Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30304/o0BtJYaSCruVqKVhDvQJPtZqRc8.roa
File:                     o0BtJYaSCruVqKVhDvQJPtZqRc8.roa (raw, json)
Hash identifier:          /rlT4HhveFEQYmg5ENMT+7Pno/bQMKeKR+19/jEnOCA=
Subject key identifier:   A3:40:6D:25:86:92:0A:BB:95:A8:A5:61:0E:F4:09:3E:D6:6A:45:CF
Certificate issuer:       /CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
Certificate serial:       1F
Authority key identifier: 6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/o0BtJYaSCruVqKVhDvQJPtZqRc8.roa
Signing time:             Fri 26 Apr 2024 08:17:41 +0000
ROA not before:           Fri 26 Apr 2024 08:17:41 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     59127
IP address blocks:        2401:7ec0:1000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31 (0x1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
        Validity
            Not Before: Apr 26 08:17:41 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=A3406D2586920ABB95A8A5610EF4093ED66A45CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ea:a6:83:47:2c:e7:a7:a5:6e:f4:bc:da:33:
                    40:da:99:49:fb:69:ec:22:be:c2:75:08:0b:20:b5:
                    67:9e:8f:76:34:de:3a:0b:ba:8f:0b:c1:62:b8:19:
                    3f:aa:e6:c7:23:49:88:2e:c6:7f:bf:75:d1:5a:bd:
                    1d:4c:f5:35:aa:42:47:89:7e:69:f2:cc:fa:1c:12:
                    4f:c9:a9:87:c8:2d:3a:f1:08:d2:4d:a8:fb:ad:d2:
                    f3:53:03:8d:18:ae:99:b0:f2:37:17:63:e3:f9:e0:
                    e0:39:26:dd:34:3b:4f:0e:49:c5:ee:e8:4f:c8:b4:
                    a3:9f:d2:34:c1:8b:bd:82:22:eb:d0:5b:47:cd:00:
                    d6:6a:65:a1:b6:3a:3f:39:e8:cf:d5:82:23:c4:70:
                    97:fc:3d:e0:18:c3:9c:75:c6:5c:e6:38:90:4c:cc:
                    bb:e2:c0:61:47:f9:58:9f:f2:11:5e:95:e9:7f:d1:
                    f2:bd:56:2f:97:e9:43:32:97:66:7a:ac:10:13:cb:
                    23:e5:7d:71:d7:64:d8:95:30:68:b9:47:08:72:2f:
                    d7:7d:47:f2:56:3a:6f:0f:a6:6b:90:34:07:4c:7b:
                    31:3c:61:12:89:47:ce:4d:b2:d3:92:61:d7:b5:da:
                    af:f2:34:00:a8:c9:03:a6:b9:ac:3a:19:d2:c7:4d:
                    36:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:40:6D:25:86:92:0A:BB:95:A8:A5:61:0E:F4:09:3E:D6:6A:45:CF
            X509v3 Authority Key Identifier:
                keyid:6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/o0BtJYaSCruVqKVhDvQJPtZqRc8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:7ec0:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         a4:39:9e:36:a0:d7:51:f7:84:dc:f9:5c:a8:0e:c4:a2:ae:a6:
         7b:07:a3:b7:65:f4:ce:09:44:dd:dd:ff:0b:7f:27:0f:f6:3b:
         fe:75:9b:e1:71:84:71:59:fe:f3:42:7d:db:f2:bc:e5:01:05:
         77:8b:9c:ec:24:0e:88:ce:13:8c:93:48:fe:f8:f7:74:80:37:
         36:05:8e:59:c5:5e:1f:09:ec:34:ef:d3:0e:7c:97:1a:97:98:
         45:c2:d7:4e:05:38:6d:08:75:23:7d:3d:09:86:b9:57:87:16:
         0b:be:a9:80:9b:4c:3b:86:b2:80:76:69:33:a1:09:1c:20:e3:
         67:80:91:5c:bc:37:0c:09:15:bb:34:89:93:0e:5a:62:27:7f:
         41:65:92:a5:51:16:71:01:90:ef:5c:81:1c:22:d5:ec:ed:54:
         29:2b:3f:3f:0d:7d:45:ce:19:7a:86:73:e6:cb:01:3d:de:e0:
         e1:10:52:1c:fb:a0:a2:76:72:d9:63:5c:98:16:4a:81:50:6f:
         91:f4:fe:b5:54:d3:0f:99:54:e9:66:67:26:56:d1:ff:72:d6:
         9d:59:1b:f4:2d:50:2f:4b:67:82:5d:01:21:a2:c0:0d:b5:78:
         6f:51:78:fb:70:59:3b:ce:17:bf:e1:4e:cf:89:b8:ed:06:25:
         2f:af:72:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:08 2024 by rpki-client on console-fra.rpki-client.org