Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30304/BeFKuy_fPUHzANtM2kj260MJmi4.roa
File:                     BeFKuy_fPUHzANtM2kj260MJmi4.roa (raw, json)
Hash identifier:          AOTpT8XTA9cPVVcJ7N+p720Os5nXovM+atQOGpF3YzI=
Subject key identifier:   05:E1:4A:BB:2F:DF:3D:41:F3:00:DB:4C:DA:48:F6:EB:43:09:9A:2E
Certificate issuer:       /CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
Certificate serial:       20
Authority key identifier: 6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/BeFKuy_fPUHzANtM2kj260MJmi4.roa
Signing time:             Fri 26 Apr 2024 08:17:46 +0000
ROA not before:           Fri 26 Apr 2024 08:17:46 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     59127
IP address blocks:        2401:7ec0:2000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 22 Jun 2024 01:30:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32 (0x20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
        Validity
            Not Before: Apr 26 08:17:46 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=05E14ABB2FDF3D41F300DB4CDA48F6EB43099A2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ce:56:45:56:fc:10:8c:06:e2:f8:39:43:d5:
                    5b:3d:45:d3:4d:61:ae:44:fb:2f:89:2a:18:a1:5c:
                    0f:74:ab:79:22:48:44:f8:01:3e:30:19:1a:1d:60:
                    5c:ca:f3:53:79:5d:4f:b5:a2:b7:b2:89:9a:d4:18:
                    1d:29:4e:74:9d:a2:97:6e:eb:ab:da:36:40:94:5f:
                    87:0f:47:5a:b4:e1:e9:58:f2:8f:3d:a5:f4:5e:ba:
                    dc:43:02:c5:3a:2d:dd:db:29:36:09:99:ed:e4:73:
                    21:aa:91:0c:9b:db:30:a7:9a:07:07:de:f3:43:20:
                    b8:c9:39:bb:7e:52:49:85:a9:21:79:57:8e:f7:31:
                    6d:bf:49:09:44:8d:b9:44:be:1b:d7:72:fc:ae:e6:
                    93:ee:11:ee:ff:2a:01:36:19:f6:f7:cd:77:f3:5b:
                    df:3c:7b:83:c9:5d:20:cf:ce:c1:f6:1d:bc:fd:33:
                    7c:0b:ca:7c:bb:d8:42:bc:8c:29:a3:44:6b:ad:95:
                    cb:23:20:74:bf:c0:a4:ea:67:a0:54:32:6f:c4:9f:
                    92:be:d1:50:7b:2b:4c:82:5b:69:75:46:e2:2e:b8:
                    7c:cd:ec:0a:fc:4d:bd:8d:93:ca:49:73:6c:21:30:
                    03:ed:21:5a:2e:aa:4d:42:fd:28:f0:38:17:a6:32:
                    65:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:E1:4A:BB:2F:DF:3D:41:F3:00:DB:4C:DA:48:F6:EB:43:09:9A:2E
            X509v3 Authority Key Identifier:
                keyid:6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/BeFKuy_fPUHzANtM2kj260MJmi4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:7ec0:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         86:65:14:b7:54:99:59:2d:e5:98:21:d1:b9:7c:6f:4f:49:e7:
         9a:6b:a0:7a:bc:30:32:f1:ac:bb:fd:ea:24:60:8f:af:0a:75:
         85:34:22:bc:c6:5f:14:4f:f4:e1:1e:d6:78:6f:2c:a3:c7:e3:
         6e:ce:ec:86:09:9f:79:57:87:ab:5a:9e:e4:18:56:d8:5c:4d:
         44:3e:db:bf:29:17:d8:c1:cf:26:65:1b:c5:88:58:70:88:9c:
         a3:59:54:d9:91:5f:79:55:69:57:95:93:cb:38:c8:04:79:50:
         f8:d3:e9:fc:c0:98:d2:44:f8:7f:f6:b5:a7:a9:b5:41:4c:93:
         90:a4:04:48:f1:f4:1e:72:4b:a3:c9:96:c9:fc:f0:7a:57:6a:
         bc:09:6c:9e:1d:68:e9:dd:06:47:1d:08:15:06:45:03:e9:82:
         eb:43:73:da:ca:e9:95:f8:4f:2e:58:56:3d:03:88:a1:3c:45:
         05:ee:df:b4:d7:59:9e:76:a1:f8:29:66:53:00:69:fe:0f:e0:
         16:5e:b8:8a:0f:2d:47:78:35:b5:50:37:df:08:0b:9e:bb:bb:
         b6:5c:2f:36:6b:d6:81:98:6d:84:64:17:71:e5:f8:04:a8:61:
         51:c5:73:50:d2:39:89:1d:b9:91:eb:75:80:a3:56:f1:f7:d4:
         c4:ac:4b:c1
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIBIDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2QTUx
M0FGN0JGNUQyREQ2MjlGRDE4MjY4ODVDMTAwMjkyOTMwNUNEMB4XDTI0MDQyNjA4
MTc0NloXDTI1MDQxNTAxMzAwMlowMzExMC8GA1UEAxMoMDVFMTRBQkIyRkRGM0Q0
MUYzMDBEQjRDREE0OEY2RUI0MzA5OUEyRTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOLOVkVW/BCMBuL4OUPVWz1F001hrkT7L4kqGKFcD3SreSJIRPgB
PjAZGh1gXMrzU3ldT7Wit7KJmtQYHSlOdJ2il27rq9o2QJRfhw9HWrTh6Vjyjz2l
9F663EMCxTot3dspNgmZ7eRzIaqRDJvbMKeaBwfe80MguMk5u35SSYWpIXlXjvcx
bb9JCUSNuUS+G9dy/K7mk+4R7v8qATYZ9vfNd/Nb3zx7g8ldIM/OwfYdvP0zfAvK
fLvYQryMKaNEa62VyyMgdL/ApOpnoFQyb8Sfkr7RUHsrTIJbaXVG4i64fM3sCvxN
vY2TyklzbCEwA+0hWi6qTUL9KPA4F6YyZZkCAwEAAaOCAiowggImMB0GA1UdDgQW
BBQF4Uq7L989QfMA20zaSPbrQwmaLjAfBgNVHSMEGDAWgBRqUTr3v10t1in9GCaI
XBACkpMFzTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAzMDQvYWxFNjk3OWRMZFlwX1JnbWlGd1FBcEtUQmMwLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvYWxFNjk3OWRMZFlwX1JnbWlGd1FB
cEtUQmMwLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMzA0L0JlRkt1eV9mUFVIekFOdE0ya2oyNjBNSm1pNC5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgQkAX7AIDANBgkqhkiG9w0BAQsFAAOCAQEAhmUUt1SZWS3lmCHRuXxv
T0nnmmugerwwMvGsu/3qJGCPrwp1hTQivMZfFE/04R7WeG8so8fjbs7shgmfeVeH
q1qe5BhW2FxNRD7bvykX2MHPJmUbxYhYcIico1lU2ZFfeVVpV5WTyzjIBHlQ+NPp
/MCY0kT4f/a1p6m1QUyTkKQESPH0HnJLo8mWyfzweldqvAlsnh1o6d0GRx0IFQZF
A+mC60Nz2srplfhPLlhWPQOIoTxFBe7ftNdZnnah+ClmUwBp/g/gFl64ig8tR3g1
tVA33wgLnru7tlwvNmvWgZhthGQXceX4BKhhUcVzUNI5iR25ket1gKNW8ffUxKxL
wQ==
-----END CERTIFICATE-----
Generated at Sat Jun 15 02:01:40 2024 by rpki-client on console-fra.rpki-client.org