Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30091/8FVZOKh3H2QG-RGVnR9h-9WI234.roa
File:                     8FVZOKh3H2QG-RGVnR9h-9WI234.roa (raw, json)
Hash identifier:          e2t7B+VFhYpCVvqlp4VM2eJJ0pnNdf0XK8Iv7vQR68I=
Subject key identifier:   F0:55:59:38:A8:77:1F:64:06:F9:11:95:9D:1F:61:FB:D5:88:DB:7E
Certificate issuer:       /CN=89801DBDBE168863AB0E802F0EC90A3525C2347C
Certificate serial:       3D
Authority key identifier: 89:80:1D:BD:BE:16:88:63:AB:0E:80:2F:0E:C9:0A:35:25:C2:34:7C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iYAdvb4WiGOrDoAvDskKNSXCNHw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/8FVZOKh3H2QG-RGVnR9h-9WI234.roa
Signing time:             Tue 17 Oct 2023 06:22:46 +0000
ROA not before:           Tue 17 Oct 2023 06:22:46 +0000
ROA not after:            Mon 14 Oct 2024 01:30:03 +0000
asID:                     38639
IP address blocks:        2402:c800:fff0::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/iYAdvb4WiGOrDoAvDskKNSXCNHw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/iYAdvb4WiGOrDoAvDskKNSXCNHw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iYAdvb4WiGOrDoAvDskKNSXCNHw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 16 Jun 2024 13:34:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61 (0x3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89801DBDBE168863AB0E802F0EC90A3525C2347C
        Validity
            Not Before: Oct 17 06:22:46 2023 GMT
            Not After : Oct 14 01:30:03 2024 GMT
        Subject: CN=F0555938A8771F6406F911959D1F61FBD588DB7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:02:57:bd:27:35:ea:4d:a2:ea:3a:52:24:9f:
                    f4:c0:9a:26:bd:b1:f9:3e:6c:4c:eb:04:4b:d1:61:
                    26:04:cc:3a:46:1f:ba:8d:92:7b:96:23:af:b1:09:
                    4f:eb:67:d1:87:2f:8e:d0:6d:03:98:25:0d:61:1f:
                    62:fe:04:c3:c2:ca:83:73:27:33:8d:24:7a:5e:38:
                    b2:2e:10:72:92:37:6b:f8:34:ed:98:d5:db:1e:5b:
                    de:27:69:ca:7f:68:f7:f7:4b:c4:1d:c0:b7:19:eb:
                    5b:cb:b2:fb:b6:9e:4c:b9:41:18:9b:b3:30:b2:3e:
                    7f:77:2b:e3:0d:c2:03:e5:e0:62:83:df:95:6b:38:
                    53:ef:6e:4a:26:1e:52:f0:9d:45:d7:2b:00:a8:27:
                    4e:82:94:b4:a2:5b:f5:1c:6d:48:a6:44:e3:ef:ef:
                    79:e7:10:8d:9a:aa:b1:98:ed:96:ed:cb:c0:62:e1:
                    bf:ee:de:77:f7:0e:c7:77:39:51:c9:88:68:13:75:
                    e7:82:6e:66:ad:a0:80:fe:85:c1:b5:c3:41:77:f8:
                    a8:ee:58:9c:7c:01:6d:4a:04:93:0f:1f:43:3b:ab:
                    d9:b4:4a:4d:27:03:98:8a:e5:92:30:03:91:4f:a6:
                    02:12:39:d4:ef:86:74:26:39:53:49:02:72:e2:11:
                    ea:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:55:59:38:A8:77:1F:64:06:F9:11:95:9D:1F:61:FB:D5:88:DB:7E
            X509v3 Authority Key Identifier:
