Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30304/KoCcULKnaJ_48fvVLv62VIaWdn4.roa
File:                     KoCcULKnaJ_48fvVLv62VIaWdn4.roa (raw, json)
Hash identifier:          J9tzsBDe19mrFz20vXzXr1Dqe0OBsfJrjcEVd64gfzg=
Subject key identifier:   2A:80:9C:50:B2:A7:68:9F:F8:F1:FB:D5:2E:FE:B6:54:86:96:76:7E
Certificate issuer:       /CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
Certificate serial:       2C
Authority key identifier: 6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/KoCcULKnaJ_48fvVLv62VIaWdn4.roa
Signing time:             Fri 26 Apr 2024 08:17:52 +0000
ROA not before:           Fri 26 Apr 2024 08:17:52 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     59127
IP address blocks:        2401:7ec0:e000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
        Validity
            Not Before: Apr 26 08:17:52 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=2A809C50B2A7689FF8F1FBD52EFEB6548696767E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:da:89:24:07:78:73:7c:c2:d5:b0:12:a4:d5:
                    bf:a8:e8:2a:72:0d:f3:ed:70:df:f2:46:3e:d2:ec:
                    f6:fc:50:d2:89:46:4a:b3:af:9b:22:01:50:ef:34:
                    1e:1a:77:63:b3:0a:9f:15:1d:97:06:24:2d:db:4c:
                    fb:a4:74:3e:9f:e9:4d:c7:7d:d0:72:62:c5:a5:af:
                    05:69:bf:06:39:4a:65:ef:20:04:e1:a8:ae:7f:39:
                    37:5b:93:58:39:54:ba:72:a6:71:91:40:ce:c3:e4:
                    83:33:e7:55:43:66:fe:de:57:c8:11:e2:ce:03:f9:
                    8a:12:f0:1a:e9:40:12:d5:a9:0d:e5:b5:ca:99:1a:
                    1c:c1:48:59:9f:84:e4:ec:26:b1:2c:17:7d:2a:cd:
                    f5:bb:d7:f2:6f:cc:c0:34:21:a3:e7:eb:a8:ff:fe:
                    d9:e0:df:65:a8:bb:f2:23:db:75:50:9f:c2:7f:27:
                    02:9f:af:05:47:ef:4f:b4:0b:5b:e4:e3:a8:ba:75:
                    8e:e4:71:f9:ba:29:93:23:d8:ef:40:95:71:37:2a:
                    61:78:33:c8:6b:76:fa:26:bb:f5:55:b3:cb:42:30:
                    63:be:09:d9:c7:fa:6d:b7:f0:21:11:a1:94:0b:9f:
                    44:dd:1a:7b:e9:c3:2f:cf:44:0d:a6:e2:74:ab:29:
                    13:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:80:9C:50:B2:A7:68:9F:F8:F1:FB:D5:2E:FE:B6:54:86:96:76:7E
            X509v3 Authority Key Identifier:
                keyid:6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/KoCcULKnaJ_48fvVLv62VIaWdn4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:7ec0:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         a3:0b:79:bc:7b:3e:b5:d7:25:65:4f:54:0d:22:43:20:4d:aa:
         60:65:2d:10:2d:aa:f6:02:53:91:4b:99:c2:fb:ae:7d:e4:b5:
         9a:6a:b0:34:0e:48:76:3f:cb:b4:74:d7:d9:73:0f:b6:df:e4:
         c5:69:a1:3f:4c:0e:28:ed:85:73:f7:33:f7:05:6e:00:9d:eb:
         f1:9a:39:3a:e7:d8:3c:c2:70:f3:a8:25:c0:0d:9a:d5:a1:82:
         ad:f0:f3:44:1c:93:5f:32:78:5a:93:14:4a:4d:c1:21:14:0a:
         b3:00:6f:f6:cc:b1:0a:5d:39:bb:47:2f:5a:fb:0b:fc:ff:47:
         d5:9e:69:d4:ee:23:2e:4b:3b:23:3f:c3:8c:77:00:e7:b1:7d:
         e1:fe:64:f1:c8:90:41:6c:4f:1e:7e:54:f1:13:9c:82:c2:8c:
         2c:c8:7c:8b:ba:04:3b:da:44:1c:7d:bc:50:64:ac:0a:af:3d:
         ab:7d:a7:69:e3:1b:a6:e5:1a:33:9b:bf:b8:66:ba:27:ce:1a:
         45:33:98:04:ae:03:c7:c1:46:1d:68:61:f1:78:26:f4:69:27:
         38:f3:2e:98:72:d5:22:6c:98:47:f4:47:6d:d9:75:ef:cc:16:
         b9:0f:df:8a:ad:17:31:86:e6:30:87:f0:05:9c:c0:c2:fb:ad:
         d0:a1:76:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 03:38:45 2024 by rpki-client on console-ams.rpki-client.org