Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30368/v_GcaG15ZrPBuN_gXp9IItiTnlY.roa
File:                     v_GcaG15ZrPBuN_gXp9IItiTnlY.roa (raw, json)
Hash identifier:          IOnlqe0vBYyWrInxQFaiRmQMNmc0IQ8d1ITpxcpI5RY=
Subject key identifier:   BF:F1:9C:68:6D:79:66:B3:C1:B8:DF:E0:5E:9F:48:22:D8:93:9E:56
Certificate issuer:       /CN=C0666494C79D30AD5FEB98EA1ABC97CB87073F70
Certificate serial:       02
Authority key identifier: C0:66:64:94:C7:9D:30:AD:5F:EB:98:EA:1A:BC:97:CB:87:07:3F:70
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wGZklMedMK1f65jqGryXy4cHP3A.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30368/v_GcaG15ZrPBuN_gXp9IItiTnlY.roa
Signing time:             Wed 01 May 2024 02:26:23 +0000
ROA not before:           Wed 01 May 2024 02:26:23 +0000
ROA not after:            Thu 01 May 2025 02:18:01 +0000
asID:                     37922
IP address blocks:        2406:a3c0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30368/wGZklMedMK1f65jqGryXy4cHP3A.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30368/wGZklMedMK1f65jqGryXy4cHP3A.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wGZklMedMK1f65jqGryXy4cHP3A.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Jun 2024 14:54:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0666494C79D30AD5FEB98EA1ABC97CB87073F70
        Validity
            Not Before: May  1 02:26:23 2024 GMT
            Not After : May  1 02:18:01 2025 GMT
        Subject: CN=BFF19C686D7966B3C1B8DFE05E9F4822D8939E56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:25:99:a5:2c:66:f6:ab:9a:c6:d2:dc:0e:28:
                    ec:08:98:e4:ed:53:88:f2:1b:6d:fa:b0:bc:ec:22:
                    41:11:70:0c:68:df:5c:e7:81:88:c9:a4:ad:7c:d2:
                    f8:1d:25:92:cc:2d:06:72:76:c7:dc:0c:13:13:18:
                    b6:fd:2c:5b:89:00:e9:80:7c:df:b2:9b:6d:56:a5:
                    d1:12:cd:ff:ff:f9:ef:b3:f2:d6:04:a0:05:49:bb:
                    50:9e:23:60:69:cf:1b:a6:ee:8c:f8:88:50:09:9e:
                    b4:08:4e:c0:17:56:df:aa:d5:72:0f:5b:06:34:f5:
                    37:ce:5c:87:a6:22:91:2d:ce:49:34:9d:2a:5b:5c:
                    e2:ce:a1:6f:cc:ea:70:12:0b:a3:40:d7:66:67:47:
                    3e:b1:1f:c5:c2:ba:1a:d8:ec:5b:7b:39:66:02:fa:
                    d8:70:e7:0a:49:3a:a3:93:e6:f9:08:00:ea:55:e0:
                    f9:3b:fb:1b:1c:f8:1b:6a:18:be:10:c2:b3:14:66:
                    60:89:01:63:ce:7c:76:57:b4:aa:ce:c0:c6:8a:ef:
                    2b:75:b3:8b:de:be:c5:74:32:4a:70:bc:05:be:99:
                    16:bc:78:f6:4e:0a:51:87:ac:ad:77:17:74:db:cb:
                    9e:33:11:c8:1d:78:db:b9:0e:26:0a:94:f2:07:24:
                    67:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:F1:9C:68:6D:79:66:B3:C1:B8:DF:E0:5E:9F:48:22:D8:93:9E:56
            X509v3 Authority Key Identifier:
                keyid:C0:66:64:94:C7:9D:30:AD:5F:EB:98:EA:1A:BC:97:CB:87:07:3F:70

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30368/wGZklMedMK1f65jqGryXy4cHP3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wGZklMedMK1f65jqGryXy4cHP3A.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30368/v_GcaG15ZrPBuN_gXp9IItiTnlY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:a3c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:ae:bf:ad:db:ec:fe:af:42:cd:51:20:c0:b5:22:5f:cf:e6:
         1a:e5:4c:45:55:39:a9:21:1c:10:5e:21:76:de:ff:19:a3:d7:
         12:56:c3:cc:39:10:f6:8b:22:41:1c:a8:fd:3b:c5:5f:1f:54:
         36:63:2b:86:15:8e:f9:ae:61:4a:f2:37:bb:5a:8c:76:f5:a3:
         58:78:db:37:26:6d:74:51:83:09:9e:41:0e:dd:a6:29:01:49:
         66:d1:1e:d6:2b:8e:32:08:87:83:e6:31:01:3a:94:9d:68:af:
         43:74:72:9b:42:33:11:a8:35:3b:d2:6c:f8:d8:a2:66:8e:cc:
         e3:d1:30:eb:31:7d:af:0f:68:12:81:1d:17:3f:a1:34:f8:82:
         7e:3e:32:cd:2b:d1:8f:c1:a7:92:2d:fb:8b:74:20:c9:db:0a:
         27:e9:ce:90:66:1a:b3:7d:85:90:6a:6a:33:a1:a8:da:bd:7f:
         3a:63:98:ab:1f:42:d9:9e:62:2f:b6:a7:e5:5a:e1:6d:aa:24:
         84:5f:96:63:69:ac:e3:77:0f:a2:38:28:b0:72:73:7c:84:c6:
         69:11:a6:be:b4:0e:6f:1c:94:5c:8e:74:d3:5a:93:96:f1:05:
         9f:db:67:b6:71:36:b0:ad:ea:b9:f2:27:22:ea:a2:ca:f5:c4:
         2c:2e:66:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 16:47:58 2024 by rpki-client on console-fra.rpki-client.org