Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30099/-FPAVGvCSm8z3_1mwlQ_r1GxiRs.roa
File:                     -FPAVGvCSm8z3_1mwlQ_r1GxiRs.roa (raw, json)
Hash identifier:          d2wjeH+C8L3v4kiESxoh7tE0GsM6aVKMyhWii38+/wo=
Subject key identifier:   F8:53:C0:54:6B:C2:4A:6F:33:DF:FD:66:C2:54:3F:AF:51:B1:89:1B
Certificate issuer:       /CN=D6B98D9AE608D1E060709B960EEF133AF2B81351
Certificate serial:       3A
Authority key identifier: D6:B9:8D:9A:E6:08:D1:E0:60:70:9B:96:0E:EF:13:3A:F2:B8:13:51
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1rmNmuYI0eBgcJuWDu8TOvK4E1E.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30099/-FPAVGvCSm8z3_1mwlQ_r1GxiRs.roa
Signing time:             Thu 29 Feb 2024 01:31:20 +0000
ROA not before:           Thu 29 Feb 2024 01:31:20 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     10021
IP address blocks:        2400:1000::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30099/1rmNmuYI0eBgcJuWDu8TOvK4E1E.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30099/1rmNmuYI0eBgcJuWDu8TOvK4E1E.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1rmNmuYI0eBgcJuWDu8TOvK4E1E.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Dec 2024 00:11:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58 (0x3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6B98D9AE608D1E060709B960EEF133AF2B81351
        Validity
            Not Before: Feb 29 01:31:20 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=F853C0546BC24A6F33DFFD66C2543FAF51B1891B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:07:b5:44:2b:7b:8e:5a:0b:f5:21:c9:96:94:
                    8a:c5:6d:98:d3:95:20:94:22:fe:62:bb:60:a3:f7:
                    06:8c:38:62:cb:68:76:37:05:72:6f:bc:8b:e7:30:
                    6d:07:d1:b9:38:59:b3:a3:5a:b6:0a:cf:f8:48:25:
                    22:ef:ab:69:f1:ef:91:76:35:cb:cc:52:ec:70:a8:
                    fd:98:02:9b:7d:13:28:27:37:0d:1b:a3:d8:bf:18:
                    81:58:85:30:7b:f5:6d:e3:52:35:d5:95:a9:fc:1f:
                    fb:0b:1d:eb:89:b0:e9:02:c1:9b:ca:3f:13:15:b4:
                    76:ef:98:c4:b4:82:c1:1e:1e:ec:cf:00:75:69:44:
                    33:4b:0c:4e:8a:e2:5b:cb:47:d5:fa:17:0e:37:22:
                    34:2b:5f:46:d0:9b:a6:b2:8e:3f:b3:78:12:d9:9c:
                    56:68:dd:ab:ef:d5:a2:f9:79:05:39:a4:16:de:2c:
                    e1:47:58:8d:2b:a6:60:e1:d5:f7:96:1b:ac:74:97:
                    bc:83:8b:68:1d:28:5b:62:1e:5e:e8:ed:1d:f5:dc:
                    87:ba:05:9d:dc:ee:b0:6e:6b:46:25:cd:fb:b3:fb:
                    4a:16:3c:ae:8f:b6:2d:9b:dd:8c:b4:a8:f9:34:ab:
                    f9:c6:03:a9:88:2a:4e:58:0d:9f:ba:6f:c6:9b:fb:
                    4f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:53:C0:54:6B:C2:4A:6F:33:DF:FD:66:C2:54:3F:AF:51:B1:89:1B
            X509v3 Authority Key Identifier:
                keyid:D6:B9:8D:9A:E6:08:D1:E0:60:70:9B:96:0E:EF:13:3A:F2:B8:13:51

