Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30013/iR5GXk8S9RMTPI1mdz_adO0u9Zc.roa
File:                     iR5GXk8S9RMTPI1mdz_adO0u9Zc.roa (raw, json)
Hash identifier:          9bMOA41Mr4ZSk4BODuGc1b+m5Ae9ZOSYkzQHnSx/zwo=
Subject key identifier:   89:1E:46:5E:4F:12:F5:13:13:3C:8D:66:77:3F:DA:74:ED:2E:F5:97
Certificate issuer:       /CN=E251D339AB1EB6305AEB1493B4DA380011FA3329
Certificate serial:       03
Authority key identifier: E2:51:D3:39:AB:1E:B6:30:5A:EB:14:93:B4:DA:38:00:11:FA:33:29
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4lHTOasetjBa6xSTtNo4ABH6Myk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30013/iR5GXk8S9RMTPI1mdz_adO0u9Zc.roa
Signing time:             Wed 28 Feb 2024 05:11:52 +0000
ROA not before:           Wed 28 Feb 2024 05:11:52 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     7679
IP address blocks:        2001:348::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30013/4lHTOasetjBa6xSTtNo4ABH6Myk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30013/4lHTOasetjBa6xSTtNo4ABH6Myk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4lHTOasetjBa6xSTtNo4ABH6Myk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E251D339AB1EB6305AEB1493B4DA380011FA3329
        Validity
            Not Before: Feb 28 05:11:52 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=891E465E4F12F513133C8D66773FDA74ED2EF597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3e:36:ce:4f:c2:dd:0f:8c:29:97:fa:6a:38:
                    3a:dc:7b:9b:3d:01:a9:fd:7a:f0:8d:e2:f7:20:75:
                    42:14:3b:57:8e:e9:6b:7a:92:14:93:6c:37:23:e0:
                    dd:03:05:ae:37:21:1e:44:26:88:9e:42:21:27:98:
                    c3:70:3f:00:fb:59:b1:17:b9:7e:37:e7:aa:58:1f:
                    07:b5:47:9a:fc:7e:3b:c2:e1:dc:0f:32:9c:63:2a:
                    09:92:3e:53:36:00:0c:59:5d:ca:61:af:87:24:ac:
                    62:48:5d:5e:2b:57:b3:a2:bf:fb:7f:7b:bc:56:d1:
                    26:ef:bc:85:08:f4:a1:63:2a:5b:d6:ce:ca:5e:1b:
                    f1:05:08:75:fa:e3:70:3c:30:4b:c7:07:fe:5e:2c:
                    7c:16:2a:c5:51:ec:f2:09:af:0f:bd:48:fe:f9:bb:
                    a5:0c:4f:e4:3a:48:6d:0e:62:d7:f9:04:df:84:a2:
                    71:2b:8f:9d:94:85:0a:e0:c8:b2:d4:68:f0:49:90:
                    aa:6d:91:bb:9c:95:75:c1:94:78:f6:fc:14:82:09:
                    21:b8:e1:4a:94:3f:48:69:92:86:b0:28:3a:f6:8b:
                    04:0c:43:5c:dd:67:8e:29:70:c7:f1:85:78:92:dc:
                    2a:62:af:9b:a8:36:f4:90:16:cf:f3:c4:a3:78:f1:
                    f7:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:1E:46:5E:4F:12:F5:13:13:3C:8D:66:77:3F:DA:74:ED:2E:F5:97
            X509v3 Authority Key Identifier:
                keyid:E2:51:D3:39:AB:1E:B6:30:5A:EB:14:93:B4:DA:38:00:11:FA:33:29

