Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30327/elGOiKeJ1buenre6IVy56sx4fVI.roa
File:                     elGOiKeJ1buenre6IVy56sx4fVI.roa (raw, json)
Hash identifier:          KX/y9EsXbcM0XVAiR9UXgpPP51tSaAWHh57D5RJIxuw=
Subject key identifier:   7A:51:8E:88:A7:89:D5:BB:9E:9E:B7:BA:21:5C:B9:EA:CC:78:7D:52
Certificate issuer:       /CN=62221DAD8F905C6293B90261FE5FECBC989F7FA7
Certificate serial:       39
Authority key identifier: 62:22:1D:AD:8F:90:5C:62:93:B9:02:61:FE:5F:EC:BC:98:9F:7F:A7
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/YiIdrY-QXGKTuQJh_l_svJiff6c.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30327/elGOiKeJ1buenre6IVy56sx4fVI.roa
Signing time:             Thu 29 Feb 2024 01:31:50 +0000
ROA not before:           Thu 29 Feb 2024 01:31:50 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     63786
IP address blocks:        2403:a640:200::/39 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30327/YiIdrY-QXGKTuQJh_l_svJiff6c.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30327/YiIdrY-QXGKTuQJh_l_svJiff6c.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/YiIdrY-QXGKTuQJh_l_svJiff6c.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57 (0x39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62221DAD8F905C6293B90261FE5FECBC989F7FA7
        Validity
            Not Before: Feb 29 01:31:50 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=7A518E88A789D5BB9E9EB7BA215CB9EACC787D52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:05:66:fd:97:93:4a:fe:1f:3b:a6:5a:1f:64:
                    52:06:ba:d2:3f:1c:4c:fa:3b:48:f2:03:50:78:de:
                    1a:76:95:7c:4d:28:5d:61:39:bd:ee:22:67:0a:41:
                    f4:a8:8f:1e:1c:55:68:02:c8:ff:0b:07:c8:cf:2c:
                    3f:ba:81:11:3e:df:d2:fd:76:9b:99:2d:63:e3:90:
                    cc:81:03:11:ed:84:5b:a5:a6:10:33:8c:b9:96:48:
                    fc:7f:23:ff:6f:e7:0b:0e:00:7b:83:92:06:f9:24:
                    f4:52:df:37:2a:61:f0:e3:b6:2c:f9:ca:86:fb:22:
                    87:df:de:7b:65:b3:b4:ba:5b:2b:62:17:c3:94:b6:
                    e5:98:7f:aa:1a:ee:91:26:ae:39:ea:65:26:69:cb:
                    1e:2f:a7:81:d2:2b:4f:82:f0:99:12:90:d3:43:e0:
                    0d:e4:72:9c:80:24:9d:cc:22:1d:a3:f2:b4:7a:0f:
                    b3:81:93:f8:1f:8d:8a:cf:b5:bd:98:92:fa:72:25:
                    3c:44:af:48:ab:03:fa:4f:a2:af:fa:db:42:8f:61:
                    a2:ff:55:05:8e:17:d0:de:89:e1:49:cb:79:e6:e9:
                    05:c7:98:73:d8:16:c9:28:b6:6b:af:71:fa:bc:58:
                    c6:5c:da:e5:8d:7f:14:1e:ce:0c:3f:2d:50:af:6d:
                    e0:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:51:8E:88:A7:89:D5:BB:9E:9E:B7:BA:21:5C:B9:EA:CC:78:7D:52
            X509v3 Authority Key Identifier:
                keyid:62:22:1D:AD:8F:90:5C:62:93:B9:02:61:FE:5F:EC:BC:98:9F:7F:A7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30327/YiIdrY-QXGKTuQJh_l_svJiff6c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/YiIdrY-QXGKTuQJh_l_svJiff6c.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30327/elGOiKeJ1buenre6IVy56sx4fVI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:a640:200::/39

    Signature Algorithm: sha256WithRSAEncryption
         c8:09:15:bf:c5:08:64:cf:b1:ab:62:4b:69:d3:9e:40:f5:0f:
         c8:fe:d6:ae:eb:e8:b9:94:dc:b9:7b:ef:87:e1:08:23:83:5d:
         8c:9c:a1:9a:63:15:9c:88:71:19:70:0c:2f:fb:b5:47:c3:bb:
         eb:1d:f5:24:31:8b:9f:98:fd:e4:af:d2:a0:d8:ca:8d:ce:75:
         55:02:2e:23:07:20:ab:e6:e6:8e:f8:55:87:3d:b5:00:3a:d4:
         60:05:4e:32:c1:11:2e:10:4b:42:d4:61:77:db:8f:f2:3b:22:
         19:9e:c0:82:9f:51:ec:e2:be:65:76:31:36:ce:86:2a:f4:83:
         33:bd:23:bb:58:4b:f2:3d:8c:92:88:c3:2f:44:07:d1:d7:22:
         cf:20:b5:82:ce:02:4d:19:9c:9e:d1:4c:b3:62:41:95:f4:d0:
         c8:e9:8b:25:88:12:5e:25:48:bf:19:14:de:d8:bd:f6:63:db:
         1f:38:8e:99:77:a0:97:f8:c4:20:6e:e5:c2:70:7e:f2:96:c6:
         9b:e8:2d:60:03:1d:36:b7:b9:d6:56:7b:55:b3:df:47:95:8e:
         72:c2:7f:a7:73:f1:d5:37:74:42:d3:09:b6:21:f9:fa:f8:a1:
         8b:57:20:22:75:ff:c9:2f:0c:01:c2:1a:ee:3f:5d:4e:6c:f3:
         0c:da:20:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:23:58 2024 by rpki-client on console-fra.rpki-client.org