Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/39002/jmi6mUjq3yE3Kvn0l7D0gYPqkWc.roa
File:                     jmi6mUjq3yE3Kvn0l7D0gYPqkWc.roa (raw, json)
Hash identifier:          EqOv1YCwtQztmYNN1MKBh61qryzZZNwj/HZ/VGD8FBA=
Subject key identifier:   8E:68:BA:99:48:EA:DF:21:37:2A:F9:F4:97:B0:F4:81:83:EA:91:67
Certificate issuer:       /CN=F974F9EB3E6B6AD8B1EAEA0A461D248D3ACDCDE2
Certificate serial:       10
Authority key identifier: F9:74:F9:EB:3E:6B:6A:D8:B1:EA:EA:0A:46:1D:24:8D:3A:CD:CD:E2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-XT56z5ratix6uoKRh0kjTrNzeI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39002/jmi6mUjq3yE3Kvn0l7D0gYPqkWc.roa
Signing time:             Fri 08 Sep 2023 06:52:30 +0000
ROA not before:           Fri 08 Sep 2023 06:52:30 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     0
IP address blocks:        2001:de8:8::/64 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39002/-XT56z5ratix6uoKRh0kjTrNzeI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39002/-XT56z5ratix6uoKRh0kjTrNzeI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-XT56z5ratix6uoKRh0kjTrNzeI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 May 2024 21:46:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F974F9EB3E6B6AD8B1EAEA0A461D248D3ACDCDE2
        Validity
            Not Before: Sep  8 06:52:30 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=8E68BA9948EADF21372AF9F497B0F48183EA9167
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d2:c1:68:4e:46:59:aa:4e:a8:34:ec:34:3b:
                    67:cb:d0:5c:9f:7a:42:af:03:57:34:75:25:ef:0f:
                    3d:82:ac:56:2f:6e:42:e7:ea:b2:ba:4d:fb:2b:d2:
                    67:13:36:57:b5:28:cb:47:78:42:19:ea:ed:a6:ac:
                    a9:7a:42:55:07:17:b6:93:4c:53:be:ee:24:47:51:
                    5d:d4:2e:44:70:7c:c9:9e:ef:7b:22:1f:2f:61:c4:
                    94:98:b4:a1:77:db:5f:02:88:54:23:b7:96:92:15:
                    62:1d:32:5b:c7:49:6f:90:40:45:0e:29:a6:6c:48:
                    5e:51:c2:ce:30:33:a0:78:9f:ce:f4:27:2d:65:c3:
                    9b:35:f6:5a:61:9b:64:90:01:29:6e:15:15:60:a5:
                    7b:78:cd:23:92:08:27:0b:97:b2:56:27:28:14:43:
                    e8:61:e4:9b:03:e3:9b:82:87:a9:db:e8:35:86:3d:
                    a0:61:53:d0:79:c4:93:a8:4e:05:63:4e:30:89:e5:
                    3d:1b:55:82:86:5a:4a:11:0a:f9:f8:3f:19:28:3f:
                    55:3d:c3:30:ec:cd:1a:9d:8e:87:01:25:a6:8a:04:
                    10:19:b5:03:3b:d1:16:8f:81:f4:30:b7:ab:bb:2f:
                    2d:6d:95:ff:fd:b9:7a:56:5e:3a:36:c6:ff:07:dc:
                    d2:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:68:BA:99:48:EA:DF:21:37:2A:F9:F4:97:B0:F4:81:83:EA:91:67
            X509v3 Authority Key Identifier:
                keyid:F9:74:F9:EB:3E:6B:6A:D8:B1:EA:EA:0A:46:1D:24:8D:3A:CD:CD:E2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39002/-XT56z5ratix6uoKRh0kjTrNzeI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-XT56z5ratix6uoKRh0kjTrNzeI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39002/jmi6mUjq3yE3Kvn0l7D0gYPqkWc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:de8:8::/64

    Signature Algorithm: sha256WithRSAEncryption
         17:cd:f5:11:ba:8f:cc:c1:aa:35:f1:4e:17:8f:75:2d:78:65:
         32:69:48:ba:28:bb:95:a7:d8:8d:1f:b0:23:aa:e0:1a:e8:42:
         dd:2d:09:cd:34:9e:45:0c:c8:3b:5e:bc:b4:a4:a0:33:47:70:
         18:b9:c3:4a:1b:f8:8f:c5:89:64:34:b1:7f:97:84:08:6f:30:
         c7:ab:0d:d4:f5:9a:be:c2:ae:c1:12:47:e6:a0:50:f5:0f:db:
         07:a7:ee:48:47:13:ee:d5:c3:d5:89:1b:3b:c0:13:70:66:90:
         4e:51:37:7d:75:98:62:0a:28:a0:41:f7:5a:a4:8c:8a:73:47:
         d6:da:11:2e:da:54:10:3b:83:c9:04:63:2f:30:63:3e:34:e9:
         c0:ef:7b:11:e7:b6:d3:09:7c:55:8e:8e:28:2d:87:26:69:21:
         33:fb:07:6c:29:67:25:04:2f:cf:62:21:ba:54:58:c2:7d:bf:
         cd:d1:c5:bf:bc:8e:ef:b4:7d:e4:a8:c1:30:97:7b:ba:2a:d7:
         4f:0b:a3:93:b0:6d:24:16:21:7e:89:1b:35:82:7c:06:ce:77:
         2f:43:89:9f:41:31:8c:27:89:1f:62:09:76:63:51:2f:11:1e:
         c3:05:db:02:a2:73:62:9e:9a:4f:f9:c8:f6:37:ae:87:78:be:
         40:d6:7a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 00:30:33 2024 by rpki-client on console-fra.rpki-client.org