Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30423/5Tq56RS8ua3W7QsQBf8WMl_Dx_E.roa
File:                     5Tq56RS8ua3W7QsQBf8WMl_Dx_E.roa (raw, json)
Hash identifier:          VYSbGqou242afGaVRiH87nk5QvGX05Fzg65jnFcl2o4=
Subject key identifier:   E5:3A:B9:E9:14:BC:B9:AD:D6:ED:0B:10:05:FF:16:32:5F:C3:C7:F1
Certificate issuer:       /CN=B910BD9437967C7AFDD374E1EA6EBED7FA6F96B5
Certificate serial:       22
Authority key identifier: B9:10:BD:94:37:96:7C:7A:FD:D3:74:E1:EA:6E:BE:D7:FA:6F:96:B5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uRC9lDeWfHr903Th6m6-1_pvlrU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/5Tq56RS8ua3W7QsQBf8WMl_Dx_E.roa
Signing time:             Wed 31 Jul 2024 01:32:41 +0000
ROA not before:           Wed 31 Jul 2024 01:32:41 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     63800
IP address blocks:        2401:d20::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/uRC9lDeWfHr903Th6m6-1_pvlrU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/uRC9lDeWfHr903Th6m6-1_pvlrU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uRC9lDeWfHr903Th6m6-1_pvlrU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Oct 2024 13:37:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34 (0x22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B910BD9437967C7AFDD374E1EA6EBED7FA6F96B5
        Validity
            Not Before: Jul 31 01:32:41 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=E53AB9E914BCB9ADD6ED0B1005FF16325FC3C7F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:32:99:7f:30:a2:58:01:b3:29:cf:9c:29:fb:
                    29:eb:09:ee:1a:ba:b3:1f:7c:e1:70:d2:a6:3d:bc:
                    79:94:ba:e8:38:cd:4f:21:91:35:98:cd:20:36:3c:
                    8f:67:1c:6c:b1:49:8d:cd:f4:8f:d8:d9:48:15:35:
                    0d:14:67:01:b0:08:3c:1c:e1:c2:a2:1a:5a:01:ca:
                    b5:96:3b:0e:a6:3c:cd:6a:fc:75:3b:56:aa:d1:18:
                    19:73:cf:63:cb:76:5d:8e:2c:23:a1:fa:14:43:d6:
                    d9:c0:37:65:e6:c5:34:48:09:37:6c:3a:82:0f:b4:
                    ea:74:35:74:bf:ba:73:30:09:ab:36:1f:96:ec:42:
                    56:fd:95:9a:05:25:70:50:30:dc:23:53:43:d5:19:
                    b8:38:4c:09:52:d2:78:6e:bc:ff:c2:b8:c2:26:fb:
                    86:4e:3e:d0:89:10:4f:73:f9:3e:1f:e4:73:1f:6f:
                    35:cf:c6:78:f0:b0:43:27:8c:75:88:bc:8f:ee:e4:
                    8f:c4:ad:54:2e:19:22:64:73:07:ac:15:9d:da:5d:
                    f7:9d:da:0a:0e:3e:b7:7d:05:75:9e:13:97:b9:2e:
                    86:31:d2:84:c9:78:04:db:79:87:5f:54:1e:ce:f3:
                    46:95:23:e1:1b:36:b7:6f:34:70:a6:0e:66:96:6d:
                    d7:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:3A:B9:E9:14:BC:B9:AD:D6:ED:0B:10:05:FF:16:32:5F:C3:C7:F1
            X509v3 Authority Key Identifier:
