Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30132/B5Y5L2t_neDgCINRLrvhT1ADx1k.roa
File:                     B5Y5L2t_neDgCINRLrvhT1ADx1k.roa (raw, json)
Hash identifier:          PA8GLNWbkzkFEv1+ErLpBcjvv4EFNmOpXlv+H/HmN1Q=
Subject key identifier:   07:96:39:2F:6B:7F:9D:E0:E0:08:83:51:2E:BB:E1:4F:50:03:C7:59
Certificate issuer:       /CN=93FEB3B6C5F839403C57D04354437BCAEE7B3991
Certificate serial:       1A
Authority key identifier: 93:FE:B3:B6:C5:F8:39:40:3C:57:D0:43:54:43:7B:CA:EE:7B:39:91
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k_6ztsX4OUA8V9BDVEN7yu57OZE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30132/B5Y5L2t_neDgCINRLrvhT1ADx1k.roa
Signing time:             Sun 31 Mar 2024 01:32:30 +0000
ROA not before:           Sun 31 Mar 2024 01:32:30 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     10019
IP address blocks:        2401:3200::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30132/k_6ztsX4OUA8V9BDVEN7yu57OZE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30132/k_6ztsX4OUA8V9BDVEN7yu57OZE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k_6ztsX4OUA8V9BDVEN7yu57OZE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26 (0x1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93FEB3B6C5F839403C57D04354437BCAEE7B3991
        Validity
            Not Before: Mar 31 01:32:30 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=0796392F6B7F9DE0E00883512EBBE14F5003C759
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:62:15:71:70:a9:19:b1:35:b9:ce:b5:87:41:
                    ae:87:45:dc:9f:97:cb:26:d0:f8:b3:cd:e3:c4:d3:
                    c1:d8:8c:1c:12:21:3d:f3:91:c3:6e:21:e4:e5:45:
                    b8:33:7e:be:88:b1:52:b4:b4:a0:5d:4d:e3:62:bd:
                    75:cb:04:77:36:02:ae:52:57:16:b2:8f:14:76:9d:
                    0e:e9:a6:72:ed:dd:44:61:75:82:96:6b:15:c0:82:
                    24:d4:1d:fc:5b:e0:86:87:f7:4d:64:10:0f:0b:13:
                    7d:77:3b:ea:ac:bf:d2:58:12:0e:01:e6:04:a5:a4:
                    1e:d8:e5:7d:d6:78:7b:b2:dd:4f:d2:88:f2:3d:21:
                    38:b7:b0:df:d1:2e:6a:4d:bd:32:66:e8:2a:70:b7:
                    b8:1a:4e:c0:2b:61:80:de:5a:6f:58:10:1a:73:90:
                    5a:06:28:d2:1f:9e:33:cc:8c:96:d2:f8:f3:3c:2f:
                    1a:80:c7:1c:9c:d8:8b:84:31:1c:f9:d2:16:f1:ac:
                    0c:9d:1d:fd:51:e5:fc:48:f3:31:ab:ef:b9:23:85:
                    21:f8:56:0a:0c:bc:3d:62:15:76:50:a7:0f:e9:de:
                    1e:47:f0:14:62:f8:32:34:f6:d7:f9:7d:87:d9:aa:
                    03:12:fa:09:70:a2:2d:11:6e:91:39:8e:7f:7d:d1:
                    0b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:96:39:2F:6B:7F:9D:E0:E0:08:83:51:2E:BB:E1:4F:50:03:C7:59
            X509v3 Authority Key Identifier:
                keyid:93:FE:B3:B6:C5:F8:39:40:3C:57:D0:43:54:43:7B:CA:EE:7B:39:91

