Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30068/YzbdpqFiPVIqMenlhYqpCSgpE6E.roa
File:                     YzbdpqFiPVIqMenlhYqpCSgpE6E.roa (raw, json)
Hash identifier:          GVlHPjlgVLhyESMnR/r9brZGrfBlszw0LpzjTnAyyOc=
Subject key identifier:   63:36:DD:A6:A1:62:3D:52:2A:31:E9:E5:85:8A:A9:09:28:29:13:A1
Certificate issuer:       /CN=CA02C5C43C00F14E85B5B07599EDD267C5A2B4D2
Certificate serial:       53
Authority key identifier: CA:02:C5:C4:3C:00:F1:4E:85:B5:B0:75:99:ED:D2:67:C5:A2:B4:D2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ygLFxDwA8U6FtbB1me3SZ8WitNI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/YzbdpqFiPVIqMenlhYqpCSgpE6E.roa
Signing time:             Thu 29 Feb 2024 01:31:16 +0000
ROA not before:           Thu 29 Feb 2024 01:31:16 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     9370
IP address blocks:        2001:e47::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/ygLFxDwA8U6FtbB1me3SZ8WitNI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/ygLFxDwA8U6FtbB1me3SZ8WitNI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ygLFxDwA8U6FtbB1me3SZ8WitNI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jul 2024 06:55:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83 (0x53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA02C5C43C00F14E85B5B07599EDD267C5A2B4D2
        Validity
            Not Before: Feb 29 01:31:16 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=6336DDA6A1623D522A31E9E5858AA909282913A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a3:5a:9d:a0:c7:36:9e:d6:36:7a:f9:04:b5:
                    8f:6d:94:47:02:7b:cb:e5:9a:19:2f:c5:b3:a6:fd:
                    f7:0a:57:82:95:04:5e:b8:16:d3:fc:b4:78:44:8c:
                    82:0a:3e:ee:ff:ea:bf:92:3e:cb:8a:7a:31:e8:09:
                    2d:af:87:35:94:fa:6a:33:d8:df:65:03:74:0d:1d:
                    64:89:34:43:ad:d9:66:25:dc:cd:ad:9c:4e:69:3d:
                    ca:c6:e5:1a:2a:69:e1:ba:b5:f1:b5:05:23:3a:3b:
                    58:38:97:48:79:37:b7:ca:7d:69:62:e2:ef:90:fb:
                    b9:43:55:61:48:cb:5d:6d:4d:50:99:af:28:a9:24:
                    b9:f9:c6:f0:ec:1e:f9:e9:10:62:21:e8:1a:26:a4:
                    ed:78:88:5f:ed:35:4d:6e:e3:d3:b7:be:d1:c9:3f:
                    2d:0c:4a:b4:40:df:c7:0a:d5:ae:28:3d:58:81:e0:
                    48:86:24:8e:2e:11:d7:59:9d:d1:3d:20:eb:76:4c:
                    d0:0f:96:00:dc:b9:0e:d3:3a:cd:89:0c:9e:1f:87:
                    56:bc:6a:bc:9f:6d:f8:bc:95:57:ed:5e:dd:cc:48:
                    32:04:4a:78:da:50:df:90:99:c8:1b:d8:19:b7:bd:
                    a5:6e:5b:67:1f:26:df:44:c3:d3:f9:e0:bc:58:5d:
                    b9:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:36:DD:A6:A1:62:3D:52:2A:31:E9:E5:85:8A:A9:09:28:29:13:A1
            X509v3 Authority Key Identifier:
