Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30371/0DU_NIm4MT8Ao3koBrnRzupZx8Q.roa
File:                     0DU_NIm4MT8Ao3koBrnRzupZx8Q.roa (raw, json)
Hash identifier:          ikUx2MXjlUEnnMH8PWA0esUDCHRnQVITNmfbcyTMpQo=
Subject key identifier:   D0:35:3F:34:89:B8:31:3F:00:A3:79:28:06:B9:D1:CE:EA:59:C7:C4
Certificate issuer:       /CN=439837AD93D92471E2024D06ECFDCAEE8F64D1C3
Certificate serial:       09
Authority key identifier: 43:98:37:AD:93:D9:24:71:E2:02:4D:06:EC:FD:CA:EE:8F:64:D1:C3
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5g3rZPZJHHiAk0G7P3K7o9k0cM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30371/0DU_NIm4MT8Ao3koBrnRzupZx8Q.roa
Signing time:             Tue 30 Jan 2024 12:05:38 +0000
ROA not before:           Tue 30 Jan 2024 12:05:38 +0000
ROA not after:            Tue 14 Jan 2025 01:30:02 +0000
asID:                     131976
IP address blocks:        2406:e240:f000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30371/Q5g3rZPZJHHiAk0G7P3K7o9k0cM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30371/Q5g3rZPZJHHiAk0G7P3K7o9k0cM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5g3rZPZJHHiAk0G7P3K7o9k0cM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 16:30:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=439837AD93D92471E2024D06ECFDCAEE8F64D1C3
        Validity
            Not Before: Jan 30 12:05:38 2024 GMT
            Not After : Jan 14 01:30:02 2025 GMT
        Subject: CN=D0353F3489B8313F00A3792806B9D1CEEA59C7C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:20:ab:1d:dc:a8:07:38:71:be:a6:20:b9:68:
                    3c:74:be:d4:53:2f:e9:5a:33:78:7b:7f:8d:79:4c:
                    38:4e:9e:bb:9d:22:35:af:bd:5d:68:d0:5c:9b:45:
                    b7:20:8a:bd:47:0d:88:d3:2f:52:ee:aa:8e:8e:fb:
                    6f:87:3e:d2:4d:c5:59:02:81:cd:0e:8d:5c:7a:1e:
                    04:ff:29:2c:b8:00:42:88:a3:e3:96:f8:c9:fb:d8:
                    16:e0:20:79:42:46:1b:b4:38:49:4f:2f:27:7b:98:
                    4a:63:53:07:12:3e:54:19:df:a5:37:26:d4:83:54:
                    2f:4d:22:18:70:01:4f:79:9f:11:33:03:8e:d7:55:
                    0d:0f:7f:e8:90:e9:4a:91:1f:71:b7:35:01:31:b8:
                    af:1c:40:c5:11:6f:03:74:69:ed:66:4d:c1:83:37:
                    e2:d9:57:99:7b:cc:27:f5:92:13:00:d0:b2:1a:39:
                    97:5d:f5:0f:39:f9:bf:5d:e8:4d:70:f8:3f:29:6d:
                    fe:97:70:5c:df:eb:01:e4:3a:a5:16:3b:a1:d9:b0:
                    81:20:d5:54:74:3e:38:2f:8e:8f:8a:ca:89:f3:51:
                    9f:53:03:f5:95:3b:14:86:fb:8a:ee:26:a0:6d:89:
                    d7:42:54:4c:5e:2f:be:e4:dd:e0:e6:5f:db:be:a0:
                    09:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:35:3F:34:89:B8:31:3F:00:A3:79:28:06:B9:D1:CE:EA:59:C7:C4
            X509v3 Authority Key Identifier:
                keyid:43:98:37:AD:93:D9:24:71:E2:02:4D:06:EC:FD:CA:EE:8F:64:D1:C3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30371/Q5g3rZPZJHHiAk0G7P3K7o9k0cM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5g3rZPZJHHiAk0G7P3K7o9k0cM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30371/0DU_NIm4MT8Ao3koBrnRzupZx8Q.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:e240:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         44:8c:c5:cc:60:9c:97:29:d9:0f:b8:1e:da:a9:96:14:e3:90:
         d2:ad:71:76:58:f0:05:ac:ec:8a:a6:74:31:1d:fb:97:b4:f4:
         bf:d0:8e:53:ee:01:b6:11:a9:b1:1e:9b:a1:a6:34:07:d6:ae:
         00:c8:85:fa:60:1c:4d:cf:0f:67:c4:57:90:85:ad:e8:e8:cf:
         0a:3c:d5:49:54:ff:79:50:1a:45:93:fb:c7:c6:78:91:b9:ed:
         67:7b:57:e7:37:f9:b4:3e:ce:ad:92:72:43:5a:ab:b4:51:d6:
         df:44:0e:73:2c:30:f3:ed:ab:48:8b:80:32:e9:25:8e:f8:d5:
         70:ac:e8:77:75:dc:92:42:6f:eb:64:52:cf:76:18:ef:5e:36:
         13:3c:05:f3:b2:83:96:6f:16:8a:da:18:69:4d:e7:38:7c:ab:
         eb:80:ee:6f:c1:97:a8:d4:29:ca:65:9c:db:23:a6:76:86:47:
         64:6c:c5:1c:6e:9d:38:0f:08:8d:8d:8f:38:3b:1f:49:bc:e7:
         af:7b:a3:b3:9d:f1:d6:30:18:e2:76:d8:fd:cf:58:e2:ea:9b:
         f1:55:76:8a:9d:c9:fd:d7:ba:38:59:76:2b:0b:d1:3c:f8:ce:
         ef:87:1b:e2:3f:9e:87:ab:04:5b:fd:e9:e1:f6:25:e6:d1:f1:
         d3:5e:d4:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:51:42 2024 by rpki-client on console-fra.rpki-client.org