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30013/4lHTOasetjBa6xSTtNo4ABH6Myk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4lHTOasetjBa6xSTtNo4ABH6Myk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30013/iR5GXk8S9RMTPI1mdz_adO0u9Zc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:348::/32

    Signature Algorithm: sha256WithRSAEncryption
         a8:d8:a8:57:df:f1:0e:88:eb:dc:0a:eb:06:9b:2d:ae:e5:1e:
         bd:90:57:57:2a:10:e8:3c:52:48:3e:fe:b0:ae:45:43:e9:da:
         98:59:bc:e9:c9:c5:62:29:f2:18:d1:cb:ec:c4:04:df:02:8e:
         c8:92:d5:11:d3:d2:a9:fb:ff:83:b3:1f:81:57:2d:ea:be:3c:
         69:bc:48:e7:5e:05:9e:ee:ab:4c:5b:61:3c:6e:47:96:79:9f:
         c3:fa:ca:78:34:31:66:74:eb:6c:9d:73:bd:96:31:11:9b:b7:
         05:f4:8b:2b:61:80:70:37:cd:81:ab:e5:21:24:4f:81:87:5e:
         15:09:82:46:1b:b7:66:83:30:39:9b:82:13:dd:04:2a:9a:d0:
         4b:74:d6:2d:35:8d:e0:3b:23:ba:14:41:1f:ff:29:c4:62:e3:
         04:f0:2b:0f:8f:ff:5e:07:54:01:90:a8:d9:79:c5:3e:c2:d4:
         56:ea:d8:c0:cc:5b:e6:09:a5:20:cb:6e:bf:df:94:9e:27:84:
         48:c9:07:cd:90:f5:84:2c:05:05:1b:19:06:72:b2:84:bf:20:
         4b:4c:1a:78:bd:41:a6:5c:e5:5c:b5:cd:44:f8:11:f9:d4:12:
         d0:27:80:2d:8e:dd:63:e7:05:b1:4c:24:da:94:31:77:fb:ea:
         50:62:b0:3f
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIBAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFMjUx
RDMzOUFCMUVCNjMwNUFFQjE0OTNCNERBMzgwMDExRkEzMzI5MB4XDTI0MDIyODA1
MTE1MloXDTI1MDIxNDAxMzAwM1owMzExMC8GA1UEAxMoODkxRTQ2NUU0RjEyRjUx
MzEzM0M4RDY2NzczRkRBNzRFRDJFRjU5NzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALo+Ns5Pwt0PjCmX+mo4Otx7mz0Bqf168I3i9yB1QhQ7V47pa3qS
FJNsNyPg3QMFrjchHkQmiJ5CISeYw3A/APtZsRe5fjfnqlgfB7VHmvx+O8Lh3A8y
nGMqCZI+UzYADFldymGvhySsYkhdXitXs6K/+397vFbRJu+8hQj0oWMqW9bOyl4b
8QUIdfrjcDwwS8cH/l4sfBYqxVHs8gmvD71I/vm7pQxP5DpIbQ5i1/kE34SicSuP
nZSFCuDIstRo8EmQqm2Ru5yVdcGUePb8FIIJIbjhSpQ/SGmShrAoOvaLBAxDXN1n
jilwx/GFeJLcKmKvm6g29JAWz/PEo3jx93UCAwEAAaOCAikwggIlMB0GA1UdDgQW
BBSJHkZeTxL1ExM8jWZ3P9p07S71lzAfBgNVHSMEGDAWgBTiUdM5qx62MFrrFJO0
2jgAEfozKTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAwMTMvNGxIVE9hc2V0akJhNnhTVHRObzRBQkg2TXlrLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvNGxIVE9hc2V0akJhNnhTVHRObzRB
Qkg2TXlrLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMDEzL2lSNUdYazhTOVJNVFBJMW1kel9hZE8wdTlaYy5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E
AgACMAcDBQAgAQNIMA0GCSqGSIb3DQEBCwUAA4IBAQCo2KhX3/EOiOvcCusGmy2u
5R69kFdXKhDoPFJIPv6wrkVD6dqYWbzpycViKfIY0cvsxATfAo7IktUR09Kp+/+D
sx+BVy3qvjxpvEjnXgWe7qtMW2E8bkeWeZ/D+sp4NDFmdOtsnXO9ljERm7cF9Isr
YYBwN82Bq+UhJE+Bh14VCYJGG7dmgzA5m4IT3QQqmtBLdNYtNY3gOyO6FEEf/ynE
YuME8CsPj/9eB1QBkKjZecU+wtRW6tjAzFvmCaUgy26/35SeJ4RIyQfNkPWELAUF
GxkGcrKEvyBLTBp4vUGmXOVctc1E+BH51BLQJ4Atjt1j5wWxTCTalDF3++pQYrA/
-----END CERTIFICATE-----
Generated at Thu May 30 03:08:53 2024 by rpki-client on console-fra.rpki-client.org