Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30405/ETc86IS0zGy7EiLLh9Ig9Ot13Aw.roa
File:                     ETc86IS0zGy7EiLLh9Ig9Ot13Aw.roa (raw, json)
Hash identifier:          XM7xnPlcq+HR1rGoESFYcbk6vTDDFUdKjWPuPFJydZ4=
Subject key identifier:   11:37:3C:E8:84:B4:CC:6C:BB:12:22:CB:87:D2:20:F4:EB:75:DC:0C
Certificate issuer:       /CN=2A80ACC85AD675948A730937A0E57ABB571C057C
Certificate serial:       1B
Authority key identifier: 2A:80:AC:C8:5A:D6:75:94:8A:73:09:37:A0:E5:7A:BB:57:1C:05:7C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KoCsyFrWdZSKcwk3oOV6u1ccBXw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30405/ETc86IS0zGy7EiLLh9Ig9Ot13Aw.roa
Signing time:             Fri 31 May 2024 01:29:00 +0000
ROA not before:           Fri 31 May 2024 01:29:00 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     146981
IP address blocks:        2400:8820::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30405/KoCsyFrWdZSKcwk3oOV6u1ccBXw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30405/KoCsyFrWdZSKcwk3oOV6u1ccBXw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KoCsyFrWdZSKcwk3oOV6u1ccBXw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27 (0x1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A80ACC85AD675948A730937A0E57ABB571C057C
        Validity
            Not Before: May 31 01:29:00 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=11373CE884B4CC6CBB1222CB87D220F4EB75DC0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:aa:9e:ab:1c:9a:e7:92:15:e5:d9:79:b4:fd:
                    5f:18:2a:40:9f:a3:9e:99:87:39:33:a3:f7:c3:5d:
                    31:e6:74:5e:6d:31:b6:35:41:6b:06:81:dc:32:f0:
                    f4:67:e3:10:41:22:2f:75:9c:c8:a9:23:69:88:f9:
                    93:f2:ab:7d:df:f1:3e:8a:ea:8d:9c:62:bf:ec:8f:
                    ab:fc:e2:b2:90:1b:a7:aa:5c:84:91:be:d1:6b:49:
                    29:57:bb:52:e2:7d:a1:68:fc:f2:13:1f:aa:55:da:
                    f1:b4:8e:46:39:37:e6:ba:87:3a:49:b2:59:67:3a:
                    54:96:99:a8:b0:d3:d5:b9:0a:18:15:0c:98:be:05:
                    9f:85:b9:f7:08:2d:10:34:93:f0:ef:ee:d6:c1:36:
                    48:a0:aa:3c:51:7a:6b:d4:f3:b1:d2:35:df:b9:4b:
                    10:17:52:4a:82:46:95:c0:f3:6d:88:d5:ad:17:8f:
                    43:70:78:19:b4:1e:c2:ee:67:13:82:5b:73:d6:84:
                    5c:52:a8:b2:da:6e:54:92:b0:96:f7:af:55:5b:ff:
                    e1:1f:a3:5d:57:2f:5f:ff:cb:4a:44:fb:94:b3:a6:
                    0c:ef:68:98:37:dc:2f:21:08:e4:73:c8:ed:dd:14:
                    f3:62:d2:d3:47:cf:c4:a4:22:c3:e3:4b:74:10:da:
                    d9:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:37:3C:E8:84:B4:CC:6C:BB:12:22:CB:87:D2:20:F4:EB:75:DC:0C
            X509v3 Authority Key Identifier:
                keyid:2A:80:AC:C8:5A:D6:75:94:8A:73:09:37:A0:E5:7A:BB:57:1C:05:7C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30405/KoCsyFrWdZSKcwk3oOV6u1ccBXw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KoCsyFrWdZSKcwk3oOV6u1ccBXw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30405/ETc86IS0zGy7EiLLh9Ig9Ot13Aw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:8820::/32

    Signature Algorithm: sha256WithRSAEncryption
         b0:80:8b:f1:99:5f:74:ce:63:7f:95:98:8d:9d:89:15:95:3b:
         37:0e:75:7d:1f:0a:cd:d2:39:7d:48:94:16:96:da:e3:c7:96:
         74:73:42:79:fc:ed:d0:35:a6:4f:87:8a:37:bd:2c:79:e5:ea:
         ee:1f:f0:dd:70:0e:41:00:90:bd:0f:75:ac:30:68:39:94:c3:
         64:71:1e:ef:c4:4b:b8:1b:c7:be:7e:c3:75:ef:c6:cd:a7:95:
         8b:48:ca:14:49:69:e0:b0:f3:f1:b8:1a:75:0e:64:f6:1e:2a:
         59:2f:8d:6f:e9:05:dc:93:9d:cc:ef:e5:8a:eb:cc:c2:0b:60:
         17:0d:2f:3a:fd:75:0c:89:82:8c:30:72:3f:95:61:f8:ad:33:
         b5:9f:57:d1:c6:66:01:0c:56:73:ea:75:3b:ba:7c:27:a6:ae:
         d6:93:ce:dc:92:5d:b7:b4:d6:e4:a9:77:61:e6:0e:f5:75:3f:
         b7:c0:09:08:17:b5:36:19:4b:cc:5c:5f:40:f8:43:45:fd:b2:
         72:dc:c5:bd:fc:3a:ad:42:d6:bb:96:8a:cc:b8:ae:d3:fc:df:
         8b:fa:92:35:87:20:1a:72:b9:ee:73:f6:aa:e8:c1:85:cf:d5:
         a6:87:fe:ba:8e:3a:a3:9a:29:13:78:c5:0c:32:92:c1:20:fe:
         e7:e9:53:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:32 2024 by rpki-client on console-ams.rpki-client.org