Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30304/5Ujl4ilWW2dq7lXyj1WeGWY7A9k.roa
File:                     5Ujl4ilWW2dq7lXyj1WeGWY7A9k.roa (raw, json)
Hash identifier:          kk3xwuu73QBQWFg59ygfAKijF7a5rVxX6EmdPxqdvb0=
Subject key identifier:   E5:48:E5:E2:29:56:5B:67:6A:EE:55:F2:8F:55:9E:19:66:3B:03:D9
Certificate issuer:       /CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
Certificate serial:       0B
Authority key identifier: 6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/5Ujl4ilWW2dq7lXyj1WeGWY7A9k.roa
Signing time:             Thu 11 May 2023 08:45:37 +0000
ROA not before:           Thu 11 May 2023 08:45:37 +0000
ROA not after:            Fri 10 May 2024 08:19:05 +0000
asID:                     59127
IP address blocks:        2401:7ec0:a000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 May 2024 21:46:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11 (0xb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
        Validity
            Not Before: May 11 08:45:37 2023 GMT
            Not After : May 10 08:19:05 2024 GMT
        Subject: CN=E548E5E229565B676AEE55F28F559E19663B03D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1c:ad:11:e0:78:88:de:62:a3:d8:93:87:9d:
                    ca:af:4d:af:5a:6b:65:21:c1:69:85:cc:d6:8a:23:
                    ee:b4:d5:dc:e7:1e:5b:93:fa:72:8d:24:b5:90:70:
                    23:22:ef:28:9d:8e:91:86:1b:36:ec:51:31:b9:3b:
                    c1:ac:9c:87:c8:f2:42:b3:78:55:90:fa:46:4b:47:
                    5c:fc:f6:65:3c:ef:b8:db:71:b4:10:9e:0c:0f:2d:
                    67:b0:19:78:9b:a7:85:e5:86:fd:69:3d:33:7c:a1:
                    01:ac:69:f0:29:48:93:6c:65:0e:34:ef:97:73:a8:
                    75:7c:5f:0f:f3:a0:90:cb:1f:05:c2:d0:a1:6d:7f:
                    48:7d:71:f1:32:c2:64:c6:80:38:f1:14:ef:3c:6d:
                    4b:af:3f:de:e3:05:1e:e6:24:ff:b9:02:f9:6b:a5:
                    1f:0c:df:05:79:df:63:ab:41:00:f8:9d:5a:43:5e:
                    4a:df:05:a1:2f:7d:44:58:ec:c3:9d:04:14:3c:5c:
                    d8:ce:d7:3a:2a:2d:0e:48:ee:df:4a:55:6a:a6:da:
                    22:6b:a8:58:c8:ea:a9:22:37:ef:56:08:f5:f0:e5:
                    df:53:33:63:a7:82:b4:ac:c8:33:4c:2f:be:f2:15:
                    27:ab:19:56:ad:66:9e:5e:c5:11:43:18:6a:b2:0e:
                    4a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:48:E5:E2:29:56:5B:67:6A:EE:55:F2:8F:55:9E:19:66:3B:03:D9
            X509v3 Authority Key Identifier:
                keyid:6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/5Ujl4ilWW2dq7lXyj1WeGWY7A9k.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:7ec0:a000::/36

    Signature Algorithm: sha256WithRSAEncryption
         6e:71:40:42:99:35:f5:dd:d7:fc:b9:42:dc:77:ed:36:26:5d:
         9b:a4:5a:96:b7:2a:d3:11:60:f4:6d:b5:90:39:e1:f4:9a:26:
         0d:73:81:d9:4c:19:cb:6f:f0:b2:fc:69:eb:91:c8:ae:c6:fa:
         6f:37:12:7e:d9:e3:48:65:83:a9:05:aa:32:ff:b9:64:25:87:
         a8:8a:c9:bd:99:69:10:45:b8:84:8d:6f:c7:91:3d:59:25:04:
         b5:6f:e4:8b:cd:0e:a1:50:31:e1:eb:04:19:2c:b9:02:2a:fb:
         24:b9:17:f0:80:f1:c4:44:9a:19:41:d3:39:d5:5e:40:e1:58:
         a1:eb:b7:b3:3f:59:e6:1e:50:41:dd:6c:07:ab:59:40:26:62:
         6d:f4:e2:5c:50:8e:b8:eb:5d:c7:9e:62:c9:3c:0e:e4:91:0c:
         34:e3:8d:5c:e0:10:e4:da:81:cd:97:2b:2c:66:f0:9d:7b:52:
         96:e9:f5:08:3f:4d:40:fc:2f:68:26:87:fa:07:88:85:a6:d7:
         cc:ff:bd:63:0e:66:12:c4:f1:9e:00:bf:e5:93:73:ec:c7:7a:
         c3:a0:43:47:80:a6:d2:5e:f4:a3:88:b3:62:e7:d7:20:cf:a2:
         d6:a5:7a:16:48:36:50:a9:aa:44:c1:5f:6e:32:03:1f:3a:12:
         17:a6:96:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 00:30:30 2024 by rpki-client on console-fra.rpki-client.org