Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/39002/Cw5SwYT4n156hCd46R9ZF-_BPXo.roa
File:                     Cw5SwYT4n156hCd46R9ZF-_BPXo.roa (raw, json)
Hash identifier:          UTrxEDAfrOVsLTb561H//iW/tBVE8sSZaVDjyvH7RXY=
Subject key identifier:   0B:0E:52:C1:84:F8:9F:5E:7A:84:27:78:E9:1F:59:17:EF:C1:3D:7A
Certificate issuer:       /CN=F974F9EB3E6B6AD8B1EAEA0A461D248D3ACDCDE2
Certificate serial:       12
Authority key identifier: F9:74:F9:EB:3E:6B:6A:D8:B1:EA:EA:0A:46:1D:24:8D:3A:CD:CD:E2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-XT56z5ratix6uoKRh0kjTrNzeI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39002/Cw5SwYT4n156hCd46R9ZF-_BPXo.roa
Signing time:             Sun 01 Oct 2023 01:31:14 +0000
ROA not before:           Sun 01 Oct 2023 01:31:14 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     0
IP address blocks:        2001:de8:8:6::/64 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39002/-XT56z5ratix6uoKRh0kjTrNzeI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39002/-XT56z5ratix6uoKRh0kjTrNzeI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-XT56z5ratix6uoKRh0kjTrNzeI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 May 2024 21:46:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18 (0x12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F974F9EB3E6B6AD8B1EAEA0A461D248D3ACDCDE2
        Validity
            Not Before: Oct  1 01:31:14 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=0B0E52C184F89F5E7A842778E91F5917EFC13D7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:34:52:ff:c0:a0:cd:5d:fb:64:16:d5:60:cb:
                    89:58:5e:be:64:9f:46:40:b0:52:58:f8:31:45:82:
                    66:32:77:f7:0c:97:83:29:7b:84:d5:0f:aa:a0:e3:
                    8c:a8:2b:13:65:f5:a0:8d:47:ab:87:1d:df:7c:7a:
                    fb:e7:71:64:35:99:e4:f0:b0:03:d8:78:6a:65:51:
                    3b:a3:50:77:4e:d2:0d:00:23:b9:8e:e9:82:4d:c0:
                    66:d7:4f:bf:7a:dc:43:0f:b8:f1:75:3e:40:b3:28:
                    38:94:d3:d4:9e:37:54:27:95:a1:e1:8e:c7:f9:1c:
                    0a:af:26:65:20:14:6e:2a:e6:66:45:dc:6f:4d:6d:
                    ab:cc:b8:6f:56:90:12:35:7d:4b:aa:be:bc:98:bc:
                    92:c3:72:5b:04:0f:2f:96:94:4b:62:84:2a:9a:73:
                    12:41:99:d2:e9:a0:8f:37:59:9d:7b:6d:b3:0e:01:
                    12:b1:1b:ac:6d:b6:80:d3:ca:7d:f7:f9:f5:17:cf:
                    18:f8:fc:8e:a1:b4:c2:9c:7e:cf:32:75:0d:aa:9d:
                    1e:d9:f0:b3:20:94:44:48:8c:01:c5:6f:83:ac:d7:
                    b5:cf:a9:d3:1f:64:7b:7b:fe:69:57:1e:92:30:32:
                    4a:c5:bc:72:79:47:4f:25:52:57:61:2e:5a:c9:28:
                    44:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:0E:52:C1:84:F8:9F:5E:7A:84:27:78:E9:1F:59:17:EF:C1:3D:7A
            X509v3 Authority Key Identifier:
                keyid:F9:74:F9:EB:3E:6B:6A:D8:B1:EA:EA:0A:46:1D:24:8D:3A:CD:CD:E2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39002/-XT56z5ratix6uoKRh0kjTrNzeI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-XT56z5ratix6uoKRh0kjTrNzeI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39002/Cw5SwYT4n156hCd46R9ZF-_BPXo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:de8:8:6::/64

    Signature Algorithm: sha256WithRSAEncryption
         a4:02:34:ef:37:08:95:fb:b8:32:5d:dc:2d:45:97:bb:36:37:
         54:7d:c9:fd:ac:e0:f9:00:79:f9:32:2b:55:57:33:cb:9b:75:
         1d:73:a4:eb:01:3a:4d:7a:6b:74:28:88:80:4f:04:e0:78:68:
         98:dc:b6:05:9e:ea:ae:e1:a8:b6:1e:9b:07:8d:7f:26:75:6f:
         df:b2:30:b8:06:83:f1:79:f9:4c:83:20:43:8a:4d:ae:80:73:
         df:e5:ef:77:60:af:01:6d:d6:87:f4:c2:00:9c:22:e4:d1:e0:
         3d:e1:ac:cc:ea:80:ff:70:16:e8:c2:bc:3e:f4:10:22:6b:c0:
         15:9a:e2:fd:8f:cd:5a:b1:a9:de:51:9b:b4:78:7f:32:52:8c:
         74:0b:de:5a:9f:df:14:83:21:84:d9:bf:31:38:83:f5:b3:59:
         64:d2:60:79:f0:c2:c4:ed:a9:be:29:97:af:87:cd:b2:1d:b8:
         88:34:85:a0:b4:00:ea:c2:86:b2:9c:d3:0c:fd:c3:d6:6e:c7:
         bd:8f:f9:e6:8e:69:76:8a:3b:8b:eb:b7:b9:98:dc:98:15:58:
         b1:f5:7e:9b:16:a6:f5:b1:14:2c:67:43:06:24:1a:05:65:38:
         11:3c:c0:fe:d3:06:bc:b8:26:e0:70:9d:04:89:2e:a4:11:c8:
         0c:c2:4a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 00:30:33 2024 by rpki-client on console-fra.rpki-client.org