Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30279/5aSYE6BF0lYGUeCcOqFYMEvCRmw.roa
File:                     5aSYE6BF0lYGUeCcOqFYMEvCRmw.roa (raw, json)
Hash identifier:          bNwyfdy7KAhGRPHxwYFXJHjOTJsEs5lIJP6b/etnYUM=
Subject key identifier:   E5:A4:98:13:A0:45:D2:56:06:51:E0:9C:3A:A1:58:30:4B:C2:46:6C
Certificate issuer:       /CN=1666AC184C9FEE6089751DCC75BD39FD6A652AEE
Certificate serial:       3E
Authority key identifier: 16:66:AC:18:4C:9F:EE:60:89:75:1D:CC:75:BD:39:FD:6A:65:2A:EE
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FmasGEyf7mCJdR3Mdb05_WplKu4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30279/5aSYE6BF0lYGUeCcOqFYMEvCRmw.roa
Signing time:             Sun 01 Oct 2023 01:28:18 +0000
ROA not before:           Sun 01 Oct 2023 01:28:18 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     59105
IP address blocks:        2403:bd80::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30279/FmasGEyf7mCJdR3Mdb05_WplKu4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30279/FmasGEyf7mCJdR3Mdb05_WplKu4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FmasGEyf7mCJdR3Mdb05_WplKu4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62 (0x3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1666AC184C9FEE6089751DCC75BD39FD6A652AEE
        Validity
            Not Before: Oct  1 01:28:18 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=E5A49813A045D2560651E09C3AA158304BC2466C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:1f:fa:85:80:c7:cf:ba:06:50:4f:d5:27:8b:
                    26:1a:94:2e:a5:3e:aa:81:11:44:45:24:ce:86:f3:
                    8c:8e:4b:f6:9d:4f:d2:a2:3e:17:2f:30:29:1a:ac:
                    74:53:93:14:53:ec:03:3b:0c:90:7f:2e:fb:66:3d:
                    b6:31:23:ff:50:4e:a4:f6:9d:d3:e9:65:35:ed:a9:
                    94:51:8a:11:b5:8f:c6:62:ac:81:25:fa:5b:0b:0c:
                    40:19:ae:c1:ab:63:b5:14:2f:a4:41:aa:4e:df:56:
                    43:f5:64:a9:68:12:16:be:32:17:8d:fa:b1:e9:a3:
                    7e:8a:cf:6e:69:a6:af:5b:96:7e:4e:9c:e8:5c:08:
                    46:13:fb:23:f1:60:46:61:9e:25:7c:79:43:0c:46:
                    fb:9a:7f:b9:30:21:d6:4d:64:eb:09:a8:07:1c:82:
                    d7:7a:69:f5:d4:97:22:96:d0:ff:e2:2d:30:42:82:
                    8a:53:f3:fb:8a:c8:0b:6e:53:89:15:f4:03:48:80:
                    e2:2d:2b:70:c5:c6:23:9e:61:52:cc:54:2c:80:9c:
                    fb:cf:da:ac:55:00:e0:5d:5b:b3:0d:ac:3e:0b:80:
                    57:9f:7a:66:92:58:80:f8:42:31:e4:d1:67:a0:6b:
                    bb:f8:80:cf:87:e5:14:25:80:25:03:87:56:42:bf:
                    ae:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:A4:98:13:A0:45:D2:56:06:51:E0:9C:3A:A1:58:30:4B:C2:46:6C
            X509v3 Authority Key Identifier:
                keyid:16:66:AC:18:4C:9F:EE:60:89:75:1D:CC:75:BD:39:FD:6A:65:2A:EE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30279/FmasGEyf7mCJdR3Mdb05_WplKu4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FmasGEyf7mCJdR3Mdb05_WplKu4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30279/5aSYE6BF0lYGUeCcOqFYMEvCRmw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:bd80::/32

    Signature Algorithm: sha256WithRSAEncryption
         b6:a9:fd:2d:84:a0:0b:88:de:71:70:d5:c2:16:34:a1:ae:42:
         f1:2e:ec:55:d3:d5:7d:19:ac:3c:f4:79:26:64:09:a7:23:cf:
         54:35:24:bd:5a:b3:b0:a3:47:23:23:94:fb:33:d3:24:6c:40:
         f0:7b:48:43:cc:4b:d4:59:ef:e2:ca:48:cc:ec:c5:28:6d:06:
         ae:54:e3:d0:28:84:35:85:17:bc:80:04:6b:7d:40:4e:0b:59:
         8a:8c:d1:ec:a0:c1:fc:59:b8:15:e3:e0:22:f1:de:d7:73:16:
         63:5c:5c:78:bb:1c:9f:86:4f:22:66:1d:8f:22:0d:94:84:3a:
         31:a8:85:10:51:dc:a9:1a:24:a8:42:76:8b:5c:3c:f1:c1:a7:
         61:25:d9:14:c4:3a:10:f3:cf:e7:3f:a7:c1:11:ef:47:ac:88:
         0b:c2:c0:aa:9b:e9:e7:4b:64:fc:b2:4f:45:5a:53:b6:76:0a:
         29:38:74:a8:fb:1b:06:c1:08:1a:b1:13:ce:54:5d:5f:ed:44:
         61:93:56:53:87:53:40:5a:4c:59:ce:ab:85:a3:25:14:9b:cd:
         0c:5a:9c:50:f7:a7:d5:f0:65:98:bf:c2:9a:b0:b6:af:7e:88:
         1a:4b:98:39:13:c2:36:79:7d:e3:88:63:92:2a:cb:61:a0:b0:
         3a:e0:9a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 14:56:16 2024 by rpki-client on console-fra.rpki-client.org