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30099/1rmNmuYI0eBgcJuWDu8TOvK4E1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1rmNmuYI0eBgcJuWDu8TOvK4E1E.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30099/-FPAVGvCSm8z3_1mwlQ_r1GxiRs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:1000::/32

    Signature Algorithm: sha256WithRSAEncryption
         2a:5b:e4:e7:37:45:bf:90:4b:8d:f5:23:13:75:78:74:4e:32:
         a2:76:dc:bf:a7:78:9d:26:09:cf:b5:65:a7:60:f3:5a:db:9c:
         f2:18:78:2f:f3:f8:1c:b0:9f:79:f5:b6:02:bf:78:a2:60:42:
         b3:d1:cd:8d:26:ee:d8:8f:ae:76:65:fa:c1:a0:40:50:6b:36:
         46:80:38:72:5e:ca:ce:c0:7f:8b:48:51:42:3f:f0:60:3b:50:
         d2:21:a3:0d:be:62:12:94:27:03:e5:40:73:ae:fe:3c:f3:66:
         02:9c:55:25:3f:34:a2:40:8a:58:0e:d7:74:6e:32:84:79:c5:
         a3:a4:99:2c:b9:be:24:ab:fb:13:ed:fe:f4:50:cb:d7:70:8f:
         b0:00:aa:ae:0e:c9:91:19:83:cf:c3:53:1b:51:34:74:f8:bf:
         7f:da:40:40:a3:0e:ed:8c:c5:b8:ae:b3:20:17:a9:45:08:5f:
         07:ed:26:6c:2a:c9:de:fa:c8:29:c4:92:5f:ba:93:01:1b:14:
         f6:1d:2a:91:37:19:23:09:e5:e8:a1:6e:30:82:3d:da:dc:14:
         48:a4:93:c1:8a:f2:67:39:99:88:56:2e:0a:d0:f3:39:21:c6:
         c4:8e:27:6d:88:0f:8e:dd:8c:57:df:a8:b8:c0:f7:d6:cf:4e:
         5f:af:6f:1a
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIBOjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhENkI5
OEQ5QUU2MDhEMUUwNjA3MDlCOTYwRUVGMTMzQUYyQjgxMzUxMB4XDTI0MDIyOTAx
MzEyMFoXDTI1MDIxNDAxMzAwM1owMzExMC8GA1UEAxMoRjg1M0MwNTQ2QkMyNEE2
RjMzREZGRDY2QzI1NDNGQUY1MUIxODkxQjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAL0HtUQre45aC/UhyZaUisVtmNOVIJQi/mK7YKP3Bow4YstodjcF
cm+8i+cwbQfRuThZs6NatgrP+EglIu+rafHvkXY1y8xS7HCo/ZgCm30TKCc3DRuj
2L8YgViFMHv1beNSNdWVqfwf+wsd64mw6QLBm8o/ExW0du+YxLSCwR4e7M8AdWlE
M0sMToriW8tH1foXDjciNCtfRtCbprKOP7N4EtmcVmjdq+/Vovl5BTmkFt4s4UdY
jSumYOHV95YbrHSXvIOLaB0oW2IeXujtHfXch7oFndzusG5rRiXN+7P7ShY8ro+2
LZvdjLSo+TSr+cYDqYgqTlgNn7pvxpv7T00CAwEAAaOCAikwggIlMB0GA1UdDgQW
BBT4U8BUa8JKbzPf/WbCVD+vUbGJGzAfBgNVHSMEGDAWgBTWuY2a5gjR4GBwm5YO
7xM68rgTUTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAwOTkvMXJtTm11WUkwZUJnY0p1V0R1OFRPdks0RTFFLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMXJtTm11WUkwZUJnY0p1V0R1OFRP
dks0RTFFLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMDk5Ly1GUEFWR3ZDU204ejNfMW13bFFfcjFHeGlScy5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E
AgACMAcDBQAkABAAMA0GCSqGSIb3DQEBCwUAA4IBAQAqW+TnN0W/kEuN9SMTdXh0
TjKidty/p3idJgnPtWWnYPNa25zyGHgv8/gcsJ959bYCv3iiYEKz0c2NJu7Yj652
ZfrBoEBQazZGgDhyXsrOwH+LSFFCP/BgO1DSIaMNvmISlCcD5UBzrv4882YCnFUl
PzSiQIpYDtd0bjKEecWjpJksub4kq/sT7f70UMvXcI+wAKquDsmRGYPPw1MbUTR0
+L9/2kBAow7tjMW4rrMgF6lFCF8H7SZsKsne+sgpxJJfupMBGxT2HSqRNxkjCeXo
oW4wgj3a3BRIpJPBivJnOZmIVi4K0PM5IcbEjidtiA+O3YxX36i4wPfWz05fr28a
-----END CERTIFICATE-----
Generated at Tue Nov 26 02:17:06 2024 by rpki-client on console-fra.rpki-client.org