Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30381/Y_dSoydkaXvg1dpJGYqpjbOv-hQ.roa
File:                     Y_dSoydkaXvg1dpJGYqpjbOv-hQ.roa (raw, json)
Hash identifier:          E3zjs01DmPDkM9CMM/pDYdwJnyhnpmDPkrCzd/P4wig=
Subject key identifier:   63:F7:52:A3:27:64:69:7B:E0:D5:DA:49:19:8A:A9:8D:B3:AF:FA:14
Certificate issuer:       /CN=7914EED81131DB5CEE1D216F5AABCA04F1B01149
Certificate serial:       0E
Authority key identifier: 79:14:EE:D8:11:31:DB:5C:EE:1D:21:6F:5A:AB:CA:04:F1:B0:11:49
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/eRTu2BEx21zuHSFvWqvKBPGwEUk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30381/Y_dSoydkaXvg1dpJGYqpjbOv-hQ.roa
Signing time:             Tue 03 Oct 2023 08:30:27 +0000
ROA not before:           Tue 03 Oct 2023 08:30:27 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     131988
IP address blocks:        2407:b0c0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30381/eRTu2BEx21zuHSFvWqvKBPGwEUk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30381/eRTu2BEx21zuHSFvWqvKBPGwEUk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/eRTu2BEx21zuHSFvWqvKBPGwEUk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 11:53:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7914EED81131DB5CEE1D216F5AABCA04F1B01149
        Validity
            Not Before: Oct  3 08:30:27 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=63F752A32764697BE0D5DA49198AA98DB3AFFA14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0f:48:09:bb:4b:f2:2e:e3:3c:b0:12:8f:b7:
                    9e:93:5d:4d:9d:04:5b:2c:53:1a:40:c3:93:56:c1:
                    8d:8b:d3:fb:35:0c:f7:4a:97:40:ed:e8:73:b0:49:
                    98:d5:0b:42:c0:b3:c8:8d:4b:eb:ae:73:55:f1:67:
                    52:90:f9:9c:5f:db:8e:00:17:36:8e:a0:78:ba:d2:
                    c2:31:a6:4d:a2:d4:b0:93:5f:fb:63:2a:0f:0f:da:
                    e1:00:40:7d:05:4f:c5:56:99:ac:24:9a:c2:23:66:
                    2a:2f:62:41:b3:09:f5:ae:cf:ff:6f:62:76:de:a9:
                    f5:f4:0b:aa:83:e7:6a:bd:60:83:3e:6a:8a:64:d1:
                    20:a9:51:96:4a:ba:5e:5c:34:e7:2a:e6:e7:67:b7:
                    16:52:08:3c:48:6d:c9:7e:9c:f7:0a:10:27:87:0c:
                    1d:5b:31:f4:fe:b4:af:be:c1:b0:f8:c8:c1:7b:0e:
                    cc:ed:0a:2e:96:7c:d3:2b:17:3b:0a:1f:73:d9:4e:
                    aa:1d:7e:8f:72:54:59:71:c7:df:33:0a:59:0f:54:
                    01:90:b1:98:a1:1d:70:0e:da:d8:78:b9:38:d9:17:
                    3a:2f:0f:ff:20:c2:97:b1:90:28:3d:6b:7b:86:15:
                    f7:1e:da:22:26:e7:7f:7a:20:24:92:bb:24:7c:a4:
                    c8:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:F7:52:A3:27:64:69:7B:E0:D5:DA:49:19:8A:A9:8D:B3:AF:FA:14
            X509v3 Authority Key Identifier:
                keyid:79:14:EE:D8:11:31:DB:5C:EE:1D:21:6F:5A:AB:CA:04:F1:B0:11:49

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30381/eRTu2BEx21zuHSFvWqvKBPGwEUk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/eRTu2BEx21zuHSFvWqvKBPGwEUk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30381/Y_dSoydkaXvg1dpJGYqpjbOv-hQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:b0c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:99:72:c9:86:27:27:66:eb:aa:66:22:7c:bf:a0:56:c5:2e:
         ed:90:25:e6:66:fa:d8:b3:f6:7b:b1:07:43:cc:a0:e4:86:b8:
         3b:65:81:f6:ff:1a:c3:83:fe:e3:bf:84:4c:02:86:07:0c:40:
         5d:e5:17:ba:71:ea:c8:08:37:38:49:a0:48:ee:fb:6f:58:89:
         96:b0:f2:50:57:3a:48:96:3e:d0:dd:3d:59:7c:3d:bd:0c:e9:
         f3:96:67:de:de:b5:3d:02:30:4c:f2:ad:b1:03:b2:5b:03:0a:
         31:25:c8:a6:98:16:3d:41:c2:06:f8:4d:aa:16:b3:e0:46:f6:
         d6:2a:8b:62:36:d9:af:01:21:9c:f9:ae:d4:42:e8:fd:12:67:
         c1:a0:b2:ed:f3:54:db:1f:26:08:87:cb:63:53:52:4b:5f:9f:
         6d:cc:b7:62:2b:46:ca:46:e7:1e:94:28:e5:36:8c:cf:46:4e:
         31:91:1a:98:d1:94:2a:1f:89:d9:52:9a:66:79:a8:17:45:b6:
         4a:c0:9e:48:d5:95:b9:82:2d:24:dc:9c:e9:28:1e:ad:7c:c7:
         6b:bf:25:9b:34:72:13:b6:ac:d3:38:b6:61:6f:2e:c0:02:6f:
         91:a8:c9:32:3a:81:95:e6:de:b7:df:b3:bf:a3:5f:4c:38:94:
         87:43:42:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 12:57:20 2024 by rpki-client on console-fra.rpki-client.org