Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30435/jTnZUgkZvOxgVIHwvdp1tgBO5r0.roa
File:                     jTnZUgkZvOxgVIHwvdp1tgBO5r0.roa (raw, json)
Hash identifier:          JVozzUpNbTNCpop3iBHH9X2FzqELNP7368N9bAeIRrk=
Subject key identifier:   8D:39:D9:52:09:19:BC:EC:60:54:81:F0:BD:DA:75:B6:00:4E:E6:BD
Certificate issuer:       /CN=C75C79F94D0EE54F1C08B47C6BA00F75ED052833
Certificate serial:       09
Authority key identifier: C7:5C:79:F9:4D:0E:E5:4F:1C:08:B4:7C:6B:A0:0F:75:ED:05:28:33
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x1x5-U0O5U8cCLR8a6APde0FKDM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30435/jTnZUgkZvOxgVIHwvdp1tgBO5r0.roa
Signing time:             Wed 10 Jul 2024 15:34:17 +0000
ROA not before:           Wed 10 Jul 2024 15:34:17 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     55911
IP address blocks:        2401:98a0:220::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30435/x1x5-U0O5U8cCLR8a6APde0FKDM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30435/x1x5-U0O5U8cCLR8a6APde0FKDM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x1x5-U0O5U8cCLR8a6APde0FKDM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C75C79F94D0EE54F1C08B47C6BA00F75ED052833
        Validity
            Not Before: Jul 10 15:34:17 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=8D39D9520919BCEC605481F0BDDA75B6004EE6BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:8a:78:a3:6d:85:8f:6a:23:4d:c4:ab:50:7a:
                    ed:8b:26:58:43:d7:be:a6:af:3c:29:a0:31:07:b0:
                    25:29:79:38:c7:b1:24:42:c4:f0:56:75:01:bf:b8:
                    b4:1a:3c:df:65:cb:d1:f0:26:30:1a:e4:e5:a8:d4:
                    a4:e1:2c:5b:d1:1b:06:b7:2d:38:86:7f:f7:68:94:
                    80:96:98:1c:e4:c8:61:96:fe:ca:e1:04:81:aa:60:
                    d9:54:0f:b6:ae:d1:9f:93:a8:39:05:dc:07:74:50:
                    4e:f6:34:36:d4:fc:0b:dc:a7:d1:5e:89:3f:e7:f0:
                    de:4e:ae:15:01:32:89:9e:7a:68:11:e9:d8:b4:0d:
                    03:65:0e:7c:02:f0:e0:6d:28:a9:d2:c3:f4:21:8c:
                    66:25:c0:a1:71:39:c6:37:03:79:54:8f:01:af:a2:
                    99:c2:e0:d6:db:aa:65:d7:07:a3:42:3c:b8:f0:08:
                    7b:03:9b:a7:b7:e9:08:db:e3:0f:0b:be:4e:c6:f8:
                    33:c6:51:bf:41:e8:20:64:78:f5:d6:81:37:32:53:
                    5b:9e:98:94:3e:bf:ac:a3:29:c9:5f:1a:18:6a:07:
                    79:01:85:90:e2:d6:ba:c5:38:af:83:2b:08:ed:09:
                    88:6c:3f:38:8f:dc:e0:8e:48:1f:78:af:ea:e5:c8:
                    8b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:39:D9:52:09:19:BC:EC:60:54:81:F0:BD:DA:75:B6:00:4E:E6:BD
            X509v3 Authority Key Identifier:
                keyid:C7:5C:79:F9:4D:0E:E5:4F:1C:08:B4:7C:6B:A0:0F:75:ED:05:28:33