                keyid:CA:02:C5:C4:3C:00:F1:4E:85:B5:B0:75:99:ED:D2:67:C5:A2:B4:D2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/ygLFxDwA8U6FtbB1me3SZ8WitNI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ygLFxDwA8U6FtbB1me3SZ8WitNI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/YzbdpqFiPVIqMenlhYqpCSgpE6E.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:e47::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:fa:4d:71:24:3b:34:c5:ff:05:4a:a9:ff:2a:25:95:cc:e5:
         69:48:d6:14:66:14:5f:b9:a9:43:af:67:e6:59:39:9e:ae:b7:
         85:64:62:97:99:3f:a5:9f:94:bb:58:2e:54:57:40:e8:95:a8:
         1d:bc:fe:a4:8a:55:0f:86:c7:aa:df:26:76:a7:8a:33:27:86:
         85:0b:9b:e2:99:87:1a:31:f2:d1:c8:bf:bc:5f:fe:12:d2:79:
         ed:74:a1:49:75:98:c0:c3:9e:a2:2d:f6:5a:87:6d:63:d3:8f:
         bb:a7:cd:9c:d5:8e:1b:12:11:ee:f6:ce:e1:8f:d4:b7:e2:55:
         77:5a:98:38:83:1f:82:56:5e:b3:2c:a1:46:ba:96:1f:86:23:
         98:43:aa:e8:d4:b9:cc:3a:e4:a9:1f:50:4d:a3:5a:bf:42:62:
         90:c0:47:14:0a:ee:4a:02:77:5e:44:f6:7f:3f:1e:a6:de:aa:
         2d:0f:a4:58:f6:6e:0d:91:20:2b:84:3b:30:f2:3f:37:c3:2c:
         d7:91:5a:b4:02:bd:ae:54:ff:35:4f:49:e7:e4:74:75:03:b4:
         a0:b3:c5:9a:83:a7:8c:78:1c:34:52:79:50:5c:03:45:68:4a:
         e0:fe:22:a9:02:a5:48:a9:82:d6:22:8f:9a:12:8b:79:57:24:
         c9:81:c3:28
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIBUzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDQTAy
QzVDNDNDMDBGMTRFODVCNUIwNzU5OUVERDI2N0M1QTJCNEQyMB4XDTI0MDIyOTAx
MzExNloXDTI1MDIxNDAxMzAwM1owMzExMC8GA1UEAxMoNjMzNkREQTZBMTYyM0Q1
MjJBMzFFOUU1ODU4QUE5MDkyODI5MTNBMTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANijWp2gxzae1jZ6+QS1j22URwJ7y+WaGS/Fs6b99wpXgpUEXrgW
0/y0eESMggo+7v/qv5I+y4p6MegJLa+HNZT6ajPY32UDdA0dZIk0Q63ZZiXcza2c
Tmk9ysblGipp4bq18bUFIzo7WDiXSHk3t8p9aWLi75D7uUNVYUjLXW1NUJmvKKkk
ufnG8Owe+ekQYiHoGiak7XiIX+01TW7j07e+0ck/LQxKtEDfxwrVrig9WIHgSIYk
ji4R11md0T0g63ZM0A+WANy5DtM6zYkMnh+HVrxqvJ9t+LyVV+1e3cxIMgRKeNpQ
35CZyBvYGbe9pW5bZx8m30TD0/ngvFhduTkCAwEAAaOCAikwggIlMB0GA1UdDgQW
BBRjNt2moWI9Uiox6eWFiqkJKCkToTAfBgNVHSMEGDAWgBTKAsXEPADxToW1sHWZ
7dJnxaK00jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAwNjgveWdMRnhEd0E4VTZGdGJCMW1lM1NaOFdpdE5JLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAveWdMRnhEd0E4VTZGdGJCMW1lM1Na
OFdpdE5JLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMDY4L1l6YmRwcUZpUFZJcU1lbmxoWXFwQ1NncEU2RS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E
AgACMAcDBQAgAQ5HMA0GCSqGSIb3DQEBCwUAA4IBAQAc+k1xJDs0xf8FSqn/KiWV
zOVpSNYUZhRfualDr2fmWTmerreFZGKXmT+ln5S7WC5UV0DolagdvP6kilUPhseq
3yZ2p4ozJ4aFC5vimYcaMfLRyL+8X/4S0nntdKFJdZjAw56iLfZah21j04+7p82c
1Y4bEhHu9s7hj9S34lV3Wpg4gx+CVl6zLKFGupYfhiOYQ6ro1LnMOuSpH1BNo1q/
QmKQwEcUCu5KAndeRPZ/Px6m3qotD6RY9m4NkSArhDsw8j83wyzXkVq0Ar2uVP81
T0nn5HR1A7Sgs8Wag6eMeBw0UnlQXANFaErg/iKpAqVIqYLWIo+aEot5VyTJgcMo
-----END CERTIFICATE-----
Generated at Wed Jun 26 08:12:46 2024 by rpki-client on console-ams.rpki-client.org