Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30304/_kPPFccK-1Ez7dANBUikzki8ypA.roa
File:                     _kPPFccK-1Ez7dANBUikzki8ypA.roa (raw, json)
Hash identifier:          gUy1IqVwKoweO4qSKd64P12sqcYx1aha1Dahy23tfAc=
Subject key identifier:   FE:43:CF:15:C7:0A:FB:51:33:ED:D0:0D:05:48:A4:CE:48:BC:CA:90
Certificate issuer:       /CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
Certificate serial:       2E
Authority key identifier: 6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/_kPPFccK-1Ez7dANBUikzki8ypA.roa
Signing time:             Fri 26 Apr 2024 08:17:53 +0000
ROA not before:           Fri 26 Apr 2024 08:17:53 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     59127
IP address blocks:        2401:7ec0::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46 (0x2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
        Validity
            Not Before: Apr 26 08:17:53 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=FE43CF15C70AFB5133EDD00D0548A4CE48BCCA90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e4:18:38:9f:26:00:0e:0a:3f:fe:4e:ae:aa:
                    0e:02:ac:de:70:04:73:64:25:df:02:b2:f6:f5:e4:
                    64:bd:23:20:f0:7c:ec:4a:4d:31:5c:f8:13:dd:a3:
                    e8:30:5f:d6:3e:62:07:d8:9b:51:81:b6:50:e6:71:
                    27:5d:9e:60:8e:49:9e:30:63:cd:76:25:99:d2:93:
                    80:bc:6a:34:97:95:02:c5:78:44:ac:c0:8d:a5:60:
                    ac:1c:57:e4:df:73:92:f5:fe:61:65:59:f0:15:8f:
                    1e:e4:fb:91:5b:4c:45:7d:a1:b9:aa:4d:59:11:b9:
                    14:10:d9:e4:23:9c:36:bb:9f:13:91:57:82:bd:da:
                    7c:68:72:01:f6:b2:c1:ad:b4:93:96:ea:2a:b4:50:
                    a7:06:8f:3c:59:ed:49:86:ed:db:a5:45:3c:95:81:
                    29:d9:a3:44:2b:3a:71:b6:ba:68:a0:5d:25:9a:36:
                    a0:2b:08:3f:26:4e:3d:fa:e4:8b:3b:4f:9f:44:1c:
                    25:b3:a0:4a:b3:b1:26:41:50:49:5b:6f:a7:97:d5:
                    3b:3e:bd:a6:6d:32:d8:94:35:92:aa:4a:ea:ac:12:
                    05:1b:f5:8f:38:06:78:c1:02:f0:f9:4b:08:e0:eb:
                    91:fe:94:f4:f3:b4:c8:85:93:71:46:83:97:85:4c:
                    8d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:43:CF:15:C7:0A:FB:51:33:ED:D0:0D:05:48:A4:CE:48:BC:CA:90
            X509v3 Authority Key Identifier:
                keyid:6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/_kPPFccK-1Ez7dANBUikzki8ypA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:7ec0::/36

    Signature Algorithm: sha256WithRSAEncryption
         8a:7b:76:cc:14:e3:4b:f5:40:ae:7b:c0:89:c1:e4:e3:43:ae:
         82:79:e5:2a:67:7d:58:ca:7b:6f:ac:7e:99:0b:f6:45:13:45:
         d7:43:ef:2e:09:46:61:a7:2c:6d:5d:8e:2e:b4:4e:af:9e:39:
         32:50:a7:d4:06:4e:d8:a8:74:1e:44:b7:31:64:37:80:62:35:
         58:f8:c6:ba:63:57:52:91:6f:0b:0a:e2:19:8e:47:9d:c2:62:
         26:7a:38:bd:fb:03:da:75:b4:33:ff:49:f1:fc:77:c5:5d:37:
         9d:39:7d:1a:77:f0:a0:7f:be:90:df:3e:f3:3f:17:8f:3a:4e:
         88:30:0b:3c:6d:72:b6:0f:59:d3:fd:99:98:0c:ca:e5:dd:a7:
         c9:aa:df:2c:4d:5e:f7:19:4d:dd:34:7e:e4:46:15:32:69:6c:
         d4:8c:70:6b:3d:e9:d4:56:48:82:f6:78:a3:94:6d:33:66:90:
         f3:1a:3f:4a:1b:b3:87:63:47:24:3e:f2:e0:56:a0:db:ab:06:
         14:5e:92:97:65:86:46:e0:ec:f3:12:e5:d2:36:37:c8:ef:7d:
         3f:94:a8:5e:bd:0c:f6:43:38:44:2a:59:5c:bc:b3:7c:09:e4:
         2d:d0:45:af:4f:7c:77:ff:a1:14:b2:68:85:80:3d:74:00:23:
         f0:86:ea:9a
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIBLjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2QTUx
M0FGN0JGNUQyREQ2MjlGRDE4MjY4ODVDMTAwMjkyOTMwNUNEMB4XDTI0MDQyNjA4
MTc1M1oXDTI1MDQxNTAxMzAwMlowMzExMC8GA1UEAxMoRkU0M0NGMTVDNzBBRkI1
MTMzRUREMDBEMDU0OEE0Q0U0OEJDQ0E5MDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJHkGDifJgAOCj/+Tq6qDgKs3nAEc2Ql3wKy9vXkZL0jIPB87EpN
MVz4E92j6DBf1j5iB9ibUYG2UOZxJ12eYI5JnjBjzXYlmdKTgLxqNJeVAsV4RKzA
jaVgrBxX5N9zkvX+YWVZ8BWPHuT7kVtMRX2huapNWRG5FBDZ5COcNrufE5FXgr3a
fGhyAfaywa20k5bqKrRQpwaPPFntSYbt26VFPJWBKdmjRCs6cba6aKBdJZo2oCsI
PyZOPfrkiztPn0QcJbOgSrOxJkFQSVtvp5fVOz69pm0y2JQ1kqpK6qwSBRv1jzgG
eMEC8PlLCODrkf6U9PO0yIWTcUaDl4VMjW8CAwEAAaOCAiowggImMB0GA1UdDgQW
BBT+Q88Vxwr7UTPt0A0FSKTOSLzKkDAfBgNVHSMEGDAWgBRqUTr3v10t1in9GCaI
XBACkpMFzTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAzMDQvYWxFNjk3OWRMZFlwX1JnbWlGd1FBcEtUQmMwLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvYWxFNjk3OWRMZFlwX1JnbWlGd1FB
cEtUQmMwLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMzA0L19rUFBGY2NLLTFFejdkQU5CVWlremtpOHlwQS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgQkAX7AADANBgkqhkiG9w0BAQsFAAOCAQEAint2zBTjS/VArnvAicHk
40OugnnlKmd9WMp7b6x+mQv2RRNF10PvLglGYacsbV2OLrROr545MlCn1AZO2Kh0
HkS3MWQ3gGI1WPjGumNXUpFvCwriGY5HncJiJno4vfsD2nW0M/9J8fx3xV03nTl9
GnfwoH++kN8+8z8XjzpOiDALPG1ytg9Z0/2ZmAzK5d2nyarfLE1e9xlN3TR+5EYV
Mmls1Ixwaz3p1FZIgvZ4o5RtM2aQ8xo/Shuzh2NHJD7y4Fag26sGFF6Sl2WGRuDs
8xLl0jY3yO99P5SoXr0M9kM4RCpZXLyzfAnkLdBFr098d/+hFLJohYA9dAAj8Ibq
mg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:32 2024 by rpki-client on console-ams.rpki-client.org