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30435/x1x5-U0O5U8cCLR8a6APde0FKDM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x1x5-U0O5U8cCLR8a6APde0FKDM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30435/jTnZUgkZvOxgVIHwvdp1tgBO5r0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:98a0:220::/44

    Signature Algorithm: sha256WithRSAEncryption
         51:02:ef:4a:e4:be:e8:b3:cc:62:23:60:f4:29:cb:6c:45:61:
         c5:63:98:a9:86:0a:d9:c9:8a:d6:78:8b:b8:37:6a:f2:95:85:
         9a:0a:8d:a8:d2:0e:01:a0:2e:58:22:c1:08:02:5f:8b:81:1a:
         a4:37:8d:32:d2:ef:b1:47:d5:03:25:d9:10:18:fc:ab:d3:e3:
         54:dc:dc:84:db:c9:98:c7:66:01:1c:37:4e:23:7d:22:15:0d:
         64:18:b9:0d:cd:6d:fa:ef:37:4c:d7:03:4e:e0:e8:e6:22:66:
         72:28:29:7e:c2:d8:b5:b2:44:9f:68:28:56:17:15:78:8c:4b:
         e6:e2:b0:39:79:89:f6:74:a3:ff:0c:85:45:f5:6a:11:be:a0:
         03:f0:e8:53:51:77:8b:6f:f5:b2:f8:a1:a3:22:53:d8:6a:e5:
         f5:f3:56:9c:b0:f7:6c:6d:ef:e8:62:0b:10:a6:53:94:07:c0:
         da:f2:fc:b5:68:25:db:b5:23:fa:20:24:72:ce:d2:40:cc:b7:
         23:5b:ac:cf:3e:e9:41:37:52:64:35:d0:de:3a:af:80:78:c5:
         c6:18:56:78:07:16:1c:8f:68:d2:8c:e2:7e:cd:86:0d:04:0d:
         45:a0:96:5f:b5:f0:0d:51:ef:4a:75:94:8d:ff:e0:b8:0f:29:
         8d:db:cb:ea
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgIBCTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDNzVD
NzlGOTREMEVFNTRGMUMwOEI0N0M2QkEwMEY3NUVEMDUyODMzMB4XDTI0MDcxMDE1
MzQxN1oXDTI1MDYyNDEwNDY0NVowMzExMC8GA1UEAxMoOEQzOUQ5NTIwOTE5QkNF
QzYwNTQ4MUYwQkREQTc1QjYwMDRFRTZCRDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALKKeKNthY9qI03Eq1B67YsmWEPXvqavPCmgMQewJSl5OMexJELE
8FZ1Ab+4tBo832XL0fAmMBrk5ajUpOEsW9EbBrctOIZ/92iUgJaYHOTIYZb+yuEE
gapg2VQPtq7Rn5OoOQXcB3RQTvY0NtT8C9yn0V6JP+fw3k6uFQEyiZ56aBHp2LQN
A2UOfALw4G0oqdLD9CGMZiXAoXE5xjcDeVSPAa+imcLg1tuqZdcHo0I8uPAIewOb
p7fpCNvjDwu+Tsb4M8ZRv0HoIGR49daBNzJTW56YlD6/rKMpyV8aGGoHeQGFkOLW
usU4r4MrCO0JiGw/OI/c4I5IH3iv6uXIi9kCAwEAAaOCAiswggInMB0GA1UdDgQW
BBSNOdlSCRm87GBUgfC92nW2AE7mvTAfBgNVHSMEGDAWgBTHXHn5TQ7lTxwItHxr
oA917QUoMzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzA0MzUveDF4NS1VME81VThjQ0xSOGE2QVBkZTBGS0RNLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAveDF4NS1VME81VThjQ0xSOGE2QVBk
ZTBGS0RNLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwNDM1L2pUblpVZ2tadk94Z1ZJSHd2ZHAxdGdCTzVyMC5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwQkAZigAiAwDQYJKoZIhvcNAQELBQADggEBAFEC70rkvuizzGIjYPQp
y2xFYcVjmKmGCtnJitZ4i7g3avKVhZoKjajSDgGgLlgiwQgCX4uBGqQ3jTLS77FH
1QMl2RAY/KvT41Tc3ITbyZjHZgEcN04jfSIVDWQYuQ3NbfrvN0zXA07g6OYiZnIo
KX7C2LWyRJ9oKFYXFXiMS+bisDl5ifZ0o/8MhUX1ahG+oAPw6FNRd4tv9bL4oaMi
U9hq5fXzVpyw92xt7+hiCxCmU5QHwNry/LVoJdu1I/ogJHLO0kDMtyNbrM8+6UE3
UmQ10N46r4B4xcYYVngHFhyPaNKM4n7Nhg0EDUWgll+18A1R70p1lI3/4LgPKY3b
y+o=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:45:39 2025 by rpki-client