Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30304/p2Hy2uH408gJwBc56lY8QleX74U.roa
File:                     p2Hy2uH408gJwBc56lY8QleX74U.roa (raw, json)
Hash identifier:          ifg9PpBNNzKUeS3xslmu8a2O89V0Kl1f9PFOOzqZB7g=
Subject key identifier:   A7:61:F2:DA:E1:F8:D3:C8:09:C0:17:39:EA:56:3C:42:57:97:EF:85
Certificate issuer:       /CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
Certificate serial:       0E
Authority key identifier: 6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/p2Hy2uH408gJwBc56lY8QleX74U.roa
Signing time:             Thu 11 May 2023 08:45:38 +0000
ROA not before:           Thu 11 May 2023 08:45:38 +0000
ROA not after:            Fri 10 May 2024 08:19:05 +0000
asID:                     59127
IP address blocks:        2401:7ec0:d000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 May 2024 21:46:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
        Validity
            Not Before: May 11 08:45:38 2023 GMT
            Not After : May 10 08:19:05 2024 GMT
        Subject: CN=A761F2DAE1F8D3C809C01739EA563C425797EF85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7d:c2:67:84:96:e5:49:60:50:5f:06:8b:58:
                    fd:eb:c6:46:e8:cc:aa:9f:6d:85:81:2e:59:f6:cf:
                    62:44:86:31:de:08:c6:d7:a0:f2:bf:11:37:80:b3:
                    e9:5c:20:b1:80:68:9d:20:d8:18:03:b1:9b:f3:7c:
                    dc:e8:12:c8:9b:fa:6e:67:59:74:a2:8c:8d:15:99:
                    2b:1e:d1:14:51:c5:e6:b5:5e:c7:42:85:f4:9c:ba:
                    fd:43:6c:52:26:e7:e8:43:9e:c6:e9:75:60:a4:08:
                    cb:13:21:b5:d6:2d:b6:53:16:9b:34:1a:87:5e:cc:
                    4b:88:68:bc:6f:65:bd:9b:25:5e:1f:b5:c2:f9:bd:
                    36:81:ef:66:c1:d0:2b:83:af:2c:62:5c:23:af:bc:
                    91:66:5b:3f:fb:1d:d9:76:52:5d:fb:44:a9:1f:5e:
                    d5:74:d3:4e:f4:98:c0:43:5d:ea:4d:1d:d9:d1:cb:
                    dc:db:3f:a7:72:28:6e:7d:7f:33:56:21:b6:17:af:
                    e8:e8:9a:61:37:ee:67:a6:a6:31:70:93:d0:47:2a:
                    54:42:6a:a1:be:03:33:e8:11:6a:a3:69:d5:be:d2:
                    ca:81:13:c0:c1:ba:32:29:fa:f7:a4:33:7a:d9:c4:
                    c1:19:84:57:13:1c:e1:cd:01:59:e1:4d:d2:eb:fb:
                    89:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:61:F2:DA:E1:F8:D3:C8:09:C0:17:39:EA:56:3C:42:57:97:EF:85
            X509v3 Authority Key Identifier:
                keyid:6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/p2Hy2uH408gJwBc56lY8QleX74U.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:7ec0:d000::/36

    Signature Algorithm: sha256WithRSAEncryption
         56:99:cf:92:d2:48:8d:5e:ad:60:e5:25:83:33:b7:cc:8d:1c:
         28:83:2c:54:86:b6:35:34:f2:2f:83:5f:51:c5:99:64:9e:ef:
         1b:16:43:91:e1:c7:a2:30:0b:03:e4:f2:45:0a:22:e9:b4:71:
         ec:ef:1b:a1:d2:63:f3:ae:5e:9e:5b:41:b9:e1:d2:35:44:b5:
         ec:91:b4:01:dd:aa:f1:8a:87:44:16:c6:d5:e6:0b:5f:17:59:
         8f:22:92:0c:8a:e1:8c:af:6b:df:61:da:47:f2:e7:06:30:cb:
         dc:2c:53:71:94:c7:57:45:78:af:70:8a:2c:f1:38:24:d6:d2:
         3f:a9:6a:ff:50:bd:d5:f0:43:f5:98:24:58:29:d7:5f:1a:ee:
         7e:3d:3b:0f:62:41:e4:61:3c:e1:f0:90:fc:9a:9c:3e:8c:30:
         38:5c:8a:18:2f:61:9f:7f:16:68:3f:f0:04:22:b6:a0:38:26:
         6b:61:42:bb:82:e6:bb:df:a7:ef:d6:96:89:82:c9:13:65:f7:
         6c:13:92:eb:e1:b0:0e:ff:18:e7:50:17:c2:c7:0a:cd:d9:1b:
         51:ae:68:56:91:d7:38:bc:79:66:ad:4d:9c:2f:70:25:5f:5a:
         da:d2:c1:d5:8f:04:b4:8a:e1:c7:7f:74:9f:c0:c7:a1:af:97:
         ad:69:5e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 00:30:30 2024 by rpki-client on console-fra.rpki-client.org