Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30304/AcDcaC8E8Zu4g6RMVgTnUMYeM1Q.roa
File:                     AcDcaC8E8Zu4g6RMVgTnUMYeM1Q.roa (raw, json)
Hash identifier:          zJnU8+ECCeaz9RJB57BP7tUHGsfDDDb5g6Uqn5PhwEY=
Subject key identifier:   01:C0:DC:68:2F:04:F1:9B:B8:83:A4:4C:56:04:E7:50:C6:1E:33:54
Certificate issuer:       /CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
Certificate serial:       2F
Authority key identifier: 6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/AcDcaC8E8Zu4g6RMVgTnUMYeM1Q.roa
Signing time:             Fri 26 Apr 2024 08:17:53 +0000
ROA not before:           Fri 26 Apr 2024 08:17:53 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     59127
IP address blocks:        2401:7ec0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47 (0x2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
        Validity
            Not Before: Apr 26 08:17:53 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=01C0DC682F04F19BB883A44C5604E750C61E3354
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:91:60:ac:2d:4c:53:20:d9:ac:f2:91:2d:bc:
                    a4:2e:55:3c:c8:65:cf:3a:a4:1e:ba:11:56:cf:d1:
                    9f:33:05:aa:89:2c:9c:08:7c:1a:bf:92:bc:a5:2b:
                    b8:c9:17:e0:63:31:f5:fe:1f:6c:9d:aa:f9:0a:37:
                    05:58:76:51:f4:cd:ff:0a:7b:62:d8:95:e2:ab:1b:
                    ca:0c:37:69:ee:22:03:20:6c:c8:99:06:ca:19:49:
                    b9:ef:86:66:1a:7a:c5:99:7d:a4:9f:f5:ac:1a:b9:
                    11:4f:e3:e0:11:d3:5e:c0:2d:a7:21:f0:15:a1:3f:
                    7d:21:43:01:8c:dd:dc:37:e6:f1:f1:de:09:b8:64:
                    00:68:c0:83:43:0e:a8:e6:dd:14:e8:5d:72:3d:95:
                    f1:dd:03:fd:41:d7:b4:e7:1e:94:ff:fd:48:31:d2:
                    df:87:24:1c:9b:0d:1a:d3:0f:a2:f2:be:92:a1:69:
                    54:dd:ce:5e:f6:32:3e:f2:64:3a:d4:e2:a4:3a:a5:
                    d5:56:d2:ae:2a:cf:00:ef:85:cc:bd:a8:5f:15:7a:
                    24:cb:7a:8b:5a:a2:27:46:9f:88:f4:84:43:6e:50:
                    17:2e:e4:e6:78:5b:90:52:e8:88:d3:bf:3b:d0:18:
                    29:4d:82:fa:bc:ef:18:8b:7b:5d:2d:fc:79:e6:44:
                    59:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:C0:DC:68:2F:04:F1:9B:B8:83:A4:4C:56:04:E7:50:C6:1E:33:54
            X509v3 Authority Key Identifier:
                keyid:6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/AcDcaC8E8Zu4g6RMVgTnUMYeM1Q.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:7ec0::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:1d:53:7a:56:21:02:d6:ec:7b:28:df:46:66:a6:21:67:7e:
