Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30371/OQ4iS3X2OGuonOkr4wlZs7Jvhdk.roa
File:                     OQ4iS3X2OGuonOkr4wlZs7Jvhdk.roa (raw, json)
Hash identifier:          WRO7ngm/WaM6HeSJzc1ZzD6tqkO0b+JjK6goLRGv+PY=
Subject key identifier:   39:0E:22:4B:75:F6:38:6B:A8:9C:E9:2B:E3:09:59:B3:B2:6F:85:D9
Certificate issuer:       /CN=439837AD93D92471E2024D06ECFDCAEE8F64D1C3
Certificate serial:       14
Authority key identifier: 43:98:37:AD:93:D9:24:71:E2:02:4D:06:EC:FD:CA:EE:8F:64:D1:C3
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5g3rZPZJHHiAk0G7P3K7o9k0cM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30371/OQ4iS3X2OGuonOkr4wlZs7Jvhdk.roa
Signing time:             Sat 31 Aug 2024 01:32:13 +0000
ROA not before:           Sat 31 Aug 2024 01:32:13 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     131976
IP address blocks:        2406:e240::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30371/Q5g3rZPZJHHiAk0G7P3K7o9k0cM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30371/Q5g3rZPZJHHiAk0G7P3K7o9k0cM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5g3rZPZJHHiAk0G7P3K7o9k0cM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20 (0x14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=439837AD93D92471E2024D06ECFDCAEE8F64D1C3
        Validity
            Not Before: Aug 31 01:32:13 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=390E224B75F6386BA89CE92BE30959B3B26F85D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a8:5f:8f:e9:80:77:e1:48:ef:66:a3:e8:0e:
                    ae:3d:cf:22:20:e4:54:63:26:75:1d:e2:6e:71:e7:
                    19:65:89:f0:0d:9f:e9:14:8c:6b:ae:4d:e2:2b:1c:
                    55:d6:2b:8d:6f:db:fd:9e:84:f6:f6:d5:73:e6:34:
                    4b:ce:87:34:a5:82:7a:3a:42:b4:3c:c4:93:ce:2d:
                    4f:05:d7:1b:63:17:c6:fc:e2:6b:67:4e:54:f6:44:
                    eb:13:b9:24:06:6f:ad:91:b3:aa:52:ce:fe:cf:0f:
                    14:f2:5a:97:2d:69:b1:30:eb:5c:bb:ac:24:d5:f7:
                    9c:51:6b:22:1e:05:a6:f6:ac:de:50:cb:3d:87:77:
                    2f:ef:85:d5:ed:bb:44:e8:e5:33:46:e2:89:64:ae:
                    1d:9e:a5:0e:1a:3b:44:e1:58:f9:24:3b:2d:b8:d1:
                    bb:70:be:22:7e:27:dc:90:9a:a5:c5:97:92:ea:97:
                    c2:8e:a2:9e:89:93:99:c5:d8:cf:41:00:d5:b0:ba:
                    6a:73:6b:69:2e:3c:0c:9d:98:e9:2c:44:50:0c:52:
                    40:47:94:fe:ae:11:8a:94:ae:fc:34:7b:9e:6f:a8:
                    37:51:db:87:26:9f:59:4c:90:06:eb:99:aa:26:69:
                    a1:11:5b:fe:ba:52:76:56:f8:e8:88:24:12:6d:78:
                    bc:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:0E:22:4B:75:F6:38:6B:A8:9C:E9:2B:E3:09:59:B3:B2:6F:85:D9
            X509v3 Authority Key Identifier:
                keyid:43:98:37:AD:93:D9:24:71:E2:02:4D:06:EC:FD:CA:EE:8F:64:D1:C3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30371/Q5g3rZPZJHHiAk0G7P3K7o9k0cM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5g3rZPZJHHiAk0G7P3K7o9k0cM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30371/OQ4iS3X2OGuonOkr4wlZs7Jvhdk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:e240::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:dc:d9:f2:1c:5c:02:e1:20:02:9c:f6:6f:e9:57:fd:53:5e:
         ee:47:b0:33:03:99:09:f7:6a:5a:4e:0b:ec:00:e3:77:00:8b:
         7c:62:08:63:cf:de:70:9b:46:24:e6:21:97:3b:77:eb:46:5e:
         ae:6a:8a:c1:7f:10:ea:c8:75:53:a9:b4:f8:d1:44:9e:bc:0b:
         33:18:c1:d9:9c:e4:ba:fe:7d:0b:8f:49:de:49:8c:a8:95:d9:
         b0:61:1f:0b:fd:5e:77:a8:c6:40:19:95:77:5d:f9:d0:3c:a9:
         ae:1d:a8:4c:79:47:cd:3b:8f:3c:33:3f:f0:c1:c8:97:67:d7:
         3b:74:c3:b7:16:c3:dc:d6:15:56:ed:af:ee:b8:1e:89:fa:0c:
         e9:d2:33:b5:07:dc:99:85:52:e8:83:4a:ec:dc:6b:38:02:14:
         55:47:37:1b:86:cd:2a:2f:fb:ab:8f:4a:86:7a:7d:3d:12:67:
         7a:91:85:b2:db:8b:04:51:8b:17:58:07:b9:51:59:38:9f:1c:
         5a:b0:44:d3:8b:4c:b9:42:4c:ef:df:89:e1:12:cf:a8:f7:4e:
         a3:9f:87:4f:da:a2:e1:d5:93:5c:d3:a3:e4:80:2e:e9:1c:c9:
         bc:a9:21:e6:48:29:db:2b:f3:e5:93:42:b0:31:ca:ba:8b:a7:
         f1:6c:e5:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:23:58 2024 by rpki-client on console-fra.rpki-client.org