Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30414/RGaFifripkQDJZPogusOhyTCwGQ.roa
File:                     RGaFifripkQDJZPogusOhyTCwGQ.roa (raw, json)
Hash identifier:          Hz+KSDFcrAzSfnSRN9wSWjKWjknccia82Kx7mTmXsgE=
Subject key identifier:   44:66:85:89:FA:E2:A6:44:03:25:93:E8:82:EB:0E:87:24:C2:C0:64
Certificate issuer:       /CN=F5350E57EF95120131B2371ECBCA5971DE119AF3
Certificate serial:       0F
Authority key identifier: F5:35:0E:57:EF:95:12:01:31:B2:37:1E:CB:CA:59:71:DE:11:9A:F3
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9TUOV--VEgExsjcey8pZcd4RmvM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30414/RGaFifripkQDJZPogusOhyTCwGQ.roa
Signing time:             Thu 25 Jan 2024 11:21:02 +0000
ROA not before:           Thu 25 Jan 2024 11:21:02 +0000
ROA not after:            Tue 14 Jan 2025 01:30:02 +0000
asID:                     55376
IP address blocks:        2400:c8a0::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30414/9TUOV--VEgExsjcey8pZcd4RmvM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30414/9TUOV--VEgExsjcey8pZcd4RmvM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9TUOV--VEgExsjcey8pZcd4RmvM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5350E57EF95120131B2371ECBCA5971DE119AF3
        Validity
            Not Before: Jan 25 11:21:02 2024 GMT
            Not After : Jan 14 01:30:02 2025 GMT
        Subject: CN=44668589FAE2A644032593E882EB0E8724C2C064
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:48:42:0c:e7:eb:6f:8c:60:03:b3:cf:ae:4a:
                    7b:f6:17:99:76:2c:59:84:2f:bf:80:02:d5:28:ce:
                    eb:67:61:44:b5:42:07:8d:ad:55:03:c5:f6:b8:7b:
                    17:fe:12:cc:5a:b8:72:9f:f4:3b:6a:35:25:b6:b7:
                    d8:41:6b:f5:8c:ad:e7:5f:9a:ce:89:26:5c:d0:94:
                    d7:9b:a6:97:a6:3c:d7:30:51:2a:3a:95:5f:d0:66:
                    b4:65:1a:a8:4c:1a:90:c9:8a:12:6d:c5:7b:01:49:
                    1f:82:83:0f:13:29:3c:46:3f:b1:93:07:db:ad:f7:
                    33:29:3e:9d:1b:90:f6:55:d2:19:e9:db:c4:60:45:
                    35:96:54:ec:3b:f9:33:de:8e:9e:08:7d:48:5c:4d:
                    79:4f:85:e4:a3:8a:6d:9b:da:80:9e:59:5b:ec:3a:
                    a1:41:c8:e4:91:e3:05:13:67:9d:30:93:c0:b2:b2:
                    b9:ab:88:ff:f3:a0:47:41:2f:83:ab:a6:07:35:0e:
                    b9:dc:d7:04:fe:4b:33:2f:96:14:a7:a7:46:ca:81:
                    98:82:db:a2:56:99:24:a8:e8:e6:a1:af:64:0d:5d:
                    06:7c:f6:68:4f:74:1a:a5:35:a9:d8:98:c4:70:c1:
                    83:57:ea:47:f4:64:a1:14:ef:dd:64:c9:f8:cf:64:
                    21:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:66:85:89:FA:E2:A6:44:03:25:93:E8:82:EB:0E:87:24:C2:C0:64
            X509v3 Authority Key Identifier:
                keyid:F5:35:0E:57:EF:95:12:01:31:B2:37:1E:CB:CA:59:71:DE:11:9A:F3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30414/9TUOV--VEgExsjcey8pZcd4RmvM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9TUOV--VEgExsjcey8pZcd4RmvM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30414/RGaFifripkQDJZPogusOhyTCwGQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:c8a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a0:d1:d2:16:c1:64:57:5b:94:30:41:d8:4a:a6:90:a3:5b:70:
         af:f1:29:7f:93:18:f3:1c:f8:98:1e:fd:c6:7e:15:ac:f5:f6:
         99:28:31:02:f9:0c:49:2b:4e:17:48:73:c2:22:b2:9b:f4:b8:
         25:bb:cb:4a:71:9b:31:0c:17:a9:4a:45:d9:e6:c6:14:4b:a6:
         8a:66:2a:11:fe:31:4e:d9:2d:34:d9:fb:b0:df:76:4e:07:d6:
         de:9f:b0:1f:14:bf:c6:4d:5d:09:ee:f6:7a:45:7b:46:5b:d1:
         57:14:84:0f:28:96:73:36:97:46:f3:8b:70:a5:cf:33:ae:32:
         b4:1c:8f:ce:8a:5b:c7:9d:23:7c:3c:d6:8e:43:5f:a4:4f:e9:
         6e:ba:1a:93:88:41:42:ee:7f:d3:33:53:78:b8:97:4f:d4:07:
         6e:76:54:20:d0:61:bc:51:81:7a:4b:95:e4:82:45:82:32:31:
         b3:dc:7f:37:b5:c2:fd:df:c6:ab:59:82:23:ef:d9:59:53:cb:
         6b:10:b3:7d:47:0a:c8:16:b9:67:47:87:85:72:e1:ea:89:c7:
         4d:55:a2:7e:c4:4a:b4:9a:d4:6e:2d:91:4c:ef:10:e8:c0:6a:
         b3:dc:a1:fa:3f:2f:56:90:77:84:32:45:23:1a:a4:55:19:99:
         a2:e9:0f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:28 2024 by rpki-client on console-ams.rpki-client.org