Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30072/J5pMhXx7uI2XrQ-CG80MNKJXri4.roa
File:                     J5pMhXx7uI2XrQ-CG80MNKJXri4.roa (raw, json)
Hash identifier:          04eivkAiIm4frIjuvgpl1EXLWNVxr9sgIsxtJPghM7g=
Subject key identifier:   27:9A:4C:85:7C:7B:B8:8D:97:AD:0F:82:1B:CD:0C:34:A2:57:AE:2E
Certificate issuer:       /CN=58AE52C1F36BFAF852F410F1CAD0D3683D541261
Certificate serial:       20
Authority key identifier: 58:AE:52:C1:F3:6B:FA:F8:52:F4:10:F1:CA:D0:D3:68:3D:54:12:61
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WK5SwfNr-vhS9BDxytDTaD1UEmE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/J5pMhXx7uI2XrQ-CG80MNKJXri4.roa
Signing time:             Tue 01 Aug 2023 01:29:31 +0000
ROA not before:           Tue 01 Aug 2023 01:29:31 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9824
IP address blocks:        2001:c30:40::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/WK5SwfNr-vhS9BDxytDTaD1UEmE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/WK5SwfNr-vhS9BDxytDTaD1UEmE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WK5SwfNr-vhS9BDxytDTaD1UEmE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32 (0x20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58AE52C1F36BFAF852F410F1CAD0D3683D541261
        Validity
            Not Before: Aug  1 01:29:31 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=279A4C857C7BB88D97AD0F821BCD0C34A257AE2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:77:dd:08:5d:d3:67:a8:e8:d8:37:d2:1b:93:
                    e7:95:d4:ca:bd:a6:28:24:f6:82:8c:88:ae:8b:dc:
                    8c:a2:ff:5f:6d:ae:1e:d4:bf:3f:21:20:65:aa:4d:
                    bf:50:b1:76:82:e5:80:1b:9e:01:be:74:ac:2d:8f:
                    a7:af:f9:33:14:fd:b6:fb:ae:00:69:2b:95:aa:53:
                    64:bb:5d:b3:3c:b7:57:b8:d9:6f:4a:0f:c5:d6:2f:
                    d3:f0:b5:3e:b3:69:74:31:4c:f8:67:38:bb:72:06:
                    d9:be:18:8b:d6:a3:64:87:c1:36:9e:f7:6e:a7:b1:
                    c7:6d:e4:b8:86:30:c1:b2:89:39:5c:01:1e:a8:f7:
                    26:a9:92:bc:ef:f0:e5:b6:99:a6:6d:8f:c0:9a:93:
                    aa:ac:70:5f:e3:db:91:5e:9c:27:d4:50:0f:86:ad:
                    05:8b:36:79:92:60:3d:5f:d8:c0:6a:18:76:68:ef:
                    e0:63:3c:e5:9c:5a:67:80:a2:36:1f:cc:45:32:04:
                    af:2f:22:62:4a:86:dc:4e:93:e5:91:23:5a:27:56:
                    1e:f1:be:ad:b9:9e:27:ba:14:17:60:cb:af:9e:4b:
                    8e:39:3a:cd:49:c4:9b:f0:5f:cc:73:5c:6d:16:fc:
                    b2:d2:2f:28:aa:aa:4d:ce:98:1c:8c:18:75:ad:7f:
                    3d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:9A:4C:85:7C:7B:B8:8D:97:AD:0F:82:1B:CD:0C:34:A2:57:AE:2E
            X509v3 Authority Key Identifier:
                keyid:58:AE:52:C1:F3:6B:FA:F8:52:F4:10:F1:CA:D0:D3:68:3D:54:12:61

