Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30304/tSuyP0038E4RKqceqAOwhATEJPU.roa
File:                     tSuyP0038E4RKqceqAOwhATEJPU.roa (raw, json)
Hash identifier:          MMELSI5JTxTxmqkGttxmZQZDI1gEhQ6CzJMPJTI5hM4=
Subject key identifier:   B5:2B:B2:3F:4D:37:F0:4E:11:2A:A7:1E:A8:03:B0:84:04:C4:24:F5
Certificate issuer:       /CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
Certificate serial:       22
Authority key identifier: 6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/tSuyP0038E4RKqceqAOwhATEJPU.roa
Signing time:             Fri 26 Apr 2024 08:17:47 +0000
ROA not before:           Fri 26 Apr 2024 08:17:47 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     59127
IP address blocks:        2401:7ec0:4000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34 (0x22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
        Validity
            Not Before: Apr 26 08:17:47 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=B52BB23F4D37F04E112AA71EA803B08404C424F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3e:23:4e:1e:30:69:6c:87:7c:f0:17:8b:60:
                    53:46:68:d1:55:12:ec:52:fd:5e:0e:c3:9e:db:48:
                    30:3b:ae:bc:5f:c8:e6:41:80:e6:d2:91:79:53:60:
                    36:46:03:db:2e:6b:41:4d:c7:00:09:de:35:c7:7b:
                    c7:73:26:8a:b7:32:c6:51:49:f8:f2:2a:08:6e:5d:
                    6f:d5:9b:2f:fe:f5:31:df:18:fc:13:de:26:cd:1d:
                    2d:65:00:7d:c1:c4:40:52:b9:02:09:78:fd:b1:54:
                    61:6a:8e:45:d6:ac:53:3e:5a:cc:07:c2:80:7c:f0:
                    12:fb:da:fb:27:ce:82:6f:5a:7d:88:db:f8:09:1b:
                    57:24:aa:13:c2:53:f6:9b:14:d6:21:d8:7b:13:4e:
                    cf:1f:db:ae:1f:09:8f:45:e8:29:f6:21:4d:41:0f:
                    c3:01:c1:71:11:ac:61:4f:d5:57:72:aa:c0:5e:0e:
                    b4:39:85:4e:77:ce:b5:35:9c:12:e0:c5:38:b4:44:
                    38:67:d7:13:cb:91:40:5d:b0:73:57:e9:0e:36:b5:
                    b2:83:e0:74:ed:27:ac:52:74:df:cb:31:38:6b:10:
                    ab:88:07:74:bd:ce:1b:da:5d:84:33:6e:9a:71:3b:
                    82:1d:68:b6:07:db:96:74:46:5e:7f:a7:8f:da:a7:
                    96:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:2B:B2:3F:4D:37:F0:4E:11:2A:A7:1E:A8:03:B0:84:04:C4:24:F5
            X509v3 Authority Key Identifier:
                keyid:6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/tSuyP0038E4RKqceqAOwhATEJPU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:7ec0:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         a2:1e:de:63:9f:86:96:c2:20:3f:c9:ce:9a:3d:78:74:f4:a2:
         98:26:9a:54:a6:6d:26:cb:d0:46:be:a5:32:40:5f:e1:27:15:
         e9:98:a3:10:f6:b6:57:3a:86:36:f7:23:82:91:c2:00:df:ea:
         a5:56:af:84:ab:f5:62:88:0e:cb:de:a4:59:fd:c0:72:2d:a1:
         2f:f0:95:90:b5:36:b4:2d:4c:b1:b0:35:7b:07:11:2f:56:5b:
         48:9a:a2:41:6e:35:46:da:78:05:c7:89:0b:12:b2:30:36:93:
         ec:13:45:67:50:80:f3:28:18:83:e4:c9:e6:d2:7b:9d:2f:54:
         ed:7d:ce:d7:f5:7d:c3:ad:c3:5c:ac:ca:56:c0:2a:38:fa:03:
         8a:67:e2:6e:c8:1a:38:74:4d:0d:7f:4d:b9:91:94:40:c8:a5:
         8e:38:06:60:c6:0c:41:21:ec:41:1d:d1:e0:64:82:72:08:ec:
         ad:4b:27:56:e2:10:4f:8c:27:4f:82:cd:d9:12:90:1a:fa:fc:
         98:e7:f1:00:a8:51:a1:44:75:9c:57:e5:b7:74:1e:e2:01:73:
         0b:2e:11:68:76:6f:9b:2b:2d:98:b9:37:88:ee:c1:3b:dd:c3:
         5d:60:14:0d:4c:d7:40:11:24:c5:7c:26:13:2d:de:f6:4d:25:
         6c:2f:84:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 03:38:45 2024 by rpki-client on console-ams.rpki-client.org