Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30068/n8H5N80oas9l7Awn_KshjslaEvY.roa
File:                     n8H5N80oas9l7Awn_KshjslaEvY.roa (raw, json)
Hash identifier:          1XIpvvJBkt+aHHetuDMFTmWsnS0MsIb8kUuX6s4uFqA=
Subject key identifier:   9F:C1:F9:37:CD:28:6A:CF:65:EC:0C:27:FC:AB:21:8E:C9:5A:12:F6
Certificate issuer:       /CN=CA02C5C43C00F14E85B5B07599EDD267C5A2B4D2
Certificate serial:       54
Authority key identifier: CA:02:C5:C4:3C:00:F1:4E:85:B5:B0:75:99:ED:D2:67:C5:A2:B4:D2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ygLFxDwA8U6FtbB1me3SZ8WitNI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/n8H5N80oas9l7Awn_KshjslaEvY.roa
Signing time:             Thu 29 Feb 2024 01:31:16 +0000
ROA not before:           Thu 29 Feb 2024 01:31:16 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     9370
IP address blocks:        2001:e40::/30 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/ygLFxDwA8U6FtbB1me3SZ8WitNI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/ygLFxDwA8U6FtbB1me3SZ8WitNI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ygLFxDwA8U6FtbB1me3SZ8WitNI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84 (0x54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA02C5C43C00F14E85B5B07599EDD267C5A2B4D2
        Validity
            Not Before: Feb 29 01:31:16 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=9FC1F937CD286ACF65EC0C27FCAB218EC95A12F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b8:51:41:e1:90:16:65:10:6c:f7:45:8d:f6:
                    e9:dd:76:ba:a7:56:e9:48:8f:c3:d2:69:7f:94:88:
                    b9:9c:36:8f:5b:89:6f:2e:33:3a:f1:a4:29:6c:4f:
                    76:5b:33:53:37:16:2e:d4:ba:cd:0c:ec:59:e3:32:
                    da:90:81:7d:04:d5:5d:54:37:4f:f0:9b:74:a1:77:
                    33:90:b4:7d:77:b8:16:99:11:fe:2d:e5:44:a2:89:
                    95:f7:1a:a1:e1:ed:6f:f2:57:34:f1:4d:10:2d:5f:
                    03:d1:e7:6f:d4:69:d7:f9:ef:43:d6:ca:7d:33:ba:
                    e1:59:41:aa:7c:c9:40:ec:02:47:4d:50:05:e2:14:
                    50:96:d0:75:cc:bb:43:f5:0e:8d:a0:1c:6d:0f:95:
                    e5:d8:dd:0d:af:7a:c4:b2:0f:2a:50:77:3e:6c:57:
                    9e:f9:db:85:b0:a8:87:83:0f:14:52:b2:3b:f4:a9:
                    7f:57:1e:8c:68:fe:17:77:c1:76:14:1c:5c:4c:0c:
                    03:77:62:72:84:6b:5d:5c:8a:43:3f:51:12:42:39:
                    14:4d:5a:9a:ad:8a:86:f8:fb:1a:0c:74:1d:40:9b:
                    b1:80:66:6d:67:fe:ec:bc:7a:7b:1e:cb:90:f6:8a:
                    64:e8:f5:24:84:af:d8:05:42:37:f8:f3:49:ed:8e:
                    d2:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:C1:F9:37:CD:28:6A:CF:65:EC:0C:27:FC:AB:21:8E:C9:5A:12:F6
            X509v3 Authority Key Identifier:
