Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30047/6zZJ-Z2UuYt7DKhjNeKSjP0fnGU.roa
File:                     6zZJ-Z2UuYt7DKhjNeKSjP0fnGU.roa (raw, json)
Hash identifier:          NN9B+NklN0fRR4L+iSDtOVdlZso/FnY8SR6c6TCO8Lo=
Subject key identifier:   EB:36:49:F9:9D:94:B9:8B:7B:0C:A8:63:35:E2:92:8C:FD:1F:9C:65
Certificate issuer:       /CN=075054052FAE3C210E8A73FBE525CAC74E786A26
Certificate serial:       4B
Authority key identifier: 07:50:54:05:2F:AE:3C:21:0E:8A:73:FB:E5:25:CA:C7:4E:78:6A:26
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/B1BUBS-uPCEOinP75SXKx054aiY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30047/6zZJ-Z2UuYt7DKhjNeKSjP0fnGU.roa
Signing time:             Thu 29 Feb 2024 01:29:36 +0000
ROA not before:           Thu 29 Feb 2024 01:29:36 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     37899
IP address blocks:        2001:a000::/21 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30047/B1BUBS-uPCEOinP75SXKx054aiY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30047/B1BUBS-uPCEOinP75SXKx054aiY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/B1BUBS-uPCEOinP75SXKx054aiY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75 (0x4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=075054052FAE3C210E8A73FBE525CAC74E786A26
        Validity
            Not Before: Feb 29 01:29:36 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=EB3649F99D94B98B7B0CA86335E2928CFD1F9C65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f4:0a:9f:81:bc:21:8e:3d:68:30:1a:46:20:
                    94:82:63:c6:88:12:bc:e2:6a:64:3f:7a:11:af:68:
                    f3:3b:38:e2:cf:d2:cd:0c:c5:64:0e:07:8a:27:3e:
                    78:9c:f2:00:fb:b0:0b:54:12:10:ce:65:09:6d:4e:
                    01:c7:50:35:82:85:63:7c:1a:79:b3:14:f4:27:bf:
                    23:a8:65:a5:b2:2d:9c:99:e7:7b:36:82:2a:1b:36:
                    41:a6:fb:aa:0b:1c:31:c1:83:71:fc:3a:c0:98:07:
                    3c:64:38:0e:a7:9c:ce:e2:9e:37:22:9b:c3:7f:8f:
                    bc:3d:90:67:06:16:ca:7b:ab:20:53:20:b9:b4:30:
                    bf:e4:35:2d:49:9e:6a:f9:43:7e:66:97:54:35:ae:
                    2e:3a:9f:51:1d:f0:a6:82:5f:44:bc:14:13:4e:88:
                    dd:5d:24:c4:88:b7:12:25:c0:e0:27:50:a1:52:c3:
                    f2:24:93:3e:fe:6f:21:75:79:84:0d:b0:73:98:96:
                    29:33:5b:98:ed:74:44:63:8c:33:e5:8f:d2:b0:e6:
                    02:e5:ae:b5:80:8b:02:f9:38:cc:fd:85:8a:c8:1f:
                    61:8e:67:b3:1d:52:a4:e4:68:22:9f:44:86:34:b4:
                    13:3f:3f:ca:95:cf:ed:3c:0a:7e:2a:99:62:81:85:
                    1b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:36:49:F9:9D:94:B9:8B:7B:0C:A8:63:35:E2:92:8C:FD:1F:9C:65
            X509v3 Authority Key Identifier:
                keyid:07:50:54:05:2F:AE:3C:21:0E:8A:73:FB:E5:25:CA:C7:4E:78:6A:26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30047/B1BUBS-uPCEOinP75SXKx054aiY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/B1BUBS-uPCEOinP75SXKx054aiY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30047/6zZJ-Z2UuYt7DKhjNeKSjP0fnGU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:a000::/21

    Signature Algorithm: sha256WithRSAEncryption
         8b:42:3d:54:06:3d:7b:16:85:ef:95:80:13:b4:79:2a:3d:c4:
         1d:65:54:89:0b:86:60:8f:e1:54:30:d7:c6:9b:e4:aa:2e:13:
         e3:a2:94:f7:23:82:63:51:ab:45:c7:df:48:93:ba:6d:5e:96:
         c1:f8:d2:89:09:63:b4:ca:be:10:c9:20:f3:c6:7b:d4:59:e8:
         db:a9:af:9e:4f:ac:a6:d4:0c:66:c7:68:cb:53:97:10:db:96:
         d1:33:dc:4f:22:5d:66:e7:d0:c4:56:63:34:58:b0:77:f3:7a:
         19:12:1d:2f:77:ba:c2:f9:d0:3e:d4:df:30:ec:b2:ff:6e:22:
         b5:16:87:9f:45:9c:c7:b9:f7:71:31:12:21:24:60:36:03:38:
         4b:ac:2b:65:48:04:4e:ed:14:3f:b2:ff:7e:8f:f1:1e:6a:2f:
         78:e0:32:fe:30:83:18:76:19:c9:cd:be:e3:6d:3e:29:d5:3b:
         a4:90:6a:91:79:0a:1e:ea:14:9f:67:82:04:99:08:1c:59:e2:
         93:df:83:d7:99:d5:74:75:90:81:fa:a6:79:d4:ab:36:6b:a0:
         a4:5b:a1:f7:9d:22:d9:97:51:fb:f3:37:2e:d4:af:dd:83:aa:
         15:64:8f:ef:c1:85:e5:c1:41:83:ed:b7:18:80:b7:41:9a:32:
         7a:7b:b9:0b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:19 2024 by rpki-client on console-ams.rpki-client.org