2:9C:A3:3B
Certificate issuer:       /CN=19491CF138EC55823C7D3BE1B2EC1E4C80D5F2E5
Certificate serial:       02
Authority key identifier: 19:49:1C:F1:38:EC:55:82:3C:7D:3B:E1:B2:EC:1E:4C:80:D5:F2:E5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GUkc8TjsVYI8fTvhsuweTIDV8uU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30366/L8E8_u1vR3kI-iw2OjqEGtKcozs.roa
Signing time:             Tue 04 Jun 2024 01:17:09 +0000
ROA not before:           Tue 04 Jun 2024 01:17:09 +0000
ROA not after:            Wed 04 Jun 2025 00:59:56 +0000
asID:                     24262
IP address blocks:        2406:9b40::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30366/GUkc8TjsVYI8fTvhsuweTIDV8uU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30366/GUkc8TjsVYI8fTvhsuweTIDV8uU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GUkc8TjsVYI8fTvhsuweTIDV8uU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19491CF138EC55823C7D3BE1B2EC1E4C80D5F2E5
        Validity
            Not Before: Jun  4 01:17:09 2024 GMT
            Not After : Jun  4 00:59:56 2025 GMT
        Subject: CN=2FC13CFEED6F477908FA2C363A3A841AD29CA33B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:50:01:3f:9e:b0:40:64:7b:eb:c5:7b:2a:a0:
                    54:00:95:21:09:c1:a6:f6:ef:42:96:76:88:f8:11:
                    d5:83:ae:02:7d:70:0e:74:78:37:e8:d4:2f:eb:32:
                    35:fd:e4:63:c0:d6:56:87:d0:58:5f:7a:8a:e8:5d:
                    be:ac:b8:e7:2e:3c:5f:65:76:f7:d9:b7:23:22:b3:
                    a3:0d:4c:18:76:d5:98:d7:cd:ad:d1:ec:c7:f9:c5:
                    30:b7:67:94:09:38:df:fd:d6:09:87:1c:39:28:78:
                    8a:bf:5f:99:20:4b:95:57:85:cd:24:ba:34:e4:ef:
                    88:5f:83:59:88:3c:11:25:a3:53:d7:30:93:20:c3:
                    d5:3b:1f:cb:b2:79:dc:6b:e4:3f:f7:23:2a:db:b3:
                    bf:b0:f4:bf:24:5a:15:51:b3:b0:f4:ad:db:d4:83:
                    e1:f1:ef:16:50:e1:fb:40:3e:3c:df:84:25:5f:0a:
                    20:5c:91:85:4b:eb:01:00:26:d0:20:9c:cd:80:4a:
                    65:cb:43:a0:76:f3:fe:81:cb:f9:57:9a:4a:c6:f0:
                    49:6f:cc:fc:1e:12:44:53:4d:a0:53:f8:35:9f:4f:
                    a0:c9:74:e6:ed:87:a3:fd:1a:59:6c:a9:b6:26:95:
                    54:61:1d:20:70:7c:3f:24:6a:9a:9a:45:93:25:22:
                    6f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:C1:3C:FE:ED:6F:47:79:08:FA:2C:36:3A:3A:84:1A:D2:9C:A3:3B
            X509v3 Authority Key Identifier:
                keyid:19:49:1C:F1:38:EC:55:82:3C:7D:3B:E1:B2:EC:1E:4C:80:D5:F2:E5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30366/GUkc8TjsVYI8fTvhsuweTIDV8uU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GUkc8TjsVYI8fTvhsuweTIDV8uU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30366/L8E8_u1vR3kI-iw2OjqEGtKcozs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:9b40::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:6a:0c:3f:83:6b:d2:fb:49:13:a9:ed:69:f5:cd:e5:4e:b7:
         97:75:8c:0e:ae:94:f2:34:ec:f7:14:db:ea:42:a2:e8:a4:14:
         96:a7:cb:3f:9f:e7:0f:32:9f:61:9b:5a:02:a3:a1:b1:fd:9a:
         de:45:59:87:b5:56:dc:8c:60:5a:35:37:02:d7:f6:5e:af:9c:
         c3:05:2a:92:df:81:09:fb:81:42:01:b7:4a:41:b1:4e:1c:cb:
         bf:94:84:e8:b1:fc:45:1d:bc:bf:c5:9a:dd:5f:c8:c6:54:37:
         16:1d:3e:75:22:49:04:4b:3c:9f:54:8e:1c:89:22:47:d3:16:
         14:db:f5:5e:9a:19:84:03:ec:81:e3:c5:2a:d6:6c:be:96:7e:
         70:da:c9:6c:67:fa:23:4b:d3:1c:32:87:69:d9:7b:58:6b:dc:
         09:0f:f1:ff:ca:89:de:17:1f:7a:c8:61:6b:d4:f1:46:3b:3c:
         47:26:af:49:be:f5:e3:15:7d:47:50:57:ec:2a:38:25:93:a1:
         e5:f3:ab:f8:f7:30:cc:6d:d6:f6:d9:29:2f:8a:e6:51:a0:b7:
         b9:29:35:05:f0:b9:ef:8e:1c:fe:37:43:0f:5d:89:27:47:02:
         2d:6b:dc:c4:38:86:79:21:91:2b:6f:46:f0:15:6f:5e:44:9c:
         1d:a4:cd:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:35 2024 by rpki-client on console-ams.rpki-client.org