Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30423/3STKW73JnXTUTuz86mtRobjQ-H0.roa
File:                     3STKW73JnXTUTuz86mtRobjQ-H0.roa (raw, json)
Hash identifier:          Ncyyymt6RooiDXLUizUe0AuDiGw8SL3j0tUs2yEkWOo=
Subject key identifier:   DD:24:CA:5B:BD:C9:9D:74:D4:4E:EC:FC:EA:6B:51:A1:B8:D0:F8:7D
Certificate issuer:       /CN=B910BD9437967C7AFDD374E1EA6EBED7FA6F96B5
Certificate serial:       1B
Authority key identifier: B9:10:BD:94:37:96:7C:7A:FD:D3:74:E1:EA:6E:BE:D7:FA:6F:96:B5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uRC9lDeWfHr903Th6m6-1_pvlrU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/3STKW73JnXTUTuz86mtRobjQ-H0.roa
Signing time:             Tue 30 Apr 2024 17:24:00 +0000
ROA not before:           Tue 30 Apr 2024 17:24:00 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     63803
IP address blocks:        2401:d20:2fff::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/uRC9lDeWfHr903Th6m6-1_pvlrU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/uRC9lDeWfHr903Th6m6-1_pvlrU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uRC9lDeWfHr903Th6m6-1_pvlrU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27 (0x1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B910BD9437967C7AFDD374E1EA6EBED7FA6F96B5
        Validity
            Not Before: Apr 30 17:24:00 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=DD24CA5BBDC99D74D44EECFCEA6B51A1B8D0F87D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a1:c2:1a:10:26:c1:69:79:52:f8:93:ae:ef:
                    95:87:9f:1a:29:60:50:7d:6f:28:10:f5:82:27:d9:
                    74:29:c4:f6:50:7b:be:0a:c3:e1:25:bf:c0:d0:38:
                    7c:a0:82:e1:6e:58:37:90:db:9c:b9:77:99:6a:0f:
                    79:a4:f2:85:19:71:2f:70:83:86:e7:e9:c9:30:83:
                    9c:c8:e0:46:a9:0a:46:e3:38:80:e9:3f:d5:21:17:
                    98:01:13:de:dc:c5:26:38:ac:f8:f7:4c:51:b9:b5:
                    8c:aa:54:87:96:15:dc:b5:3f:5b:bd:fd:e4:d6:cd:
                    2e:cf:02:90:12:ca:fc:ab:51:ed:6f:6d:93:41:c2:
                    5a:fe:44:47:f6:61:4e:51:58:d4:f2:de:01:4b:1b:
                    c3:33:e4:76:42:ca:e3:29:c9:05:64:39:e5:c0:ff:
                    f7:24:bd:b3:bc:44:41:89:60:3b:a8:0f:83:2a:63:
                    f1:a5:6a:8c:d2:ad:71:58:11:0d:b2:56:c1:5d:4f:
                    e8:4d:e8:71:04:39:9a:08:5c:bd:b1:d8:ab:f3:e7:
                    13:ed:af:49:1a:e9:6a:c3:f9:1c:fa:f8:ef:45:c0:
                    5d:53:f6:f9:6b:1b:ad:85:00:db:29:21:63:3f:af:
                    49:d6:1c:db:b4:0b:69:44:66:4d:7d:94:4c:4d:41:
                    e3:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:24:CA:5B:BD:C9:9D:74:D4:4E:EC:FC:EA:6B:51:A1:B8:D0:F8:7D
            X509v3 Authority Key Identifier:
                keyid:B9:10:BD:94:37:96:7C:7A:FD:D3:74:E1:EA:6E:BE:D7:FA:6F:96:B5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/uRC9lDeWfHr903Th6m6-1_pvlrU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uRC9lDeWfHr903Th6m6-1_pvlrU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/3STKW73JnXTUTuz86mtRobjQ-H0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:d20:2fff::/48

    Signature Algorithm: sha256WithRSAEncryption
         8f:1b:93:78:3b:75:46:15:77:3d:80:ac:54:70:44:19:b5:e6:
         07:65:cd:05:81:f7:83:81:b3:89:23:57:2a:c3:73:d1:66:80:
         81:37:63:14:50:93:17:83:de:fe:a8:ec:5c:19:ee:41:56:61:
         0c:cc:25:d4:27:f8:6e:f3:ef:ba:50:ce:ea:aa:ad:19:94:30:
         38:89:7a:76:2b:14:f9:f9:27:58:17:97:32:f7:7f:c2:7e:e5:
         54:75:5a:40:14:4c:64:25:36:a0:c4:27:22:a2:ec:12:ce:54:
         8c:dd:52:77:98:59:2f:d9:c9:b0:69:00:02:43:e9:a1:51:92:
         39:31:d7:a7:c4:33:cb:d9:54:84:33:d5:e0:6f:00:1c:f0:1d:
         5a:43:f4:e3:1c:6f:8c:32:ac:f3:d9:cd:3a:da:94:dc:ad:9d:
         ba:00:4a:c9:9e:6b:a8:3d:27:b1:f2:e9:08:70:67:c6:d7:81:
         37:26:a0:e4:fb:81:8e:30:7a:84:c5:01:ef:fd:4a:09:c6:e3:
         0e:e5:8f:68:f0:48:dc:4d:2d:95:4f:68:7f:c1:0e:22:99:e2:
         f0:ea:95:32:a5:42:41:53:40:7e:33:7f:29:cc:15:d4:7f:bc:
         ca:ee:9a:cb:24:79:cc:8c:17:d8:ef:66:51:60:4a:a0:a9:44:
         a6:35:28:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:23:58 2024 by rpki-client on console-fra.rpki-client.org