Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30304/Qvs8F3ZA-uJil8xm3wCJ7-TIe5Q.roa
File:                     Qvs8F3ZA-uJil8xm3wCJ7-TIe5Q.roa (raw, json)
Hash identifier:          5TMzo4mdasHMs8ciV6S545bNrY3pn+RLRF3vBTjNN+I=
Subject key identifier:   42:FB:3C:17:76:40:FA:E2:62:97:CC:66:DF:00:89:EF:E4:C8:7B:94
Certificate issuer:       /CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
Certificate serial:       2B
Authority key identifier: 6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/Qvs8F3ZA-uJil8xm3wCJ7-TIe5Q.roa
Signing time:             Fri 26 Apr 2024 08:17:52 +0000
ROA not before:           Fri 26 Apr 2024 08:17:52 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     59127
IP address blocks:        2401:7ec0:d000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43 (0x2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
        Validity
            Not Before: Apr 26 08:17:52 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=42FB3C177640FAE26297CC66DF0089EFE4C87B94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:64:04:67:dc:d0:44:9b:be:21:c2:aa:d8:f1:
                    19:bf:f9:a0:80:32:cc:03:99:5a:1b:57:ce:69:76:
                    7e:1e:3c:af:20:07:6d:08:44:6a:4f:ff:58:9d:2c:
                    85:2f:f9:90:4c:00:74:25:6f:61:61:cf:52:a3:23:
                    af:c6:a6:b5:ff:72:a7:5a:6b:42:89:e9:70:4b:c5:
                    90:aa:ef:32:84:93:39:26:f8:bb:ec:9d:41:b0:26:
                    0f:ee:b5:c6:0b:0e:2b:70:4f:6b:90:1d:e7:46:d7:
                    6a:ad:07:35:da:bb:4a:59:02:8c:67:49:99:52:28:
                    76:78:98:54:5d:36:1f:c1:f6:35:22:b0:b0:d4:7a:
                    e2:fd:8d:d0:38:20:29:da:8d:f1:7b:78:57:9f:4d:
                    38:67:33:28:cb:0a:e5:67:4c:32:b3:9c:58:68:d8:
                    9a:e8:32:e5:d0:19:5d:9b:46:3b:b2:ac:4a:19:f0:
                    fb:2b:69:24:95:24:94:cc:91:bc:50:83:99:02:c5:
                    70:f7:77:e9:ff:a1:d8:31:00:de:03:a5:36:b5:3c:
                    18:1c:57:74:7a:06:28:6a:b2:c5:5f:0a:8e:06:ec:
                    e3:a5:45:8f:88:f8:85:89:f8:b1:61:67:95:55:0e:
                    0b:c3:1b:c1:1a:da:6c:45:c5:4b:02:bd:3e:b3:c1:
                    20:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:FB:3C:17:76:40:FA:E2:62:97:CC:66:DF:00:89:EF:E4:C8:7B:94
            X509v3 Authority Key Identifier:
                keyid:6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/Qvs8F3ZA-uJil8xm3wCJ7-TIe5Q.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:7ec0:d000::/36

    Signature Algorithm: sha256WithRSAEncryption
