Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30439/ucyXWBUZd2wIqsykSNuXkAa8nFU.roa
File:                     ucyXWBUZd2wIqsykSNuXkAa8nFU.roa (raw, json)
Hash identifier:          QPxiV0nZNi1ZxBYeldW+2BUPR+IuLVpF3vioxeEeDM4=
Subject key identifier:   B9:CC:97:58:15:19:77:6C:08:AA:CC:A4:48:DB:97:90:06:BC:9C:55
Certificate issuer:       /CN=8D020A88FCA0F5ADBB5A598AA8125534E575C13C
Certificate serial:       02
Authority key identifier: 8D:02:0A:88:FC:A0:F5:AD:BB:5A:59:8A:A8:12:55:34:E5:75:C1:3C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jQIKiPyg9a27WlmKqBJVNOV1wTw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30439/ucyXWBUZd2wIqsykSNuXkAa8nFU.roa
Signing time:             Fri 09 Aug 2024 13:51:10 +0000
ROA not before:           Fri 09 Aug 2024 13:51:10 +0000
ROA not after:            Sat 09 Aug 2025 13:02:58 +0000
asID:                     63801
IP address blocks:        2401:b420::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30439/jQIKiPyg9a27WlmKqBJVNOV1wTw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30439/jQIKiPyg9a27WlmKqBJVNOV1wTw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jQIKiPyg9a27WlmKqBJVNOV1wTw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D020A88FCA0F5ADBB5A598AA8125534E575C13C
        Validity
            Not Before: Aug  9 13:51:10 2024 GMT
            Not After : Aug  9 13:02:58 2025 GMT
        Subject: CN=B9CC97581519776C08AACCA448DB979006BC9C55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:07:2d:a1:6c:67:ff:d5:4a:b2:d7:b2:f5:62:
                    9b:92:02:e5:f7:11:e5:74:64:a7:da:53:9a:86:63:
                    d5:13:3c:f4:04:0b:5f:8d:33:fb:73:9c:12:ff:07:
                    6f:56:d9:95:14:fd:f8:fd:74:8d:28:e2:08:06:38:
                    3d:86:5c:e3:f5:52:03:3c:df:dd:4b:c8:68:0b:d8:
                    2b:7a:9e:73:59:6f:7f:09:31:5f:2f:48:39:84:7f:
                    14:7a:91:b6:fd:35:70:9e:ce:62:76:16:0b:d6:84:
                    cd:90:30:fd:8b:5e:6e:2a:3d:94:21:a8:86:4e:e0:
                    4e:4c:e5:6f:ea:d1:c1:ad:79:c3:2f:37:39:c7:f2:
                    e7:87:d8:06:47:d1:5c:37:fd:12:05:ce:55:7b:32:
                    13:ad:16:77:1c:1c:80:bf:5f:fe:23:56:f8:49:6f:
                    5f:00:25:1e:d0:48:ab:a5:c3:9b:2c:b5:61:fd:2a:
                    36:ac:dc:fc:ef:f2:e9:70:de:d3:0b:8f:9e:6c:95:
                    92:65:41:83:6a:83:e1:73:a2:50:47:76:c4:b7:bd:
                    3d:ad:05:7f:28:d5:03:d3:cb:cc:e4:80:b7:c5:72:
                    a5:44:bf:96:d3:04:9b:1c:03:12:38:83:ff:57:64:
                    c8:2d:97:04:5a:cc:7f:46:13:24:22:d3:08:72:0b:
                    7b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:CC:97:58:15:19:77:6C:08:AA:CC:A4:48:DB:97:90:06:BC:9C:55
            X509v3 Authority Key Identifier:
                keyid:8D:02:0A:88:FC:A0:F5:AD:BB:5A:59:8A:A8:12:55:34:E5:75:C1:3C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30439/jQIKiPyg9a27WlmKqBJVNOV1wTw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jQIKiPyg9a27WlmKqBJVNOV1wTw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30439/ucyXWBUZd2wIqsykSNuXkAa8nFU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:b420::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:c2:3f:54:77:78:76:d5:10:ea:12:4a:1e:b3:7f:6f:f6:f4:
         c1:66:b0:3c:b4:4c:8d:05:17:6b:ed:41:62:a1:d0:df:55:f0:
         1c:f2:f1:f2:22:f5:5d:0b:4f:2d:ca:77:2f:bf:7d:70:bc:3e:
         d9:9b:db:e3:0f:26:28:14:56:01:fd:55:26:55:2c:54:c1:cf:
         5e:62:91:fa:02:d6:ed:f0:55:dc:5e:18:3a:e6:1d:aa:97:ac:
         90:9a:8b:7d:9a:d6:f5:7a:59:b0:12:1b:e8:c9:c9:83:cb:c2:
         8d:2a:29:75:7d:3f:04:2a:d7:6e:dd:a0:90:d3:65:bb:3e:8e:
         49:9d:3c:6a:19:49:5a:c5:65:37:6a:48:3b:14:54:a6:76:a8:
         24:4e:6c:0b:26:02:4c:95:d4:ae:2d:6e:2e:e5:5e:73:c0:af:
         79:2d:ff:78:83:f3:42:6e:cc:ff:f0:89:11:f0:c3:dd:56:c0:
         68:22:68:af:fd:38:c7:c3:e8:d5:34:bf:08:9e:6f:a5:83:b8:
         dc:55:57:9c:65:c7:77:17:4c:5f:4a:96:2f:71:ee:d4:c7:59:
         f6:f5:96:05:ef:43:14:79:57:db:80:6a:d4:ee:7d:7b:96:98:
         f7:6f:e1:fe:d7:0e:50:96:aa:5c:41:86:25:2e:74:45:a3:eb:
         db:cc:f9:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:08 2024 by rpki-client on console-fra.rpki-client.org