Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30304/rZU7eGYmiIttDa3gv6EPleezVQg.roa
File:                     rZU7eGYmiIttDa3gv6EPleezVQg.roa (raw, json)
Hash identifier:          /b5afRhMTg/9er/frl9O7t8gdFgqrhRy7wrotIFS9Ng=
Subject key identifier:   AD:95:3B:78:66:26:88:8B:6D:0D:AD:E0:BF:A1:0F:95:E7:B3:55:08
Certificate issuer:       /CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
Certificate serial:       29
Authority key identifier: 6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/rZU7eGYmiIttDa3gv6EPleezVQg.roa
Signing time:             Fri 26 Apr 2024 08:17:51 +0000
ROA not before:           Fri 26 Apr 2024 08:17:51 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     59127
IP address blocks:        2401:7ec0:b000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 41 (0x29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
        Validity
            Not Before: Apr 26 08:17:51 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=AD953B786626888B6D0DADE0BFA10F95E7B35508
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:2f:83:d4:ed:74:e0:26:14:88:14:f2:ca:d1:
                    c7:07:e9:4f:17:39:f5:2b:d4:c4:be:51:9c:74:10:
                    c5:bc:06:a2:5d:04:57:ff:fa:b6:0f:2b:c4:db:d4:
                    34:4a:28:46:14:60:74:22:bc:3b:c2:28:6b:87:9e:
                    6c:9b:18:1d:26:34:da:01:38:20:8b:7e:a0:64:f7:
                    9d:27:1a:e0:c7:c7:1a:90:87:37:4e:4f:6f:3a:29:
                    28:2e:b7:d5:1b:b8:45:16:85:be:0e:86:62:79:4c:
                    ac:65:8b:d1:7c:b3:2e:02:c5:1c:dc:81:63:00:16:
                    2e:89:d5:86:e6:ca:f1:b7:95:b8:98:87:70:c8:8c:
                    e2:1d:8a:ae:03:c7:52:ec:9e:bb:6b:9a:f5:c8:12:
                    72:95:0e:e2:7a:11:3b:f0:cd:45:30:61:c7:b1:e0:
                    66:4e:ff:76:2d:81:1d:2b:e9:20:d0:ff:d2:a0:36:
                    fa:49:0f:83:b3:02:99:b4:6b:b3:53:74:86:6f:f0:
                    27:93:9d:ea:90:a3:9e:ce:5d:80:a1:86:3c:3a:ed:
                    71:ea:43:bf:c9:3d:df:bc:81:25:5b:da:35:be:f2:
                    09:2a:01:98:ee:5f:61:bc:71:56:fe:cc:dd:64:45:
                    fd:63:2a:a1:b8:64:4a:d6:bf:f0:3f:7d:c0:13:82:
                    35:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:95:3B:78:66:26:88:8B:6D:0D:AD:E0:BF:A1:0F:95:E7:B3:55:08
            X509v3 Authority Key Identifier:
                keyid:6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/rZU7eGYmiIttDa3gv6EPleezVQg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:7ec0:b000::/36

    Signature Algorithm: sha256WithRSAEncryption
         21:03:d6:af:73:bc:dd:b1:42:ba:b6:f6:d6:68:bc:81:42:76:
         ec:dc:70:f9:98:6a:80:10:56:e8:e9:3b:01:6f:2b:c0:48:4d:
         a9:3a:ba:71:81:22:20:0d:d9:98:8e:40:63:ba:48:ab:5b:a0:
         f4:1e:07:5d:90:fc:2c:1e:fb:ed:71:06:90:fd:ae:82:44:3d:
         34:11:cf:7a:1b:c6:23:b0:d0:f2:e8:47:fd:f1:a1:76:c4:09:
         35:d5:12:1f:28:0a:ad:b0:04:5c:d4:76:26:ff:a4:fa:5d:a5:
         e3:64:2a:dc:21:a6:17:44:75:1e:25:4a:bb:ea:56:30:b2:e1:
         51:a3:05:46:36:22:a8:eb:08:3b:c0:13:74:56:38:a4:8f:f5:
         d1:78:56:82:f8:76:d1:55:63:6f:5c:d6:df:06:1e:2c:1f:e4:
         55:e4:72:91:a8:d3:3f:89:c9:13:ea:39:67:bc:b4:72:f6:79:
         b1:ec:70:49:f2:1f:e3:51:a1:0f:5a:08:c6:87:73:e7:bf:f3:
         b3:ed:5a:be:62:b2:90:f3:a1:23:cf:44:d5:cf:f2:57:94:d7:
         da:13:30:91:18:7f:8d:3d:68:9f:77:fe:78:c7:f6:87:c1:c1:
         ba:d4:04:f1:3d:3e:bd:07:4e:29:88:40:69:82:53:15:b8:12:
         90:db:ee:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 03:38:45 2024 by rpki-client on console-ams.rpki-client.org