                keyid:CA:02:C5:C4:3C:00:F1:4E:85:B5:B0:75:99:ED:D2:67:C5:A2:B4:D2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/ygLFxDwA8U6FtbB1me3SZ8WitNI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ygLFxDwA8U6FtbB1me3SZ8WitNI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30068/n8H5N80oas9l7Awn_KshjslaEvY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:e40::/30

    Signature Algorithm: sha256WithRSAEncryption
         15:ab:76:55:68:03:79:99:fc:4a:5c:92:69:96:51:10:25:76:
         ed:85:eb:d0:d2:c3:84:12:a3:94:27:e4:d5:8e:b1:d8:fb:14:
         ee:d2:c4:41:cc:86:bb:06:35:33:4b:f5:8d:ac:88:60:55:50:
         98:14:a8:f7:f6:5d:06:ce:4a:af:13:7b:09:73:d8:eb:f9:ec:
         e5:79:2b:e2:e7:22:da:fa:90:9a:04:d1:a7:37:9b:8e:0f:ef:
         0f:a9:9b:aa:cf:f2:a7:43:9d:38:7f:aa:d3:e7:53:d5:b9:79:
         70:18:05:5d:a4:5c:07:64:d5:04:c8:57:36:62:ce:9a:4d:ce:
         7f:9a:4b:57:41:58:9c:61:9a:a1:48:a9:c5:d5:e4:19:74:ee:
         5b:be:c3:65:3c:c8:fa:03:0b:63:62:55:41:d7:39:83:26:5d:
         fc:11:76:42:02:3e:26:9a:18:99:97:ab:ea:8c:fe:ff:a7:90:
         bf:67:dc:91:a7:4a:9d:91:31:5a:ff:b6:f8:2c:66:df:cc:32:
         49:98:e4:9e:e5:43:f4:c9:3c:19:a2:64:15:d8:53:39:f2:f3:
         30:d5:6c:08:6a:e7:33:12:2a:fc:35:73:31:5b:e5:33:25:b4:
         0a:d5:35:7f:f2:01:1d:70:6b:02:f1:f0:9c:cb:aa:08:51:41:
         69:94:bc:51
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIBVDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDQTAy
QzVDNDNDMDBGMTRFODVCNUIwNzU5OUVERDI2N0M1QTJCNEQyMB4XDTI0MDIyOTAx
MzExNloXDTI1MDIxNDAxMzAwM1owMzExMC8GA1UEAxMoOUZDMUY5MzdDRDI4NkFD
RjY1RUMwQzI3RkNBQjIxOEVDOTVBMTJGNjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKi4UUHhkBZlEGz3RY326d12uqdW6UiPw9Jpf5SIuZw2j1uJby4z
OvGkKWxPdlszUzcWLtS6zQzsWeMy2pCBfQTVXVQ3T/CbdKF3M5C0fXe4FpkR/i3l
RKKJlfcaoeHtb/JXNPFNEC1fA9Hnb9Rp1/nvQ9bKfTO64VlBqnzJQOwCR01QBeIU
UJbQdcy7Q/UOjaAcbQ+V5djdDa96xLIPKlB3PmxXnvnbhbCoh4MPFFKyO/Spf1ce
jGj+F3fBdhQcXEwMA3dicoRrXVyKQz9REkI5FE1amq2Khvj7Ggx0HUCbsYBmbWf+
7Lx6ex7LkPaKZOj1JISv2AVCN/jzSe2O0hsCAwEAAaOCAikwggIlMB0GA1UdDgQW
BBSfwfk3zShqz2XsDCf8qyGOyVoS9jAfBgNVHSMEGDAWgBTKAsXEPADxToW1sHWZ
7dJnxaK00jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAwNjgveWdMRnhEd0E4VTZGdGJCMW1lM1NaOFdpdE5JLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAveWdMRnhEd0E4VTZGdGJCMW1lM1Na
OFdpdE5JLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMDY4L244SDVOODBvYXM5bDdBd25fS3NoanNsYUV2WS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E
AgACMAcDBQIgAQ5AMA0GCSqGSIb3DQEBCwUAA4IBAQAVq3ZVaAN5mfxKXJJpllEQ
JXbthevQ0sOEEqOUJ+TVjrHY+xTu0sRBzIa7BjUzS/WNrIhgVVCYFKj39l0Gzkqv
E3sJc9jr+ezleSvi5yLa+pCaBNGnN5uOD+8PqZuqz/KnQ504f6rT51PVuXlwGAVd
pFwHZNUEyFc2Ys6aTc5/mktXQVicYZqhSKnF1eQZdO5bvsNlPMj6AwtjYlVB1zmD
Jl38EXZCAj4mmhiZl6vqjP7/p5C/Z9yRp0qdkTFa/7b4LGbfzDJJmOSe5UP0yTwZ
omQV2FM58vMw1WwIauczEir8NXMxW+UzJbQK1TV/8gEdcGsC8fCcy6oIUUFplLxR
-----END CERTIFICATE-----
Generated at Thu May 30 03:38:44 2024 by rpki-client on console-ams.rpki-client.org