Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30420/uITs0aBk9Wh7TUUcU3868AdNOSk.roa
File:                     uITs0aBk9Wh7TUUcU3868AdNOSk.roa (raw, json)
Hash identifier:          +ijvzeXZq2E3npvUS0D014+kcncGCw4rpzYJHjvjjMg=
Subject key identifier:   B8:84:EC:D1:A0:64:F5:68:7B:4D:45:1C:53:7F:3A:F0:07:4D:39:29
Certificate issuer:       /CN=A815D76D5926B645F19939B1DFE9F62AD39C1E15
Certificate serial:       0C
Authority key identifier: A8:15:D7:6D:59:26:B6:45:F1:99:39:B1:DF:E9:F6:2A:D3:9C:1E:15
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qBXXbVkmtkXxmTmx3-n2KtOcHhU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30420/uITs0aBk9Wh7TUUcU3868AdNOSk.roa
Signing time:             Sun 17 Mar 2024 12:09:09 +0000
ROA not before:           Sun 17 Mar 2024 12:09:09 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     59098
IP address blocks:        2400:f7a0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30420/qBXXbVkmtkXxmTmx3-n2KtOcHhU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30420/qBXXbVkmtkXxmTmx3-n2KtOcHhU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qBXXbVkmtkXxmTmx3-n2KtOcHhU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A815D76D5926B645F19939B1DFE9F62AD39C1E15
        Validity
            Not Before: Mar 17 12:09:09 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=B884ECD1A064F5687B4D451C537F3AF0074D3929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:2a:3f:c1:8f:bb:bc:3f:fb:b9:91:41:79:c2:
                    6e:9f:48:44:0f:34:fb:8c:30:68:38:bb:d6:63:34:
                    14:f9:33:47:27:6c:79:f7:e9:e5:02:35:00:79:af:
                    26:76:ee:de:5e:b9:f3:5b:15:1a:73:23:9c:d0:c8:
                    e9:2d:b3:e8:6a:8d:fd:ed:c1:36:d3:7b:e1:2f:56:
                    55:1f:d8:70:d1:4c:1f:54:38:c9:3d:d1:aa:19:e8:
                    8b:29:e9:25:76:c7:57:61:f1:88:f8:f1:88:53:2c:
                    b8:39:a8:d0:f3:89:6f:c5:08:a0:66:78:cd:d3:4e:
                    40:2c:7a:3a:ab:96:a4:c2:0d:bd:9c:d2:e3:93:d8:
                    3e:f3:ec:93:1f:56:26:49:c7:5b:bd:b2:8c:7d:e8:
                    fd:5f:ae:2a:5a:7a:7a:38:df:a0:51:e4:08:b7:e4:
                    2e:01:05:96:13:95:8a:8f:b9:4c:03:46:86:c6:20:
                    d9:82:3d:72:e2:68:26:b0:13:b0:52:99:71:b8:02:
                    6d:7c:14:6d:5c:81:33:f7:a2:3b:d2:19:d3:bb:d7:
                    f3:d3:cd:a7:fa:d7:2f:fe:83:9f:36:1a:4f:35:b7:
                    89:da:d9:dd:58:a3:68:6c:fb:6a:db:33:46:d0:a9:
                    eb:16:6e:5c:b5:e4:0f:cc:9d:a4:fb:d1:22:64:21:
                    1b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:84:EC:D1:A0:64:F5:68:7B:4D:45:1C:53:7F:3A:F0:07:4D:39:29
            X509v3 Authority Key Identifier:
                keyid:A8:15:D7:6D:59:26:B6:45:F1:99:39:B1:DF:E9:F6:2A:D3:9C:1E:15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30420/qBXXbVkmtkXxmTmx3-n2KtOcHhU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qBXXbVkmtkXxmTmx3-n2KtOcHhU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30420/uITs0aBk9Wh7TUUcU3868AdNOSk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:f7a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:96:2a:ab:4c:0f:73:7f:4a:09:b6:86:d7:5d:73:7c:20:23:
         9a:ce:0e:94:3d:3e:00:e1:7e:6b:17:1a:e4:cc:d1:4f:8d:23:
         20:aa:5d:8c:a3:94:e7:ba:47:40:d8:46:8e:28:fb:b6:4b:03:
         1f:f8:28:00:ed:60:86:04:56:d1:ca:cf:ce:ef:18:3d:e6:92:
         ec:a3:3c:60:67:e1:a4:a5:4f:08:b9:26:38:e4:6c:9a:b8:c5:
         d1:97:ac:12:1a:cc:a2:15:5f:12:5a:c0:8a:e6:cb:9e:f6:e5:
         a9:e4:10:9d:1a:b5:48:b2:bb:b4:33:59:73:bb:dc:13:2c:c7:
         71:71:82:89:69:65:98:3d:3d:ec:5c:7d:ca:92:81:f3:72:1d:
         56:b7:a8:8c:03:2c:1b:54:6c:f9:b0:94:15:1b:52:c4:b9:a5:
         4a:36:38:cc:52:85:e0:8a:76:9c:9b:0e:fd:85:1e:f3:eb:97:
         4b:79:98:0a:db:0b:53:f3:3a:a1:26:1b:b4:69:07:dc:36:30:
         f4:a9:3d:c7:8e:2d:da:f5:eb:68:ba:2e:4b:87:12:45:1c:5f:
         b5:fb:e3:56:58:0a:d4:ec:45:71:65:b2:bf:21:45:a6:f1:b1:
         bf:85:d0:1d:9e:36:6f:93:1e:c3:e0:64:bb:e6:dd:b1:fe:3a:
         aa:40:79:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:15 2024 by rpki-client on console-fra.rpki-client.org