Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30423/FKdjkS8Umux1FfgdNaB1fOkLlv4.roa
File:                     FKdjkS8Umux1FfgdNaB1fOkLlv4.roa (raw, json)
Hash identifier:          zZqRMa7D9LQ6sXhskKLGJGx6INRXESAN4naOvXIR+8U=
Subject key identifier:   14:A7:63:91:2F:14:9A:EC:75:15:F8:1D:35:A0:75:7C:E9:0B:96:FE
Certificate issuer:       /CN=B910BD9437967C7AFDD374E1EA6EBED7FA6F96B5
Certificate serial:       0D
Authority key identifier: B9:10:BD:94:37:96:7C:7A:FD:D3:74:E1:EA:6E:BE:D7:FA:6F:96:B5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uRC9lDeWfHr903Th6m6-1_pvlrU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/FKdjkS8Umux1FfgdNaB1fOkLlv4.roa
Signing time:             Thu 11 Jan 2024 01:29:44 +0000
ROA not before:           Thu 11 Jan 2024 01:29:44 +0000
ROA not after:            Sat 14 Dec 2024 01:30:03 +0000
asID:                     150368
IP address blocks:        2401:d20:1010::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/uRC9lDeWfHr903Th6m6-1_pvlrU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/uRC9lDeWfHr903Th6m6-1_pvlrU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uRC9lDeWfHr903Th6m6-1_pvlrU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 20 Jun 2024 07:36:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13 (0xd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B910BD9437967C7AFDD374E1EA6EBED7FA6F96B5
        Validity
            Not Before: Jan 11 01:29:44 2024 GMT
            Not After : Dec 14 01:30:03 2024 GMT
        Subject: CN=14A763912F149AEC7515F81D35A0757CE90B96FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:42:fd:ef:52:f1:ff:ef:a3:5b:53:9f:56:eb:
                    75:f1:c1:a9:ac:97:57:a8:6d:d6:89:6d:9a:5c:dd:
                    7f:7b:ed:48:33:f0:2b:12:4c:29:d8:aa:e2:c8:c2:
                    b8:b5:fb:5f:2a:57:bc:03:d2:fb:dd:dd:a3:84:0f:
                    49:dd:cc:61:a2:80:9f:a9:00:b3:43:c0:85:f1:c1:
                    0a:65:bd:39:33:73:6b:41:3c:c9:21:c8:a5:26:f5:
                    93:24:77:0e:77:b0:eb:b2:97:dc:a6:de:5a:a4:0c:
                    7f:90:71:7c:61:f8:04:2f:14:09:05:0b:31:53:15:
                    7e:55:5c:96:34:82:32:1d:41:70:37:18:82:62:a5:
                    ca:1d:75:3b:ed:a8:d1:9b:20:6f:df:c4:16:3f:c1:
                    b9:0a:68:ba:8e:c9:3b:1e:60:84:2e:fc:31:f6:16:
                    81:6f:3e:e4:b1:30:8a:4e:fd:6c:52:83:52:71:b9:
                    9a:ab:ae:fe:f7:ea:a6:51:8b:88:55:26:a5:52:d7:
                    29:7c:71:46:0a:c5:23:cc:35:32:49:a2:99:82:dc:
                    8a:f8:ee:58:2b:92:a1:78:70:7f:4d:71:95:c1:f9:
                    5f:88:ab:c2:7f:4f:5e:f5:bf:2a:1e:ac:f4:e2:a3:
                    b6:df:71:1d:28:98:69:16:71:6e:a9:e3:8b:6c:46:
                    5b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:A7:63:91:2F:14:9A:EC:75:15:F8:1D:35:A0:75:7C:E9:0B:96:FE
            X509v3 Authority Key Identifier:
                keyid:B9:10:BD:94:37:96:7C:7A:FD:D3:74:E1:EA:6E:BE:D7:FA:6F:96:B5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/uRC9lDeWfHr903Th6m6-1_pvlrU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uRC9lDeWfHr903Th6m6-1_pvlrU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/FKdjkS8Umux1FfgdNaB1fOkLlv4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:d20:1010::/44

    Signature Algorithm: sha256WithRSAEncryption
         3f:fc:43:45:ad:69:ad:16:1a:e8:f2:c2:5c:94:5c:2a:83:64:
         d2:ae:13:5e:58:53:c3:d9:6a:fa:5f:f5:96:02:42:a8:31:a8:
         4b:c9:98:a9:76:3c:36:a7:06:92:bc:51:2b:5a:d3:3d:2e:6b:
         0e:2e:74:d6:b7:a7:a2:44:90:23:7b:4b:21:c2:4d:07:80:05:
         62:0a:65:f7:a7:74:c0:a2:ba:48:a9:bb:fc:e7:64:15:8f:29:
         82:7a:c6:7e:d1:2a:cb:a2:c0:06:94:c8:c6:dc:23:aa:6c:6b:
         35:80:02:98:5f:04:5e:d7:38:4f:ba:e6:4a:39:99:8a:e2:48:
         58:73:0c:ab:d8:fc:b4:a0:3e:ea:b5:a9:17:eb:35:35:2c:5c:
         95:f7:52:2a:de:00:a5:5c:70:da:a8:96:62:2a:2d:15:84:35:
         48:c6:a2:c1:f4:17:06:a0:2c:3c:e5:45:db:43:e8:0f:9f:30:
         38:74:44:d5:02:21:d2:73:18:75:89:29:b3:26:2f:a4:cc:e1:
         e7:ce:b5:8b:b5:72:01:0c:3d:2c:1a:60:3e:2b:70:4b:10:d1:
         96:d7:5d:96:9b:6e:84:43:2b:b1:58:ac:b9:cc:20:2e:94:a8:
         2c:ba:ab:fa:3b:fa:aa:29:75:05:0c:a6:c9:e7:8b:fd:13:89:
         c3:a6:e5:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 14:58:58 2024 by rpki-client on console-fra.rpki-client.org