Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/39062/xITeVpFzaXACA_0F5VwFyKWAwQs.roa
File:                     xITeVpFzaXACA_0F5VwFyKWAwQs.roa (raw, json)
Hash identifier:          hF0QeUYv2iE3x7f+0oRHOKB6X6UzbrVq6SFts6IO7hA=
Subject key identifier:   C4:84:DE:56:91:73:69:70:02:03:FD:05:E5:5C:05:C8:A5:80:C1:0B
Certificate issuer:       /CN=007304C8C78435522607E1CFAF1F3CE1A221FF7D
Certificate serial:       1E
Authority key identifier: 00:73:04:C8:C7:84:35:52:26:07:E1:CF:AF:1F:3C:E1:A2:21:FF:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/AHMEyMeENVImB-HPrx884aIh_30.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39062/xITeVpFzaXACA_0F5VwFyKWAwQs.roa
Signing time:             Thu 29 Feb 2024 01:34:21 +0000
ROA not before:           Thu 29 Feb 2024 01:34:21 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     146980
IP address blocks:        2001:df0:8bc0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39062/AHMEyMeENVImB-HPrx884aIh_30.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39062/AHMEyMeENVImB-HPrx884aIh_30.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/AHMEyMeENVImB-HPrx884aIh_30.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30 (0x1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=007304C8C78435522607E1CFAF1F3CE1A221FF7D
        Validity
            Not Before: Feb 29 01:34:21 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=C484DE56917369700203FD05E55C05C8A580C10B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ae:24:f9:e3:ba:d0:a1:d3:d3:09:bc:2d:81:
                    70:a0:ef:5f:4e:a6:aa:1d:07:75:e0:f0:a0:ec:81:
                    c7:0b:d9:20:8d:de:a7:64:4d:71:70:8d:d6:82:58:
                    1b:98:b8:64:58:aa:43:4a:c5:22:7c:4e:a8:a7:7d:
                    01:c0:80:47:ec:c6:d4:53:6e:d7:2a:45:c8:7d:67:
                    6c:c3:ae:17:e5:93:1b:d4:3f:12:59:7f:2d:03:e5:
                    1e:eb:a3:1e:06:7e:d8:c1:03:db:fc:cc:9e:96:86:
                    ce:f7:88:82:72:86:5d:0d:93:bf:53:be:56:f6:3f:
                    70:19:d3:99:2b:22:47:c3:55:b6:5c:79:66:4b:00:
                    00:3f:3d:91:ab:2e:d2:8a:fc:de:42:75:a4:56:82:
                    19:da:47:91:9f:9a:b9:f7:f2:7c:28:50:59:4e:3f:
                    f4:c1:2f:8c:5b:21:8c:79:76:50:67:4d:76:fe:6a:
                    b5:da:aa:d2:1d:d9:e3:d8:03:ad:85:92:c3:bb:fa:
                    04:1b:11:8b:2b:ca:ea:57:cf:f2:d2:f8:f1:5a:ac:
                    45:5f:d3:a2:05:7e:95:18:41:10:ac:4b:22:d9:c4:
                    7d:14:41:1c:4d:d4:1b:bc:b0:c0:03:e4:78:e1:01:
                    35:a1:84:78:bb:13:cb:3e:5a:03:18:7f:23:83:f9:
                    97:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:84:DE:56:91:73:69:70:02:03:FD:05:E5:5C:05:C8:A5:80:C1:0B
            X509v3 Authority Key Identifier:
                keyid:00:73:04:C8:C7:84:35:52:26:07:E1:CF:AF:1F:3C:E1:A2:21:FF:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39062/AHMEyMeENVImB-HPrx884aIh_30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/AHMEyMeENVImB-HPrx884aIh_30.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/39062/xITeVpFzaXACA_0F5VwFyKWAwQs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df0:8bc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         83:c5:0d:83:d0:5c:43:03:d9:9d:75:57:3e:12:f9:e3:43:af:
         c7:53:9e:47:57:a7:e6:ca:d0:2d:60:df:f6:b2:4b:5b:a6:24:
         6c:f9:97:89:b4:41:ce:7b:9d:d1:7c:76:af:a9:f1:e4:02:2f:
         3c:3e:37:15:d1:db:e4:43:ca:b1:d5:d8:ce:94:b6:a9:36:39:
         3f:83:f9:b8:b8:5b:cc:c2:72:7a:fa:ff:a9:bb:9f:f8:08:82:
         da:12:0d:68:60:ea:12:86:83:42:4f:0a:b6:e6:d5:ca:6e:f7:
         72:99:63:24:ac:36:07:c8:82:f2:81:36:bd:20:34:cb:ba:54:
         d6:7e:a1:a7:ed:32:8f:ba:a9:0e:9d:4f:00:23:f1:bd:cf:24:
         25:a6:42:66:4c:da:6f:56:a3:54:07:f6:9a:d8:db:48:a8:31:
         f2:df:2a:cd:f3:99:5c:f7:7c:87:a6:e9:a6:d5:63:5b:83:b2:
         18:5f:c5:0b:0b:15:3d:4c:a6:c8:75:b2:6b:5c:40:23:b0:b6:
         99:8b:15:46:ed:4b:e5:5e:22:c2:54:40:6d:63:e6:b1:0f:c8:
         77:35:aa:d6:5f:70:4e:2c:3c:9c:72:ac:ed:20:7c:19:d9:88:
         8a:8f:4e:bf:2a:38:03:9e:ba:94:20:18:9a:36:e9:33:c0:82:
         49:80:f6:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:44 2024 by rpki-client on console-ams.rpki-client.org