         0c:90:35:1a:aa:1f:71:0f:39:1e:88:8d:25:93:f3:1d:28:21:
         fc:8b:13:c4:38:ab:e3:33:d9:13:35:2a:e2:5f:6b:cf:c5:8b:
         08:40:93:f8:0e:85:8a:d7:49:2f:c8:b1:ad:09:e2:f1:ed:f0:
         cf:57:36:bb:bd:d8:ce:f3:18:9f:bc:0a:05:92:94:56:1a:fa:
         de:f5:5f:b7:20:57:2b:da:69:5f:63:fb:7e:4b:de:2c:8c:31:
         19:b6:60:8e:c8:55:16:ee:a9:17:73:f9:ea:66:e8:ed:25:8a:
         e8:19:ed:77:33:a9:21:c9:0c:4f:a1:64:86:03:01:64:a9:f8:
         6d:5e:7f:62:7c:b1:8a:ec:3b:15:5b:01:5e:c8:f0:b9:36:7b:
         dc:cd:8d:b8:00:15:e7:80:3d:5c:b1:26:cd:68:42:df:c5:56:
         68:b5:49:2a:35:bf:a1:a6:6e:23:93:ff:76:a1:a9:43:8c:ed:
         1b:e4:f4:53:12:53:77:39:80:35:20:61:c0:2d:c5:df:bb:66:
         0b:b4:d7:3f:21:79:40:64:47:9c:20:d9:46:ae:d8:41:41:65:
         c4:f2:e6:20:74:20:b9:29:81:54:f1:21:4f:32:fa:51:fd:04:
         5e:69:a0:e4:05:c1:d5:fa:f1:ef:ce:04:06:de:be:e5:3e:66:
         09:4c:64:49
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIBKzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2QTUx
M0FGN0JGNUQyREQ2MjlGRDE4MjY4ODVDMTAwMjkyOTMwNUNEMB4XDTI0MDQyNjA4
MTc1MloXDTI1MDQxNTAxMzAwMlowMzExMC8GA1UEAxMoNDJGQjNDMTc3NjQwRkFF
MjYyOTdDQzY2REYwMDg5RUZFNEM4N0I5NDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKdkBGfc0ESbviHCqtjxGb/5oIAyzAOZWhtXzml2fh48ryAHbQhE
ak//WJ0shS/5kEwAdCVvYWHPUqMjr8amtf9yp1prQonpcEvFkKrvMoSTOSb4u+yd
QbAmD+61xgsOK3BPa5Ad50bXaq0HNdq7SlkCjGdJmVIodniYVF02H8H2NSKwsNR6
4v2N0DggKdqN8Xt4V59NOGczKMsK5WdMMrOcWGjYmugy5dAZXZtGO7KsShnw+ytp
JJUklMyRvFCDmQLFcPd36f+h2DEA3gOlNrU8GBxXdHoGKGqyxV8Kjgbs46VFj4j4
hYn4sWFnlVUOC8MbwRrabEXFSwK9PrPBILECAwEAAaOCAiowggImMB0GA1UdDgQW
BBRC+zwXdkD64mKXzGbfAInv5Mh7lDAfBgNVHSMEGDAWgBRqUTr3v10t1in9GCaI
XBACkpMFzTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAzMDQvYWxFNjk3OWRMZFlwX1JnbWlGd1FBcEtUQmMwLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvYWxFNjk3OWRMZFlwX1JnbWlGd1FB
cEtUQmMwLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMzA0L1F2czhGM1pBLXVKaWw4eG0zd0NKNy1USWU1US5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgQkAX7A0DANBgkqhkiG9w0BAQsFAAOCAQEADJA1GqofcQ85HoiNJZPz
HSgh/IsTxDir4zPZEzUq4l9rz8WLCECT+A6FitdJL8ixrQni8e3wz1c2u73YzvMY
n7wKBZKUVhr63vVftyBXK9ppX2P7fkveLIwxGbZgjshVFu6pF3P56mbo7SWK6Bnt
dzOpIckMT6FkhgMBZKn4bV5/Ynyxiuw7FVsBXsjwuTZ73M2NuAAV54A9XLEmzWhC
38VWaLVJKjW/oaZuI5P/dqGpQ4ztG+T0UxJTdzmANSBhwC3F37tmC7TXPyF5QGRH
nCDZRq7YQUFlxPLmIHQguSmBVPEhTzL6Uf0EXmmg5AXB1frx784EBt6+5T5mCUxk
SQ==
-----END CERTIFICATE-----
Generated at Thu May 30 03:08:53 2024 by rpki-client on console-fra.rpki-client.org