         6a:22:c0:3a:9c:12:d7:00:a3:ff:a9:f2:78:df:37:a6:ea:a7:
         36:77:b2:47:cc:3c:1a:0f:38:9e:11:bb:a3:b5:74:65:31:f9:
         29:87:9d:24:9a:4d:96:88:46:0e:15:69:9b:01:bf:81:a8:57:
         67:e4:66:5d:0f:27:ee:8b:f2:d1:b2:13:aa:33:83:7c:1d:40:
         f4:9b:34:d4:33:c7:b0:79:bc:02:98:eb:31:9f:80:8a:fb:91:
         78:fd:6c:55:cb:dc:f1:f6:c3:2b:33:41:87:59:9d:15:63:2b:
         32:6d:5a:ba:98:dc:75:c4:78:c3:3b:49:f0:51:30:9b:55:1d:
         6b:82:14:c3:ac:1b:09:97:9f:2c:26:4e:02:d9:59:43:ea:be:
         38:a5:e7:8a:c7:32:44:3d:4d:5d:5c:f0:98:93:02:2d:b8:4a:
         df:33:3c:4c:5e:fd:ac:8c:e0:ba:f4:2e:3f:7b:fd:88:b5:12:
         ed:b2:25:c4:5b:12:c6:1d:71:f5:45:91:8a:89:41:05:ff:9f:
         79:87:0e:5e:1b:21:a5:29:02:40:6a:ca:90:31:9b:2d:65:4f:
         ea:23:0f:bd:c1:ae:8d:91:64:37:ba:14:20:33:29:95:6f:75:
         fa:7b:33:6e
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIBLzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2QTUx
M0FGN0JGNUQyREQ2MjlGRDE4MjY4ODVDMTAwMjkyOTMwNUNEMB4XDTI0MDQyNjA4
MTc1M1oXDTI1MDQxNTAxMzAwMlowMzExMC8GA1UEAxMoMDFDMERDNjgyRjA0RjE5
QkI4ODNBNDRDNTYwNEU3NTBDNjFFMzM1NDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJiRYKwtTFMg2azykS28pC5VPMhlzzqkHroRVs/RnzMFqoksnAh8
Gr+SvKUruMkX4GMx9f4fbJ2q+Qo3BVh2UfTN/wp7YtiV4qsbygw3ae4iAyBsyJkG
yhlJue+GZhp6xZl9pJ/1rBq5EU/j4BHTXsAtpyHwFaE/fSFDAYzd3Dfm8fHeCbhk
AGjAg0MOqObdFOhdcj2V8d0D/UHXtOcelP/9SDHS34ckHJsNGtMPovK+kqFpVN3O
XvYyPvJkOtTipDql1VbSrirPAO+FzL2oXxV6JMt6i1qiJ0afiPSEQ25QFy7k5nhb
kFLoiNO/O9AYKU2C+rzvGIt7XS38eeZEWV8CAwEAAaOCAikwggIlMB0GA1UdDgQW
BBQBwNxoLwTxm7iDpExWBOdQxh4zVDAfBgNVHSMEGDAWgBRqUTr3v10t1in9GCaI
XBACkpMFzTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAzMDQvYWxFNjk3OWRMZFlwX1JnbWlGd1FBcEtUQmMwLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvYWxFNjk3OWRMZFlwX1JnbWlGd1FB
cEtUQmMwLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMzA0L0FjRGNhQzhFOFp1NGc2Uk1WZ1RuVU1ZZU0xUS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E
AgACMAcDBQAkAX7AMA0GCSqGSIb3DQEBCwUAA4IBAQAUHVN6ViEC1ux7KN9GZqYh
Z35qIsA6nBLXAKP/qfJ43zem6qc2d7JHzDwaDzieEbujtXRlMfkph50kmk2WiEYO
FWmbAb+BqFdn5GZdDyfui/LRshOqM4N8HUD0mzTUM8ewebwCmOsxn4CK+5F4/WxV
y9zx9sMrM0GHWZ0VYysybVq6mNx1xHjDO0nwUTCbVR1rghTDrBsJl58sJk4C2VlD
6r44peeKxzJEPU1dXPCYkwItuErfMzxMXv2sjOC69C4/e/2ItRLtsiXEWxLGHXH1
RZGKiUEF/595hw5eGyGlKQJAasqQMZstZU/qIw+9wa6NkWQ3uhQgMymVb3X6ezNu
-----END CERTIFICATE-----
Generated at Thu May 30 03:38:45 2024 by rpki-client on console-ams.rpki-client.org