Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30435/WaD6QZbCJM16QNHSDbKBXRD1FAo.roa
File:                     WaD6QZbCJM16QNHSDbKBXRD1FAo.roa (raw, json)
Hash identifier:          KmAcQblgjYwDI2mFU4Lz3TA15lk6Ht8Ty/d80fYxgSY=
Subject key identifier:   59:A0:FA:41:96:C2:24:CD:7A:40:D1:D2:0D:B2:81:5D:10:F5:14:0A
Certificate issuer:       /CN=C75C79F94D0EE54F1C08B47C6BA00F75ED052833
Certificate serial:       06
Authority key identifier: C7:5C:79:F9:4D:0E:E5:4F:1C:08:B4:7C:6B:A0:0F:75:ED:05:28:33
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x1x5-U0O5U8cCLR8a6APde0FKDM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30435/WaD6QZbCJM16QNHSDbKBXRD1FAo.roa
Signing time:             Wed 10 Jul 2024 15:34:16 +0000
ROA not before:           Wed 10 Jul 2024 15:34:16 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     55911
IP address blocks:        2401:98a0:110::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30435/x1x5-U0O5U8cCLR8a6APde0FKDM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30435/x1x5-U0O5U8cCLR8a6APde0FKDM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x1x5-U0O5U8cCLR8a6APde0FKDM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:58:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C75C79F94D0EE54F1C08B47C6BA00F75ED052833
        Validity
            Not Before: Jul 10 15:34:16 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=59A0FA4196C224CD7A40D1D20DB2815D10F5140A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ed:19:8e:1b:32:96:d9:60:18:e0:89:82:77:
                    cf:8a:0a:2d:97:47:fa:2e:4e:82:76:c1:75:3d:a6:
                    48:75:57:20:2d:0c:75:f8:f8:84:0b:5a:73:48:d1:
                    05:a4:0e:32:37:71:da:3c:95:ab:5b:04:64:97:ca:
                    86:30:a8:6a:55:c6:85:82:c0:6f:e7:d9:2d:a6:64:
                    f9:94:d7:b5:0a:46:06:91:21:a5:c7:93:ac:f9:4b:
                    63:37:b9:3b:48:a0:13:4a:e0:8c:c6:d8:48:5c:e3:
                    b0:8d:42:5e:d4:d5:ae:89:ed:7e:96:16:a0:7e:4b:
                    ec:77:d8:a0:d2:ca:39:2f:2c:2a:7b:58:cd:6d:f8:
                    db:3d:26:f8:b4:24:2e:a5:3e:00:d1:2b:8b:97:6b:
                    93:84:13:fe:14:95:9d:d9:57:e7:42:d0:a1:40:2d:
                    27:8d:47:6e:2a:43:66:51:04:e4:e2:fd:ff:4b:0b:
                    a6:83:d3:61:87:b5:49:09:40:31:60:d7:5b:df:2d:
                    4d:74:94:08:76:c7:9e:76:37:6f:b0:28:f9:88:4b:
                    b7:0d:86:8c:43:88:9f:21:00:7e:0a:17:f1:ae:83:
                    d5:28:61:e2:5a:d2:07:af:3f:6a:f4:9b:3c:45:f6:
                    00:ca:66:36:8c:7f:ed:01:73:50:80:18:9b:c5:88:
                    0a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:A0:FA:41:96:C2:24:CD:7A:40:D1:D2:0D:B2:81:5D:10:F5:14:0A
            X509v3 Authority Key Identifier:
                keyid:C7:5C:79:F9:4D:0E:E5:4F:1C:08:B4:7C:6B:A0:0F:75:ED:05:28:33

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30435/x1x5-U0O5U8cCLR8a6APde0FKDM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x1x5-U0O5U8cCLR8a6APde0FKDM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30435/WaD6QZbCJM16QNHSDbKBXRD1FAo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:98a0:110::/44

    Signature Algorithm: sha256WithRSAEncryption
         86:a4:d8:bb:c6:d1:3d:20:c0:d1:51:e6:31:89:a0:76:42:e5:
         77:8f:9d:45:80:a8:94:92:aa:60:2f:32:d4:74:0f:4d:dc:32:
         d2:41:a5:93:df:02:7a:78:59:b8:4a:ba:17:6c:b6:5d:5d:93:
         4a:3c:12:98:e4:35:c4:aa:f5:aa:3d:77:07:64:ce:ef:f7:ae:
         e8:aa:42:e7:bc:a9:a0:0b:22:2f:fb:3e:ca:41:a0:54:e8:de:
         15:a0:be:c8:69:76:b8:16:80:ed:44:86:f2:2d:d2:6c:29:3f:
         78:04:6b:77:d5:47:f1:34:1f:0e:13:17:28:09:ea:1e:24:d5:
         f6:f5:9d:7c:f6:78:17:21:63:04:ed:14:97:da:d4:ef:bd:33:
         42:13:e6:d5:df:3e:1a:90:31:f7:a0:13:c0:96:d1:b0:d5:69:
         3f:76:be:da:62:74:bc:93:79:05:36:d7:d0:05:e4:f5:75:0e:
         79:76:b5:4b:f2:2c:fc:ac:45:e8:c1:d8:35:d0:0f:ff:8e:84:
         8e:86:34:7e:3e:be:80:c6:93:be:72:fb:db:a7:b3:82:15:f9:
         e7:29:25:6a:92:a0:22:1f:29:62:c5:ea:1a:e9:f1:e8:2b:8c:
         39:45:ab:17:a9:d7:02:a7:eb:79:06:8c:2b:b5:16:c9:5d:35:
         29:a6:74:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:21:18 2024 by rpki-client on console-ams.rpki-client.org