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/WK5SwfNr-vhS9BDxytDTaD1UEmE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WK5SwfNr-vhS9BDxytDTaD1UEmE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30072/J5pMhXx7uI2XrQ-CG80MNKJXri4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:c30:40::/48

    Signature Algorithm: sha256WithRSAEncryption
         21:a2:46:62:4e:44:2d:c0:3c:0b:ab:1d:03:ce:14:3a:c6:7c:
         5c:d2:83:8a:39:31:3f:42:33:c1:b5:50:3c:52:fd:7a:68:eb:
         ac:db:be:ea:4e:87:36:6c:0e:d9:e7:22:12:a3:68:3e:81:77:
         4f:72:fd:d5:cd:75:ed:0b:8b:57:be:2f:8a:81:09:01:cb:4f:
         57:db:98:50:00:41:11:9e:e2:71:e2:de:92:db:34:9a:c8:d4:
         53:56:dd:03:bd:6a:d0:76:da:7e:c2:df:13:66:bc:ab:28:a8:
         01:28:05:f3:73:32:7f:3d:13:31:9e:8e:2c:d2:57:a6:41:de:
         ed:cd:45:84:aa:51:9c:5c:ff:85:cb:91:11:93:1f:68:d6:11:
         bd:48:00:fc:86:9d:34:33:a2:f5:cf:fa:69:e0:9a:4a:58:55:
         9f:3d:03:6f:af:28:31:67:d7:78:bb:44:9d:dc:14:88:0c:5f:
         d6:d8:85:68:24:8e:d9:3e:e5:7b:8b:61:85:af:d0:9a:88:26:
         08:3e:0a:a7:51:e9:7b:2a:3a:a5:87:47:ff:82:1e:c9:40:4f:
         d3:05:b2:65:45:0a:4d:b3:c7:14:77:9b:ee:71:f6:70:63:26:
         86:05:af:91:9d:3d:11:23:3a:a3:f1:d3:40:48:a4:04:d5:06:
         1d:44:55:c1
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgIBIDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1OEFF
NTJDMUYzNkJGQUY4NTJGNDEwRjFDQUQwRDM2ODNENTQxMjYxMB4XDTIzMDgwMTAx
MjkzMVoXDTI0MDcxNDAxMzAwM1owMzExMC8GA1UEAxMoMjc5QTRDODU3QzdCQjg4
RDk3QUQwRjgyMUJDRDBDMzRBMjU3QUUyRTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAPZ33Qhd02eo6Ng30huT55XUyr2mKCT2goyIrovcjKL/X22uHtS/
PyEgZapNv1CxdoLlgBueAb50rC2Pp6/5MxT9tvuuAGkrlapTZLtdszy3V7jZb0oP
xdYv0/C1PrNpdDFM+Gc4u3IG2b4Yi9ajZIfBNp73bqexx23kuIYwwbKJOVwBHqj3
JqmSvO/w5baZpm2PwJqTqqxwX+PbkV6cJ9RQD4atBYs2eZJgPV/YwGoYdmjv4GM8
5ZxaZ4CiNh/MRTIEry8iYkqG3E6T5ZEjWidWHvG+rbmeJ7oUF2DLr55Ljjk6zUnE
m/BfzHNcbRb8stIvKKqqTc6YHIwYda1/PSkCAwEAAaOCAiswggInMB0GA1UdDgQW
BBQnmkyFfHu4jZetD4IbzQw0oleuLjAfBgNVHSMEGDAWgBRYrlLB82v6+FL0EPHK
0NNoPVQSYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAwNzIvV0s1U3dmTnItdmhTOUJEeHl0RFRhRDFVRW1FLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvV0s1U3dmTnItdmhTOUJEeHl0RFRh
RDFVRW1FLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMDcyL0o1cE1oWHg3dUkyWHJRLUNHODBNTktKWHJpNC5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwAgAQwwAEAwDQYJKoZIhvcNAQELBQADggEBACGiRmJORC3APAurHQPO
FDrGfFzSg4o5MT9CM8G1UDxS/Xpo66zbvupOhzZsDtnnIhKjaD6Bd09y/dXNde0L
i1e+L4qBCQHLT1fbmFAAQRGe4nHi3pLbNJrI1FNW3QO9atB22n7C3xNmvKsoqAEo
BfNzMn89EzGejizSV6ZB3u3NRYSqUZxc/4XLkRGTH2jWEb1IAPyGnTQzovXP+mng
mkpYVZ89A2+vKDFn13i7RJ3cFIgMX9bYhWgkjtk+5XuLYYWv0JqIJgg+CqdR6Xsq
OqWHR/+CHslAT9MFsmVFCk2zxxR3m+5x9nBjJoYFr5GdPREjOqPx00BIpATVBh1E
VcE=
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:44 2024 by rpki-client on console-fra.rpki-client.org