Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30304/KRGeoPH6j07Fjan5QPm-f3DX4CM.roa
File:                     KRGeoPH6j07Fjan5QPm-f3DX4CM.roa (raw, json)
Hash identifier:          T7bcn11Vxl2FbDOuANqnPnRwJ2rgdu8XHNKnyxtTWBE=
Subject key identifier:   29:11:9E:A0:F1:FA:8F:4E:C5:8D:A9:F9:40:F9:BE:7F:70:D7:E0:23
Certificate issuer:       /CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
Certificate serial:       27
Authority key identifier: 6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/KRGeoPH6j07Fjan5QPm-f3DX4CM.roa
Signing time:             Fri 26 Apr 2024 08:17:50 +0000
ROA not before:           Fri 26 Apr 2024 08:17:50 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     59127
IP address blocks:        2401:7ec0:9000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39 (0x27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
        Validity
            Not Before: Apr 26 08:17:50 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=29119EA0F1FA8F4EC58DA9F940F9BE7F70D7E023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0f:de:44:5d:4a:1c:f5:2b:fc:e2:c6:bf:9d:
                    4a:1b:0f:14:04:a3:62:85:d3:06:4b:85:05:47:61:
                    77:3b:9a:e9:03:23:94:28:be:72:19:ea:3a:1f:67:
                    e4:65:4f:27:08:a1:c0:6a:70:a2:64:7d:48:00:bf:
                    8b:e2:98:7d:24:96:30:58:16:a2:02:fe:1f:0f:61:
                    a3:e7:e6:0d:c4:93:85:18:50:53:5c:a2:b1:da:8a:
                    ed:54:c2:18:a9:db:d1:06:64:f0:8e:bc:da:71:f6:
                    45:18:b0:0b:0d:ea:66:58:48:5a:07:47:b8:39:08:
                    1b:2c:16:b9:31:e3:b5:34:02:92:af:2f:44:64:31:
                    2e:e6:88:4f:30:76:ce:63:b8:44:05:ce:03:01:c6:
                    fe:07:a4:90:a1:1a:8d:30:90:88:4c:68:d1:bb:51:
                    b9:53:37:a9:02:c0:02:60:7f:90:67:b1:24:7a:fc:
                    3b:4a:75:9c:fb:de:85:a2:64:28:0c:fb:dd:54:f3:
                    54:8c:36:c3:78:e2:6f:62:28:ae:c0:d4:4e:9f:48:
                    27:fd:31:7f:45:91:fa:cf:27:77:14:96:c1:1d:1c:
                    f9:ae:7f:6d:84:b6:c4:4f:bc:c3:53:5a:e3:13:b1:
                    8a:5d:92:2d:2f:18:18:d7:c3:4e:57:b8:10:ac:85:
                    63:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:11:9E:A0:F1:FA:8F:4E:C5:8D:A9:F9:40:F9:BE:7F:70:D7:E0:23
            X509v3 Authority Key Identifier:
                keyid:6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/KRGeoPH6j07Fjan5QPm-f3DX4CM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:7ec0:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         1d:a9:f1:4b:a5:2d:ab:ce:a0:fa:00:55:fb:11:9e:e5:7b:43:
         53:9b:fc:53:45:3f:02:05:ba:f7:fa:d3:7d:41:79:ad:25:97:
         a9:eb:11:f4:bc:48:2d:74:a5:bd:5b:3f:b0:b8:78:31:2e:1b:
         f1:02:d4:62:c6:d7:57:22:8c:f3:39:70:53:eb:21:b6:e2:45:
         72:4a:ec:b1:f6:ee:27:5c:98:49:2a:97:cb:12:f8:2e:6e:75:
         f7:19:1a:a2:1e:a3:77:8d:03:9e:ab:55:12:22:cb:84:51:76:
         52:29:01:d2:d2:87:58:05:b7:46:0e:f6:2d:a4:07:46:f5:bf:
         2d:1f:b4:3a:f0:c8:0b:75:dc:91:9f:86:7a:1e:37:5d:34:cd:
         f2:c0:bc:48:5f:e3:af:fa:a4:00:28:cd:e3:c4:52:a0:41:e7:
         71:15:43:89:8b:56:6d:39:42:03:1b:1d:1b:44:fd:bb:08:eb:
         d3:eb:a8:7c:5e:4f:b1:70:44:39:0b:d2:b6:36:5c:63:ca:cd:
         dd:1a:ff:5a:b8:64:56:3f:7e:a0:30:bc:80:a7:da:ad:3e:b3:
         98:4b:b5:27:d7:b8:62:1b:09:25:4b:53:ef:42:44:e0:16:56:
         8d:2d:3e:11:84:6b:c2:23:a7:a8:ab:fb:5e:ce:b4:2c:d5:dd:
         e3:6b:31:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 03:08:53 2024 by rpki-client on console-fra.rpki-client.org