Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30417/rD067isd-1EmXh75tZXyVDxDuxw.roa
File:                     rD067isd-1EmXh75tZXyVDxDuxw.roa (raw, json)
Hash identifier:          01rkQw5y8I5Xl1vBZQ3SiyPOvfXFhWWhPy4F3TqIUnU=
Subject key identifier:   AC:3D:3A:EE:2B:1D:FB:51:26:5E:1E:F9:B5:95:F2:54:3C:43:BB:1C
Certificate issuer:       /CN=4C6C4AF6832D7DCDE79B0535F2637DA9CD89D4C4
Certificate serial:       10
Authority key identifier: 4C:6C:4A:F6:83:2D:7D:CD:E7:9B:05:35:F2:63:7D:A9:CD:89:D4:C4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/TGxK9oMtfc3nmwU18mN9qc2J1MQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30417/rD067isd-1EmXh75tZXyVDxDuxw.roa
Signing time:             Fri 26 Jul 2024 05:50:38 +0000
ROA not before:           Fri 26 Jul 2024 05:50:38 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     63799
IP address blocks:        2400:e860::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30417/TGxK9oMtfc3nmwU18mN9qc2J1MQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30417/TGxK9oMtfc3nmwU18mN9qc2J1MQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/TGxK9oMtfc3nmwU18mN9qc2J1MQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C6C4AF6832D7DCDE79B0535F2637DA9CD89D4C4
        Validity
            Not Before: Jul 26 05:50:38 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=AC3D3AEE2B1DFB51265E1EF9B595F2543C43BB1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6c:89:0a:b5:2e:51:3c:30:6a:04:e3:ac:1c:
                    9a:1f:a8:9e:4b:16:ad:ab:9a:59:62:43:27:5f:74:
                    7d:65:d3:4e:36:7a:dd:7f:c7:0e:bd:e2:0e:93:28:
                    03:93:4c:fc:9a:ee:b8:db:63:3b:b3:4e:13:01:c0:
                    78:05:17:a1:52:9e:4f:50:ff:7d:76:ce:cf:eb:d9:
                    03:5a:f6:ba:56:0e:f2:24:93:20:23:0b:b4:41:40:
                    2c:7c:29:10:00:66:a6:e8:3c:34:c7:32:12:ae:d2:
                    41:5f:88:44:25:54:18:89:ee:a1:8e:c4:98:7b:2b:
                    c2:9c:62:48:53:31:48:67:58:60:79:28:43:ec:8c:
                    0a:7a:6f:c6:aa:4b:02:c8:46:d4:85:45:c8:9c:d9:
                    cf:16:26:14:50:fc:d1:14:bb:97:4b:61:bb:bd:37:
                    c6:7e:a4:9c:9c:dd:f1:04:54:47:9a:c9:98:27:74:
                    62:2c:3a:49:e8:97:98:3f:d9:50:0b:54:f5:c8:91:
                    c4:d7:20:b9:7e:2a:48:90:8d:6a:f0:7b:34:56:d1:
                    ee:4c:b6:26:3f:b2:c7:c2:82:62:5a:c6:fc:e7:58:
                    8f:77:23:c8:f1:12:85:cb:c8:7e:8a:47:20:a3:01:
                    4e:73:27:64:08:29:13:af:fa:7c:3d:79:05:24:0a:
                    8e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:3D:3A:EE:2B:1D:FB:51:26:5E:1E:F9:B5:95:F2:54:3C:43:BB:1C
            X509v3 Authority Key Identifier:
                keyid:4C:6C:4A:F6:83:2D:7D:CD:E7:9B:05:35:F2:63:7D:A9:CD:89:D4:C4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30417/TGxK9oMtfc3nmwU18mN9qc2J1MQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/TGxK9oMtfc3nmwU18mN9qc2J1MQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30417/rD067isd-1EmXh75tZXyVDxDuxw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:e860::/32

    Signature Algorithm: sha256WithRSAEncryption
         7e:86:12:34:54:fd:41:69:a0:b2:a9:72:82:13:7f:ae:6c:00:
         95:c0:d4:85:04:18:f0:bf:91:d9:05:f7:45:33:a1:1d:4f:d7:
         70:eb:3c:bb:11:79:bf:33:b3:f3:65:4a:4a:07:ae:1e:d1:5c:
         01:3f:29:c8:37:12:08:15:0f:8e:82:53:2c:d1:be:89:80:76:
         4d:d3:9a:75:99:64:13:9f:fd:d0:6d:00:a3:a1:56:cb:df:c0:
         6c:e1:a6:50:df:4c:35:7f:b2:30:41:20:fb:79:f6:7f:86:5a:
         6b:38:17:15:92:b6:6e:12:b1:6e:cc:6c:92:1a:c0:b9:8d:35:
         01:04:00:ab:9f:20:d6:2c:dd:b3:ce:d6:af:ff:0e:28:65:b3:
         f6:2e:2a:70:19:f6:05:9e:bc:eb:20:be:5d:4a:3c:d6:dd:2a:
         fb:75:ff:47:20:16:5b:71:4c:23:22:5b:c5:fd:e1:74:33:94:
         ed:72:74:94:78:68:d6:8a:66:49:cf:cb:ff:12:03:67:07:e6:
         eb:df:c9:48:de:8f:91:b5:f7:d9:44:dc:ed:fe:68:e8:9f:95:
         3a:38:c8:4a:0c:4a:de:56:61:73:ce:15:16:f2:87:2c:9c:8e:
         9e:ff:ad:d6:5d:47:8c:50:68:f5:f6:0f:a1:e0:d5:50:f5:1f:
         48:a8:17:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:23:58 2024 by rpki-client on console-fra.rpki-client.org