Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30367/e0djzTgeveHHSdjiRHdUJRsjwD0.roa
File:                     e0djzTgeveHHSdjiRHdUJRsjwD0.roa (raw, json)
Hash identifier:          EV33+66eBe27B/FJAHNynuFdhThDBK4/5SaVcn5RsY4=
Subject key identifier:   7B:47:63:CD:38:1E:BD:E1:C7:49:D8:E2:44:77:54:25:1B:23:C0:3D
Certificate issuer:       /CN=82E5B28A20F4C6A62A4612F6C5DFB7A3D64D9DEA
Certificate serial:       36
Authority key identifier: 82:E5:B2:8A:20:F4:C6:A6:2A:46:12:F6:C5:DF:B7:A3:D6:4D:9D:EA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/guWyiiD0xqYqRhL2xd-3o9ZNneo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/e0djzTgeveHHSdjiRHdUJRsjwD0.roa
Signing time:             Sat 31 Aug 2024 01:33:17 +0000
ROA not before:           Sat 31 Aug 2024 01:33:17 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     131921
IP address blocks:        2406:a1c0:200::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/guWyiiD0xqYqRhL2xd-3o9ZNneo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/guWyiiD0xqYqRhL2xd-3o9ZNneo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/guWyiiD0xqYqRhL2xd-3o9ZNneo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Dec 2024 00:11:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54 (0x36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82E5B28A20F4C6A62A4612F6C5DFB7A3D64D9DEA
        Validity
            Not Before: Aug 31 01:33:17 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=7B4763CD381EBDE1C749D8E2447754251B23C03D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1b:08:39:cc:49:48:67:02:35:4c:a4:45:a6:
                    10:93:ac:78:8a:04:99:d7:06:91:7a:bf:4e:25:ef:
                    bf:70:df:de:e0:63:56:00:37:06:c5:67:76:6f:5a:
                    8f:54:37:69:63:3b:33:f9:68:35:17:17:a1:52:0c:
                    12:f0:db:7e:02:2e:b6:8d:e6:e7:1f:8c:c2:b9:d3:
                    d9:89:ff:50:44:63:4d:35:96:4f:9b:39:09:0f:e6:
                    50:77:62:f4:5b:7e:1c:11:f8:47:73:1a:8c:6d:7d:
                    c6:ed:0e:e0:2a:50:67:c4:5b:19:cb:50:84:fa:aa:
                    d9:b3:de:bd:6f:e8:b0:e8:10:f9:01:f9:c0:ce:d3:
                    cb:19:7b:9d:d1:d2:c4:d5:bb:e8:1f:e4:ca:49:06:
                    0a:8d:87:b8:d7:cd:ed:44:aa:ce:d7:a5:03:52:dd:
                    bd:b5:18:47:1a:40:37:f5:60:bd:2e:1a:36:82:13:
                    5f:c9:4a:44:42:7e:50:71:97:54:3f:e0:f2:ac:d7:
                    1e:12:1c:60:98:67:b4:a4:d4:65:a5:78:34:f4:5b:
                    e3:a2:ec:3e:8d:6f:59:04:25:e5:d9:a2:a8:cc:e8:
                    f2:3e:b9:aa:a1:fe:b7:8c:c9:fd:fc:7b:a4:1b:43:
                    03:52:1f:d6:d4:a2:85:bd:25:0e:02:dc:b7:1d:c6:
                    6c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:47:63:CD:38:1E:BD:E1:C7:49:D8:E2:44:77:54:25:1B:23:C0:3D
            X509v3 Authority Key Identifier:
                keyid:82:E5:B2:8A:20:F4:C6:A6:2A:46:12:F6:C5:DF:B7:A3:D6:4D:9D:EA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/guWyiiD0xqYqRhL2xd-3o9ZNneo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/guWyiiD0xqYqRhL2xd-3o9ZNneo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30367/e0djzTgeveHHSdjiRHdUJRsjwD0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:a1c0:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         31:ef:ef:1f:d8:ec:30:b1:fb:cd:3c:c6:cc:eb:c8:75:c5:de:
         a5:7e:52:ba:93:76:9c:e2:9c:f9:46:b4:cf:88:3d:1f:e1:b8:
         54:4f:d3:a0:fe:01:42:ff:21:6a:72:f8:8f:90:80:69:df:3a:
         41:bb:00:8f:47:18:02:55:e3:6d:a3:c4:49:40:f7:9f:fb:44:
         c0:ae:45:ea:a0:53:c6:eb:0c:5d:7b:15:ec:26:df:f4:43:0e:
         fe:33:65:1f:1b:40:1a:06:87:07:c9:8c:e7:11:c3:d7:3b:33:
         d7:de:5a:0b:46:98:97:27:d2:df:58:6d:3a:81:2b:08:90:b6:
         6c:4e:05:44:8e:4a:d8:1c:35:86:3b:53:05:ed:73:2e:29:37:
         22:2b:57:f1:b7:2c:03:fd:27:57:d1:a0:17:96:61:74:8b:8c:
         16:a9:78:ce:e1:1c:22:a8:03:b2:0d:f5:8b:82:08:05:55:f6:
         98:db:e4:42:e7:d6:39:b9:76:10:19:c0:79:16:cc:14:06:f9:
         d7:70:eb:2d:e5:1a:ed:a7:ee:70:42:8e:dd:27:01:65:2b:7b:
         17:c6:0f:ab:f0:b7:32:3b:ac:36:f7:7d:51:52:bf:41:c2:b2:
         4d:0b:c7:30:e3:d6:c8:82:cc:64:c0:ae:f7:29:ec:c9:f8:c6:
         3a:28:cc:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:27:12 2024 by rpki-client on console-ams.rpki-client.org