Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30304/yggJXftdf2fXSsoxTBdzMYe_dUw.roa
File:                     yggJXftdf2fXSsoxTBdzMYe_dUw.roa (raw, json)
Hash identifier:          ybwvjZ4qThTHvS3dAh8dAViLgYAni+K+0evN3i3SowQ=
Subject key identifier:   CA:08:09:5D:FB:5D:7F:67:D7:4A:CA:31:4C:17:73:31:87:BF:75:4C
Certificate issuer:       /CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
Certificate serial:       05
Authority key identifier: 6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/yggJXftdf2fXSsoxTBdzMYe_dUw.roa
Signing time:             Thu 11 May 2023 08:29:25 +0000
ROA not before:           Thu 11 May 2023 08:29:25 +0000
ROA not after:            Fri 10 May 2024 08:19:05 +0000
asID:                     59127
IP address blocks:        2401:7ec0:4000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 13:32:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A513AF7BF5D2DD629FD1826885C1002929305CD
        Validity
            Not Before: May 11 08:29:25 2023 GMT
            Not After : May 10 08:19:05 2024 GMT
        Subject: CN=CA08095DFB5D7F67D74ACA314C17733187BF754C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:d5:5b:8c:fc:bf:71:ca:5a:51:0b:27:ee:0c:
                    bd:9e:67:fb:59:84:06:97:7a:c5:7f:34:23:04:7a:
                    41:df:ef:60:80:83:26:91:c6:93:a6:3b:e2:57:13:
                    22:f5:1a:fa:27:fc:f1:09:5d:f0:ec:7f:e6:74:2d:
                    c0:08:23:f5:07:ab:e1:4c:77:7d:a4:6d:89:f4:42:
                    5e:a0:57:ad:b7:e4:85:d7:f1:04:4c:71:c8:17:e9:
                    b4:3a:1d:d2:9c:a9:0b:96:93:10:27:ac:40:ec:60:
                    bf:72:a6:d7:4c:85:ec:d7:d9:d5:fe:ad:aa:42:02:
                    a4:ac:83:cc:19:0f:ec:c1:bc:93:2f:df:ee:ca:73:
                    c2:13:0a:6d:cb:2f:4a:b2:95:a4:51:df:b5:f8:af:
                    30:6e:52:c9:48:ef:f2:8b:91:95:41:8f:f6:eb:b3:
                    15:0c:ba:ff:d4:eb:59:9c:14:8d:3f:1b:01:7b:76:
                    ff:28:91:23:0f:85:66:09:33:2f:37:5d:eb:82:0c:
                    f2:df:05:d4:d8:53:54:26:8d:1c:e2:79:6b:e9:9e:
                    b4:86:39:ff:ca:7d:3a:0e:e5:78:15:6f:0c:86:dd:
                    43:d4:6c:b4:7f:86:a6:01:91:f5:ab:d0:43:8b:16:
                    be:60:25:21:41:0b:e6:b9:2f:5e:1d:57:8e:7b:41:
                    15:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:08:09:5D:FB:5D:7F:67:D7:4A:CA:31:4C:17:73:31:87:BF:75:4C
            X509v3 Authority Key Identifier:
                keyid:6A:51:3A:F7:BF:5D:2D:D6:29:FD:18:26:88:5C:10:02:92:93:05:CD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/alE6979dLdYp_RgmiFwQApKTBc0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/alE6979dLdYp_RgmiFwQApKTBc0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30304/yggJXftdf2fXSsoxTBdzMYe_dUw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:7ec0:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         5b:23:b5:c9:c7:16:82:ba:de:42:31:96:53:98:e9:eb:2d:52:
         5c:3f:f5:c3:75:e6:1c:4a:00:34:3e:4e:77:de:52:8c:24:11:
         83:52:59:21:4e:6f:01:33:3f:81:a4:ec:79:50:75:e4:a9:69:
         f3:21:a6:69:3d:3c:5b:eb:e7:7f:4d:5a:d3:0b:71:8e:bf:d4:
         2a:3e:a2:a0:a6:ba:57:18:68:bf:20:ca:22:b1:3e:81:fc:93:
         32:2f:d6:07:1e:59:ce:b1:4f:dc:ee:74:fc:0c:50:7c:09:2c:
         f9:60:83:06:9b:3c:02:fc:2c:dd:3f:9a:86:41:dc:8a:6e:a3:
         16:71:38:1a:c6:1f:98:3f:d2:91:ac:02:75:59:11:54:27:bc:
         6c:8e:cc:08:7f:0c:6c:50:c8:1f:c6:fd:47:97:d9:47:42:e5:
         7e:40:ee:00:fd:c3:94:fa:a6:8b:85:97:1a:07:75:1e:f7:a5:
         41:a0:1c:b9:77:f5:e4:3c:e2:db:91:16:5c:cc:9b:cf:bc:55:
         bc:de:16:28:fc:e2:01:a3:b4:9c:6d:d9:db:13:26:32:fc:cb:
         54:e6:58:7a:30:43:a3:15:d2:4e:e0:87:6b:d9:9d:04:a2:6a:
         f4:fb:f7:e9:9f:16:1a:82:6f:13:58:2d:1c:88:05:37:21:f6:
         6f:f8:bf:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 08:25:08 2024 by rpki-client on console-ams.rpki-client.org