Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30410/m6aPZECIg-kghwKtmquHoAzWAns.roa
File:                     m6aPZECIg-kghwKtmquHoAzWAns.roa (raw, json)
Hash identifier:          F+Re7HX4u7UzCF+mqzGxbI7Tg2RrQLiYvCI0KYxZT4g=
Subject key identifier:   9B:A6:8F:64:40:88:83:E9:20:87:02:AD:9A:AB:87:A0:0C:D6:02:7B
Certificate issuer:       /CN=93BCDB433396C43EAB076DCDC7AF462C22B50176
Certificate serial:       0F
Authority key identifier: 93:BC:DB:43:33:96:C4:3E:AB:07:6D:CD:C7:AF:46:2C:22:B5:01:76
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k7zbQzOWxD6rB23Nx69GLCK1AXY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30410/m6aPZECIg-kghwKtmquHoAzWAns.roa
Signing time:             Wed 19 Jun 2024 04:59:12 +0000
ROA not before:           Wed 19 Jun 2024 04:59:12 +0000
ROA not after:            Sun 15 Jun 2025 01:30:03 +0000
asID:                     150359
IP address blocks:        2400:c0a0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30410/k7zbQzOWxD6rB23Nx69GLCK1AXY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30410/k7zbQzOWxD6rB23Nx69GLCK1AXY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k7zbQzOWxD6rB23Nx69GLCK1AXY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93BCDB433396C43EAB076DCDC7AF462C22B50176
        Validity
            Not Before: Jun 19 04:59:12 2024 GMT
            Not After : Jun 15 01:30:03 2025 GMT
        Subject: CN=9BA68F64408883E9208702AD9AAB87A00CD6027B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b3:5d:10:c7:21:47:07:66:31:9a:0e:f2:d0:
                    73:7c:55:52:5c:28:33:4d:2a:e9:65:e2:ce:ef:75:
                    6c:97:8b:98:67:98:59:8d:0e:9c:90:41:a2:c5:06:
                    89:0d:36:00:0e:ee:b5:9a:42:5a:24:d5:78:e7:a3:
                    72:36:15:da:84:e6:88:30:16:55:66:c6:f3:0e:c7:
                    0c:47:c6:69:c4:57:eb:03:87:68:ec:45:f5:3f:e2:
                    b4:d9:51:59:1b:47:21:74:46:af:65:a8:1a:fc:18:
                    b7:a4:0f:70:86:75:76:b4:7d:4e:00:26:1f:68:6c:
                    f3:40:1d:fb:56:c7:c4:f7:18:26:09:af:b8:ba:cc:
                    ff:48:e8:74:1e:1e:e7:81:05:c6:49:dd:11:3c:c5:
                    49:e4:0c:ea:e6:56:b5:cc:5b:6b:38:7e:0d:ab:f9:
                    c9:54:5e:f8:2c:5b:92:fb:fb:cd:6e:ab:de:26:f7:
                    26:25:57:18:ac:b2:f3:66:1f:68:ca:1c:00:6e:e1:
                    06:c1:c8:80:db:c7:d1:3e:3f:9d:15:cc:eb:7c:92:
                    e3:62:a4:9c:69:39:d7:21:39:a3:d3:f7:5a:3d:02:
                    25:64:ae:9b:01:b2:49:cf:2a:4d:10:ce:20:17:b8:
                    ba:f6:65:a2:be:75:99:ff:4e:21:e1:16:1f:4a:f3:
                    d3:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:A6:8F:64:40:88:83:E9:20:87:02:AD:9A:AB:87:A0:0C:D6:02:7B
            X509v3 Authority Key Identifier:
                keyid:93:BC:DB:43:33:96:C4:3E:AB:07:6D:CD:C7:AF:46:2C:22:B5:01:76

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30410/k7zbQzOWxD6rB23Nx69GLCK1AXY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k7zbQzOWxD6rB23Nx69GLCK1AXY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30410/m6aPZECIg-kghwKtmquHoAzWAns.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:c0a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:92:ed:73:95:41:48:fb:c7:cc:98:fc:9a:7e:10:65:2d:99:
         19:f7:7b:9e:4d:d1:d4:02:fd:2c:e3:02:31:46:12:04:24:3b:
         66:18:91:90:7a:a6:e9:6f:34:cf:f8:4a:b2:8c:4d:d8:ab:cf:
         d4:88:e2:f4:90:0f:53:5d:b3:d3:b1:4c:ba:e8:5b:cc:19:8e:
         96:0b:81:19:b0:3e:ab:8a:58:79:6a:74:73:f5:39:17:cf:c4:
         f7:2e:ef:bb:61:8d:a3:c6:2f:36:4a:24:da:b4:fb:11:95:17:
         f6:8f:7a:c8:54:7f:24:40:d5:bb:6c:62:89:b7:ca:d6:9b:68:
         f3:af:75:51:77:87:7b:09:7f:4a:66:f4:be:b0:41:f6:e2:01:
         42:f7:46:c4:9d:be:d3:85:53:28:95:df:32:21:99:17:2f:8b:
         7e:f2:84:8b:77:be:09:2a:fc:f8:88:e8:d6:fb:48:31:cc:c7:
         3d:de:fb:9c:f0:06:62:46:66:ec:67:fe:02:f9:b1:bd:e1:a4:
         86:f4:81:de:e8:a1:26:7a:4d:b2:39:75:22:16:44:5f:eb:8e:
         aa:74:98:fb:56:b1:40:3b:c5:d5:1c:14:ba:2e:54:85:0d:39:
         c5:15:8c:16:ee:65:d4:95:c9:80:85:bc:88:b6:11:7f:58:4b:
         76:dd:62:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:32 2024 by rpki-client on console-ams.rpki-client.org