Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30423/w0rea1uwefI4duo2WOeDLoXZGPc.roa
File:                     w0rea1uwefI4duo2WOeDLoXZGPc.roa (raw, json)
Hash identifier:          6Lr9i2Klm/sb+vYpjLvEJHUBd1PAXj5HLxzNT5pjbko=
Subject key identifier:   C3:4A:DE:6B:5B:B0:79:F2:38:76:EA:36:58:E7:83:2E:85:D9:18:F7
Certificate issuer:       /CN=B910BD9437967C7AFDD374E1EA6EBED7FA6F96B5
Certificate serial:       18
Authority key identifier: B9:10:BD:94:37:96:7C:7A:FD:D3:74:E1:EA:6E:BE:D7:FA:6F:96:B5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uRC9lDeWfHr903Th6m6-1_pvlrU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/w0rea1uwefI4duo2WOeDLoXZGPc.roa
Signing time:             Thu 25 Apr 2024 07:53:04 +0000
ROA not before:           Thu 25 Apr 2024 07:53:04 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     58790
IP address blocks:        2401:d20:1020::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/uRC9lDeWfHr903Th6m6-1_pvlrU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/uRC9lDeWfHr903Th6m6-1_pvlrU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uRC9lDeWfHr903Th6m6-1_pvlrU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 20 Jun 2024 07:36:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B910BD9437967C7AFDD374E1EA6EBED7FA6F96B5
        Validity
            Not Before: Apr 25 07:53:04 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=C34ADE6B5BB079F23876EA3658E7832E85D918F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ca:3d:39:e7:85:f8:32:2d:d5:f0:9c:a6:70:
                    46:19:be:ac:59:ad:a5:d6:0c:44:02:79:c3:14:d2:
                    87:2e:3f:34:95:be:ca:f8:12:19:01:77:95:9e:98:
                    00:c1:04:2a:9c:2e:cd:29:73:4a:ba:ae:fb:91:39:
                    67:29:f9:df:37:56:be:a8:14:4f:fa:2b:68:29:e4:
                    3b:73:9b:41:fe:86:95:6e:28:78:e7:9d:9c:ee:16:
                    33:af:52:2c:f0:f8:c4:8f:38:fe:0c:6b:b0:8f:9d:
                    88:2f:66:c3:b1:a1:c4:90:87:ae:e9:ec:ce:95:c0:
                    bd:84:12:b7:e6:ad:e7:65:dc:ec:d4:af:73:30:86:
                    70:59:6a:87:36:d4:14:2c:c1:cb:d3:b3:4e:e7:8c:
                    57:6f:ca:6a:fb:de:35:94:04:5d:6b:eb:38:53:3f:
                    d7:f4:dc:1e:93:44:04:99:d6:8c:c3:d3:d9:3f:d2:
                    43:5d:14:ee:2f:76:97:6b:37:b1:ab:d1:71:0a:61:
                    75:26:ea:d6:63:9d:74:fc:02:21:93:15:24:bc:94:
                    16:0e:82:62:89:18:11:51:b6:5e:29:ff:7a:24:3f:
                    bf:8b:38:f4:6b:2e:ae:0e:65:b7:e1:72:4b:52:b6:
                    47:18:4f:4b:4e:43:85:6c:f7:65:31:48:96:50:2a:
                    57:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:4A:DE:6B:5B:B0:79:F2:38:76:EA:36:58:E7:83:2E:85:D9:18:F7
            X509v3 Authority Key Identifier:
                keyid:B9:10:BD:94:37:96:7C:7A:FD:D3:74:E1:EA:6E:BE:D7:FA:6F:96:B5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/uRC9lDeWfHr903Th6m6-1_pvlrU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uRC9lDeWfHr903Th6m6-1_pvlrU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/w0rea1uwefI4duo2WOeDLoXZGPc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:d20:1020::/44

    Signature Algorithm: sha256WithRSAEncryption
         21:a8:20:93:cb:9c:29:8b:3f:27:7f:3d:b3:3d:8d:75:f2:f7:
         79:b5:e2:d2:6d:10:05:1a:6c:fd:28:0e:d0:a1:3f:e8:00:cf:
         c3:45:81:5d:78:73:80:fd:21:fa:5b:75:61:8b:62:21:f4:b5:
         e3:09:14:63:3f:68:5f:5f:1e:0f:8b:08:83:a7:97:a6:46:a2:
         27:70:73:97:cd:6f:60:18:74:90:86:b0:3c:08:bc:46:fb:c6:
         81:13:83:42:7f:8f:31:30:4e:b2:63:5f:02:47:90:0c:5f:d3:
         87:ad:c0:7a:68:28:6c:72:fd:74:96:ce:9d:25:82:0d:3e:4f:
         66:79:71:4c:64:8b:25:23:2f:6b:57:e4:1c:c4:6a:50:a3:4c:
         73:c2:7f:a4:ef:9b:c3:68:65:7a:3a:d5:ae:3d:c8:67:7d:1f:
         fa:de:ff:db:2a:5d:1a:5d:e5:67:7f:08:b1:75:0e:41:27:08:
         76:99:67:00:0d:6e:14:28:04:3f:b2:ef:49:53:88:08:1a:71:
         e8:47:02:0a:91:50:29:73:99:cd:12:7a:12:ba:84:63:b8:27:
         3d:9e:4d:25:24:af:3a:83:0c:0c:2e:1a:b9:5e:72:83:56:54:
         8c:fe:ff:39:74:18:08:f6:61:dd:5e:d3:a5:9d:91:87:8d:70:
         d0:95:2b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 17:53:30 2024 by rpki-client on console-ams.rpki-client.org