Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30304/Z0tXFt8xRR1MCN1ulNeI_UZqedQ.roa
File:                     Z0tXFt8xRR1MCN1ulNeI_UZqedQ.roa (raw, json)
Hash identifier:          whDAn118cyIwRWEcLQ+IG8jSEtV39XjorihCxTZagWI=
Subject key identifier:   67:4B:57:16:DF:31:45:1D:4C:08:DD:6E:94:D7:88:FD:46:6A:79:D4
Certificate issuer:       /CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
Certificate serial:       11
Authority key identifier: 6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/Z0tXFt8xRR1MCN1ulNeI_UZqedQ.roa
Signing time:             Thu 11 May 2023 08:45:39 +0000
ROA not before:           Thu 11 May 2023 08:45:39 +0000
ROA not after:            Fri 10 May 2024 08:19:05 +0000
asID:                     59127
IP address blocks:        2401:7ec0::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 May 2024 21:46:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17 (0x11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
        Validity
            Not Before: May 11 08:45:39 2023 GMT
            Not After : May 10 08:19:05 2024 GMT
        Subject: CN=674B5716DF31451D4C08DD6E94D788FD466A79D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d3:bb:8f:b9:84:05:37:e6:94:b7:1c:f2:33:
                    3e:ae:b9:92:f8:47:9a:b3:da:fb:7a:78:13:cf:f6:
                    d4:7d:a3:35:f3:08:ea:9a:6a:e0:c4:67:4a:34:0a:
                    1f:c9:03:3d:6c:36:a0:b9:5c:3f:cb:ce:05:18:aa:
                    64:ba:af:1a:44:ea:e9:fb:e0:01:0c:8b:22:b9:fe:
                    aa:83:ed:73:2d:f9:a2:84:80:0e:bb:f4:c9:ee:63:
                    f1:4e:35:dc:3f:30:3d:5f:4c:65:99:d4:76:10:a0:
                    09:74:50:06:06:b3:3d:d2:f7:7a:ff:73:3a:48:de:
                    d8:d8:9c:97:92:b8:24:ee:cd:7d:ff:39:e2:1e:97:
                    7b:1f:dc:ae:32:f5:ac:ec:06:d0:c7:0d:52:24:5f:
                    42:11:9b:a7:26:93:79:f8:69:b9:48:44:14:bd:99:
                    f1:7e:ba:68:5e:51:7f:82:f5:0c:29:23:28:39:24:
                    b1:df:03:5f:1d:e9:32:8d:25:4a:f6:ec:95:55:de:
                    6b:11:39:21:e9:e2:f1:10:e7:be:12:fa:c3:3e:57:
                    e4:77:23:69:ea:1e:04:42:82:ca:32:ed:f5:d0:8e:
                    1c:69:3d:fe:1a:00:a3:0e:1b:6e:b1:34:89:b9:8c:
                    39:9e:99:7e:2f:0a:87:00:1c:5b:de:9a:7e:d0:df:
                    b3:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:4B:57:16:DF:31:45:1D:4C:08:DD:6E:94:D7:88:FD:46:6A:79:D4
            X509v3 Authority Key Identifier:
                keyid:6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/Z0tXFt8xRR1MCN1ulNeI_UZqedQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:7ec0::/36

    Signature Algorithm: sha256WithRSAEncryption
         94:c6:8a:b2:35:de:7c:e1:ea:59:a7:cc:08:71:61:0f:7e:60:
         8b:b1:fd:46:d5:5d:69:e2:30:54:fb:5e:9a:0f:bc:a5:28:91:
         df:0f:94:99:e5:ac:1a:d9:db:6a:91:8d:61:aa:c2:2f:7d:83:
         c9:b9:0d:11:64:9b:8f:c3:95:6c:c8:60:34:61:bc:5f:59:96:
         58:3b:a3:36:05:a7:5d:8a:46:24:13:35:61:92:66:35:a8:be:
         09:53:af:a0:af:91:ef:4b:41:9b:8a:0f:0c:0c:71:35:57:14:
         d9:a0:29:88:11:9d:a4:dc:97:93:e6:63:c1:21:6c:dd:39:98:
         c3:73:01:4b:23:62:0e:16:0c:e9:db:fd:89:d8:5f:e0:15:45:
         bc:49:f6:53:06:3c:95:f1:3a:94:ad:72:6c:3c:cb:c2:9a:cb:
         3d:d8:85:ff:3a:47:3e:28:b6:12:e6:c1:3e:52:a4:3e:f5:fb:
         9b:d1:23:2b:e6:24:c0:78:44:d9:2c:cd:bd:80:b6:ee:c1:6d:
         5e:37:58:6d:4c:9f:5d:35:75:6c:71:c9:76:11:96:49:9d:e4:
         cb:49:5e:3d:36:6b:42:46:5a:04:e1:a9:10:7f:b2:1f:7a:e3:
         cb:81:4b:00:b5:91:2b:fd:e5:67:27:94:dc:7d:cd:84:f5:3c:
         b9:d3:ab:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 00:30:30 2024 by rpki-client on console-fra.rpki-client.org