Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30423/jgICliQDmuamhpSQkQWA2h0JanY.roa
File:                     jgICliQDmuamhpSQkQWA2h0JanY.roa (raw, json)
Hash identifier:          BnJnvd+rZmwbbdKXg1l3u/BGj6EJSMu2tkzlvcisNss=
Subject key identifier:   8E:02:02:96:24:03:9A:E6:A6:86:94:90:91:05:80:DA:1D:09:6A:76
Certificate issuer:       /CN=B910BD9437967C7AFDD374E1EA6EBED7FA6F96B5
Certificate serial:       10
Authority key identifier: B9:10:BD:94:37:96:7C:7A:FD:D3:74:E1:EA:6E:BE:D7:FA:6F:96:B5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uRC9lDeWfHr903Th6m6-1_pvlrU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/jgICliQDmuamhpSQkQWA2h0JanY.roa
Signing time:             Thu 25 Jan 2024 16:03:03 +0000
ROA not before:           Thu 25 Jan 2024 16:03:03 +0000
ROA not after:            Tue 14 Jan 2025 01:30:02 +0000
asID:                     63800
IP address blocks:        2401:d20:c0fe::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/uRC9lDeWfHr903Th6m6-1_pvlrU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/uRC9lDeWfHr903Th6m6-1_pvlrU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uRC9lDeWfHr903Th6m6-1_pvlrU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 20 Jun 2024 07:36:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B910BD9437967C7AFDD374E1EA6EBED7FA6F96B5
        Validity
            Not Before: Jan 25 16:03:03 2024 GMT
            Not After : Jan 14 01:30:02 2025 GMT
        Subject: CN=8E02029624039AE6A6869490910580DA1D096A76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:57:60:e2:a3:0e:f9:e1:e5:b5:81:8e:09:67:
                    db:a5:a3:4a:a4:27:a0:41:e2:bb:64:e9:32:8a:d7:
                    fa:4b:11:62:6d:40:ba:15:9b:f0:ce:af:3e:7e:62:
                    15:2e:59:24:8b:db:e0:b6:e5:b7:ea:a0:56:7e:0e:
                    c3:63:0c:75:8d:6d:8e:d5:3c:30:40:c2:d9:18:ba:
                    48:05:2c:f8:0e:37:2f:ee:de:6f:2e:e9:8f:26:80:
                    ad:e2:e1:53:37:2e:d2:d2:23:b3:06:4c:72:1e:c5:
                    37:f4:c5:96:75:5b:9c:49:c3:1e:cc:db:fb:69:38:
                    5d:4b:b5:07:1a:e6:0f:48:a4:2c:d8:a9:2f:00:ce:
                    96:74:26:5c:62:cd:95:16:5b:f8:30:07:51:58:de:
                    c5:de:ad:0b:f6:a1:2b:a2:2a:51:99:a2:7a:d5:43:
                    39:c7:83:cf:0e:6c:33:60:05:8d:86:14:10:ab:1d:
                    4c:b4:3f:23:12:99:84:5f:a9:83:43:8d:71:24:66:
                    ec:8e:bd:5f:bf:81:4a:b1:59:4d:e8:b5:e7:11:03:
                    e3:37:36:4a:29:a5:71:6d:04:04:58:e7:63:58:11:
                    b2:2e:6f:7c:37:12:bd:09:66:31:27:9c:c8:c4:0d:
                    a4:7c:4e:95:fc:bd:a3:e5:0a:7e:ac:1e:dc:1e:07:
                    00:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:02:02:96:24:03:9A:E6:A6:86:94:90:91:05:80:DA:1D:09:6A:76
            X509v3 Authority Key Identifier:
                keyid:B9:10:BD:94:37:96:7C:7A:FD:D3:74:E1:EA:6E:BE:D7:FA:6F:96:B5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/uRC9lDeWfHr903Th6m6-1_pvlrU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uRC9lDeWfHr903Th6m6-1_pvlrU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/jgICliQDmuamhpSQkQWA2h0JanY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:d20:c0fe::/48

    Signature Algorithm: sha256WithRSAEncryption
         76:12:56:c8:b2:bc:3b:2a:87:28:02:ac:dd:a9:fa:84:c2:53:
         36:22:ee:ae:79:c4:a4:5e:72:0d:e4:d8:fa:fe:ac:7e:18:e6:
         27:2c:55:8a:f6:83:38:4d:36:84:30:c5:d3:c8:cf:93:50:95:
         55:d9:a3:ed:f7:17:84:e3:cc:5e:dc:c7:48:92:96:c3:16:b5:
         8b:5f:47:43:8a:ed:2c:0c:c9:87:a5:a7:db:ca:bc:68:92:3e:
         7e:80:7f:a6:02:8a:51:0c:0f:0b:ce:e9:c4:2f:b9:e5:f6:5d:
         1c:e6:51:56:5f:74:19:71:65:95:01:9e:06:4d:09:3c:dd:a0:
         b7:34:72:7c:5d:83:b1:23:1e:b7:79:24:b4:14:24:18:e2:36:
         83:2b:33:c5:b8:c4:dd:1c:f9:f1:a2:eb:2d:0e:1a:e9:66:ca:
         fe:d0:12:d1:e6:fd:b1:b9:90:39:e3:ac:78:9f:52:e6:eb:31:
         88:d4:80:74:55:be:b7:93:e6:3d:52:b2:68:25:db:1a:47:4d:
         14:bb:b9:8c:32:2b:bc:9b:44:df:bd:ac:bd:37:dc:52:73:eb:
         ca:7a:79:13:1d:c9:67:35:26:4a:7d:af:38:61:5a:7d:64:33:
         13:eb:40:2c:3c:56:e6:13:29:b3:37:dc:09:7a:f3:ab:2a:15:
         6b:43:f5:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 14:58:58 2024 by rpki-client on console-fra.rpki-client.org