                keyid:B9:10:BD:94:37:96:7C:7A:FD:D3:74:E1:EA:6E:BE:D7:FA:6F:96:B5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/uRC9lDeWfHr903Th6m6-1_pvlrU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uRC9lDeWfHr903Th6m6-1_pvlrU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30423/5Tq56RS8ua3W7QsQBf8WMl_Dx_E.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:d20::/36

    Signature Algorithm: sha256WithRSAEncryption
         83:1e:6a:0e:16:ee:49:ee:db:81:6d:e5:fe:ed:fe:b4:1d:f8:
         c4:57:53:38:26:1c:2f:79:ca:49:ee:b1:ca:7a:f5:5b:8d:30:
         3b:c1:98:f1:c6:23:9f:c3:e7:3c:eb:6c:0e:bf:1a:5c:fb:6c:
         ec:3e:09:2d:81:b8:c3:72:c9:11:37:3b:d7:85:46:48:44:f3:
         a8:a2:ac:4c:9e:1d:54:1f:e4:df:b7:7a:9a:48:c5:5a:11:fe:
         c4:b7:9d:d7:f2:e2:ae:4b:e8:70:dc:89:4a:8e:c9:74:cb:54:
         98:9d:cb:9b:96:9c:99:e6:4a:a0:be:32:97:bb:0f:e9:2b:cf:
         6b:d1:7c:ed:2f:23:51:76:78:dd:92:0b:a2:38:74:14:62:f5:
         0a:3a:92:6d:a9:ea:bb:f0:83:c6:a6:38:fe:0a:1a:f9:59:a7:
         ca:5e:c4:25:79:0f:11:b3:fd:4a:55:ec:19:85:e7:a6:a5:18:
         40:f9:9e:21:ea:1a:0a:88:bf:9f:15:c4:fd:76:a4:25:a2:b5:
         04:58:40:2d:0f:de:cf:ee:e9:bc:30:61:07:89:af:94:25:38:
         5c:e0:e5:df:67:d9:93:49:96:be:c1:ca:4d:81:16:57:18:4b:
         18:90:b1:5b:dd:7c:48:ee:17:08:bf:82:5d:48:1c:16:31:ca:
         55:b3:96:89
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIBIjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCOTEw
QkQ5NDM3OTY3QzdBRkREMzc0RTFFQTZFQkVEN0ZBNkY5NkI1MB4XDTI0MDczMTAx
MzI0MVoXDTI1MDcxNTAxMzAwMlowMzExMC8GA1UEAxMoRTUzQUI5RTkxNEJDQjlB
REQ2RUQwQjEwMDVGRjE2MzI1RkMzQzdGMTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANAymX8wolgBsynPnCn7KesJ7hq6sx984XDSpj28eZS66DjNTyGR
NZjNIDY8j2ccbLFJjc30j9jZSBU1DRRnAbAIPBzhwqIaWgHKtZY7DqY8zWr8dTtW
qtEYGXPPY8t2XY4sI6H6FEPW2cA3ZebFNEgJN2w6gg+06nQ1dL+6czAJqzYfluxC
Vv2VmgUlcFAw3CNTQ9UZuDhMCVLSeG68/8K4wib7hk4+0IkQT3P5Ph/kcx9vNc/G
ePCwQyeMdYi8j+7kj8StVC4ZImRzB6wVndpd953aCg4+t30FdZ4Tl7kuhjHShMl4
BNt5h19UHs7zRpUj4Rs2t280cKYOZpZt19ECAwEAAaOCAiowggImMB0GA1UdDgQW
BBTlOrnpFLy5rdbtCxAF/xYyX8PH8TAfBgNVHSMEGDAWgBS5EL2UN5Z8ev3TdOHq
br7X+m+WtTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzA0MjMvdVJDOWxEZVdmSHI5MDNUaDZtNi0xX3B2bHJVLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdVJDOWxEZVdmSHI5MDNUaDZtNi0x
X3B2bHJVLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwNDIzLzVUcTU2UlM4dWEzVzdRc1FCZjhXTWxfRHhfRS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgQkAQ0gADANBgkqhkiG9w0BAQsFAAOCAQEAgx5qDhbuSe7bgW3l/u3+
tB34xFdTOCYcL3nKSe6xynr1W40wO8GY8cYjn8PnPOtsDr8aXPts7D4JLYG4w3LJ
ETc714VGSETzqKKsTJ4dVB/k37d6mkjFWhH+xLed1/LirkvocNyJSo7JdMtUmJ3L
m5acmeZKoL4yl7sP6SvPa9F87S8jUXZ43ZILojh0FGL1CjqSbanqu/CDxqY4/goa
+Vmnyl7EJXkPEbP9SlXsGYXnpqUYQPmeIeoaCoi/nxXE/XakJaK1BFhALQ/ez+7p
vDBhB4mvlCU4XODl32fZk0mWvsHKTYEWVxhLGJCxW918SO4XCL+CXUgcFjHKVbOW
iQ==
-----END CERTIFICATE-----
Generated at Fri Sep 27 06:21:56 2024 by rpki-client on console-ams.rpki-client.org