                keyid:89:80:1D:BD:BE:16:88:63:AB:0E:80:2F:0E:C9:0A:35:25:C2:34:7C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/iYAdvb4WiGOrDoAvDskKNSXCNHw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iYAdvb4WiGOrDoAvDskKNSXCNHw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/8FVZOKh3H2QG-RGVnR9h-9WI234.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:c800:fff0::/44

    Signature Algorithm: sha256WithRSAEncryption
         73:33:5e:70:16:20:71:4d:36:b5:de:9e:d4:60:11:60:69:c5:
         83:fb:84:f0:28:b3:09:12:94:78:95:fe:68:41:53:fc:60:ca:
         0b:0f:7f:e1:5a:17:a1:5a:e1:76:8c:99:26:ef:d5:d2:24:0f:
         e0:f1:e1:4a:56:cd:7c:55:47:27:63:93:f3:0e:0c:ca:6b:96:
         06:aa:53:c0:da:f3:c0:4f:6f:b8:ea:54:5e:cd:09:3c:8b:ce:
         a9:65:dd:07:01:fa:5c:e8:92:2d:9a:35:9f:b5:f0:ed:11:c8:
         0b:2e:7b:40:01:ad:0d:e0:c2:50:4a:aa:26:b1:45:ca:6d:be:
         22:19:38:6e:98:90:fe:08:47:c2:76:70:ef:ff:1f:d3:78:a7:
         87:34:eb:c8:aa:68:eb:ef:c1:9d:65:1f:a5:cd:56:87:2f:8c:
         78:1c:86:10:df:1e:b7:53:21:7d:7f:84:b6:d2:9a:56:8a:ab:
         21:2b:aa:34:cf:d3:5f:23:2e:1b:9d:c0:13:85:a8:99:0d:fc:
         02:ca:64:7e:12:74:37:9b:76:09:c1:91:20:ff:07:aa:b3:12:
         f7:74:0a:66:68:75:04:17:78:17:c6:1b:b7:5e:c9:1c:28:01:
         e2:0f:c1:de:39:8e:8d:89:50:6d:26:89:43:a3:f6:9e:33:a2:
         9b:78:df:a8
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgIBPTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4OTgw
MURCREJFMTY4ODYzQUIwRTgwMkYwRUM5MEEzNTI1QzIzNDdDMB4XDTIzMTAxNzA2
MjI0NloXDTI0MTAxNDAxMzAwM1owMzExMC8GA1UEAxMoRjA1NTU5MzhBODc3MUY2
NDA2RjkxMTk1OUQxRjYxRkJENTg4REI3RTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKACV70nNepNouo6UiSf9MCaJr2x+T5sTOsES9FhJgTMOkYfuo2S
e5Yjr7EJT+tn0YcvjtBtA5glDWEfYv4Ew8LKg3MnM40kel44si4QcpI3a/g07ZjV
2x5b3idpyn9o9/dLxB3AtxnrW8uy+7aeTLlBGJuzMLI+f3cr4w3CA+XgYoPflWs4
U+9uSiYeUvCdRdcrAKgnToKUtKJb9RxtSKZE4+/veecQjZqqsZjtlu3LwGLhv+7e
d/cOx3c5UcmIaBN154JuZq2ggP6FwbXDQXf4qO5YnHwBbUoEkw8fQzur2bRKTScD
mIrlkjADkU+mAhI51O+GdCY5U0kCcuIR6isCAwEAAaOCAiswggInMB0GA1UdDgQW
BBTwVVk4qHcfZAb5EZWdH2H71YjbfjAfBgNVHSMEGDAWgBSJgB29vhaIY6sOgC8O
yQo1JcI0fDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAwOTEvaVlBZHZiNFdpR09yRG9BdkRza0tOU1hDTkh3LmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvaVlBZHZiNFdpR09yRG9BdkRza0tO
U1hDTkh3LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMDkxLzhGVlpPS2gzSDJRRy1SR1ZuUjloLTlXSTIzNC5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwQkAsgA//AwDQYJKoZIhvcNAQELBQADggEBAHMzXnAWIHFNNrXentRg
EWBpxYP7hPAoswkSlHiV/mhBU/xgygsPf+FaF6Fa4XaMmSbv1dIkD+Dx4UpWzXxV
Rydjk/MODMprlgaqU8Da88BPb7jqVF7NCTyLzqll3QcB+lzoki2aNZ+18O0RyAsu
e0ABrQ3gwlBKqiaxRcptviIZOG6YkP4IR8J2cO//H9N4p4c068iqaOvvwZ1lH6XN
VocvjHgchhDfHrdTIX1/hLbSmlaKqyErqjTP018jLhudwBOFqJkN/ALKZH4SdDeb
dgnBkSD/B6qzEvd0CmZodQQXeBfGG7deyRwoAeIPwd45jo2JUG0miUOj9p4zopt4
36g=
-----END CERTIFICATE-----
Generated at Thu Jun 13 14:58:56 2024 by rpki-client on console-fra.rpki-client.org