Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30304/O7SdNPx7V7Eg7MqUu4AHD8KXiuQ.roa
File:                     O7SdNPx7V7Eg7MqUu4AHD8KXiuQ.roa (raw, json)
Hash identifier:          O7kxuhFykYDz2d8JinpJM0CMS3utzVPm9NPMWzQyYAk=
Subject key identifier:   3B:B4:9D:34:FC:7B:57:B1:20:EC:CA:94:BB:80:07:0F:C2:97:8A:E4
Certificate issuer:       /CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
Certificate serial:       28
Authority key identifier: 6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/O7SdNPx7V7Eg7MqUu4AHD8KXiuQ.roa
Signing time:             Fri 26 Apr 2024 08:17:51 +0000
ROA not before:           Fri 26 Apr 2024 08:17:51 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     59127
IP address blocks:        2401:7ec0:a000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40 (0x28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
        Validity
            Not Before: Apr 26 08:17:51 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=3BB49D34FC7B57B120ECCA94BB80070FC2978AE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:55:ff:63:53:1e:5f:18:15:77:c8:41:0b:89:
                    61:6d:0d:41:26:5b:9d:f6:30:7a:48:da:f4:f5:bc:
                    b9:6e:1d:61:0c:3a:3c:2f:07:0f:d5:ed:86:69:c1:
                    44:d5:e0:4c:a5:7b:11:15:48:1c:16:8f:69:ac:a6:
                    63:2e:e4:be:49:85:4d:ab:55:84:83:2e:96:2e:de:
                    d2:cc:d5:69:1b:66:04:05:d8:cf:32:4f:1d:7c:0f:
                    8a:87:9e:72:d0:be:d9:97:eb:15:c6:b8:c8:60:c4:
                    d2:99:9c:90:59:d1:52:b7:9f:44:e7:dc:35:c0:00:
                    6f:2d:f4:2f:0e:2c:f1:7f:ea:4b:4a:f3:9f:6f:73:
                    a4:25:d2:3f:83:25:b5:27:f6:92:2b:9d:64:42:c2:
                    b9:cb:43:c4:2b:27:ef:69:42:0f:2c:60:19:26:97:
                    bf:95:6f:3e:d1:22:f4:aa:09:81:e8:90:8c:08:1a:
                    67:be:a9:87:d1:0a:8c:f5:de:76:dd:cd:8e:d6:56:
                    5b:41:cc:5d:5e:d9:41:59:85:2a:aa:9d:d5:87:f4:
                    ae:8e:f3:4b:9b:03:0d:4f:64:5e:7d:dc:46:a8:8a:
                    9e:44:67:01:3c:ee:d8:3e:b6:15:e2:e0:0b:27:6b:
                    1f:de:39:cf:2c:2d:c9:07:ca:37:fc:c8:6d:b3:84:
                    93:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:B4:9D:34:FC:7B:57:B1:20:EC:CA:94:BB:80:07:0F:C2:97:8A:E4
            X509v3 Authority Key Identifier:
                keyid:6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/O7SdNPx7V7Eg7MqUu4AHD8KXiuQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:7ec0:a000::/36

    Signature Algorithm: sha256WithRSAEncryption
         a9:53:0f:f8:33:2d:fa:fb:fc:47:03:07:90:7d:94:9a:6d:db:
         06:5c:1d:87:75:96:33:cd:d7:b9:83:e5:96:7c:22:9f:6c:b1:
         03:66:10:17:55:b2:f1:9f:7d:ac:3a:e7:09:c1:8f:61:57:9c:
         67:db:e9:3d:83:e4:ff:a6:91:8c:d1:4a:e5:32:6f:3b:5e:5d:
         62:44:6e:38:8d:96:6a:c6:61:42:0a:90:e8:7a:e3:38:55:58:
         63:e2:59:5f:38:b4:8b:48:c3:38:b7:cf:5b:cc:bb:65:9f:7d:
         72:31:d7:4b:6f:ee:b3:fe:25:08:7d:12:96:6c:ce:2a:ba:09:
         95:5e:bf:6d:25:e4:49:11:f0:f2:29:ff:0a:92:11:49:50:bb:
         4d:b6:31:8a:6b:d2:c3:14:b3:9c:ed:71:3e:e1:b1:a2:60:e0:
         c3:e6:38:b3:17:9e:9b:90:80:33:75:01:55:d0:e1:7c:56:b4:
         5b:c1:4a:8e:0f:f4:9f:10:a2:23:fe:10:69:1d:01:80:82:5c:
         6c:bb:b0:2f:a1:c8:67:06:1a:81:44:7c:88:a8:f7:6d:f2:4b:
         1e:3d:8b:87:0c:25:6a:e0:49:7d:71:e6:46:b5:5c:34:e3:64:
         d5:16:e9:3e:34:e8:cb:a7:e1:e5:d1:40:e1:67:2f:43:0d:28:
         87:d2:b4:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 03:08:53 2024 by rpki-client on console-fra.rpki-client.org