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30132/k_6ztsX4OUA8V9BDVEN7yu57OZE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k_6ztsX4OUA8V9BDVEN7yu57OZE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30132/B5Y5L2t_neDgCINRLrvhT1ADx1k.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:3200::/32

    Signature Algorithm: sha256WithRSAEncryption
         9d:21:a8:20:82:8a:fe:fb:00:b0:b5:e7:31:c2:a9:54:e7:35:
         04:de:24:ef:11:98:af:79:b8:5b:e6:f3:2a:f8:68:31:ff:55:
         d6:9a:68:13:9f:54:c8:d5:ad:ed:6a:80:41:9c:cb:69:04:b0:
         1f:ea:2f:22:29:f5:56:95:89:7b:3a:ca:b2:9d:bc:de:1b:0b:
         ee:b9:60:21:6c:1c:7e:59:40:27:60:11:15:e3:0e:9b:cf:82:
         d5:c3:04:81:41:c9:03:7c:04:12:79:9d:5d:9a:7c:76:4f:cd:
         64:a1:7a:9d:4a:b9:5c:f7:b2:f1:4d:3d:b1:50:ed:53:72:1b:
         8f:cb:78:9d:3d:67:02:db:10:ee:79:b7:fd:bb:8a:bd:83:43:
         cb:74:ba:33:6d:28:53:b1:ac:c2:83:b5:47:1c:3a:52:79:c7:
         34:16:59:9f:b5:18:80:03:93:ac:55:2c:02:47:96:1b:29:ff:
         1a:1f:16:f8:51:0e:dd:48:b7:bf:a2:4c:4e:11:56:d7:9f:55:
         cb:df:7c:cf:d4:4c:ec:45:ae:25:46:e2:95:d2:fc:8b:ef:11:
         de:ae:dd:ad:e9:32:b8:b5:04:96:92:0f:c6:70:79:a7:b4:d7:
         04:d5:04:86:bb:cd:ee:7b:02:4f:a2:95:4c:c5:0f:da:60:90:
         3c:d0:2b:72
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIBGjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5M0ZF
QjNCNkM1RjgzOTQwM0M1N0QwNDM1NDQzN0JDQUVFN0IzOTkxMB4XDTI0MDMzMTAx
MzIzMFoXDTI1MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoMDc5NjM5MkY2QjdGOURF
MEUwMDg4MzUxMkVCQkUxNEY1MDAzQzc1OTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALhiFXFwqRmxNbnOtYdBrodF3J+XyybQ+LPN48TTwdiMHBIhPfOR
w24h5OVFuDN+voixUrS0oF1N42K9dcsEdzYCrlJXFrKPFHadDummcu3dRGF1gpZr
FcCCJNQd/Fvghof3TWQQDwsTfXc76qy/0lgSDgHmBKWkHtjlfdZ4e7LdT9KI8j0h
OLew39Euak29MmboKnC3uBpOwCthgN5ab1gQGnOQWgYo0h+eM8yMltL48zwvGoDH
HJzYi4QxHPnSFvGsDJ0d/VHl/EjzMavvuSOFIfhWCgy8PWIVdlCnD+neHkfwFGL4
MjT21/l9h9mqAxL6CXCiLRFukTmOf33RC+kCAwEAAaOCAikwggIlMB0GA1UdDgQW
BBQHljkva3+d4OAIg1Euu+FPUAPHWTAfBgNVHSMEGDAWgBST/rO2xfg5QDxX0ENU
Q3vK7ns5kTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAxMzIva182enRzWDRPVUE4VjlCRFZFTjd5dTU3T1pFLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAva182enRzWDRPVUE4VjlCRFZFTjd5
dTU3T1pFLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMTMyL0I1WTVMMnRfbmVEZ0NJTlJMcnZoVDFBRHgxay5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E
AgACMAcDBQAkATIAMA0GCSqGSIb3DQEBCwUAA4IBAQCdIagggor++wCwtecxwqlU
5zUE3iTvEZivebhb5vMq+Ggx/1XWmmgTn1TI1a3taoBBnMtpBLAf6i8iKfVWlYl7
OsqynbzeGwvuuWAhbBx+WUAnYBEV4w6bz4LVwwSBQckDfAQSeZ1dmnx2T81koXqd
Srlc97LxTT2xUO1TchuPy3idPWcC2xDuebf9u4q9g0PLdLozbShTsazCg7VHHDpS
ecc0FlmftRiAA5OsVSwCR5YbKf8aHxb4UQ7dSLe/okxOEVbXn1XL33zP1EzsRa4l
RuKV0vyL7xHert2t6TK4tQSWkg/GcHmntNcE1QSGu83uewJPopVMxQ/aYJA80Cty
-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:21 2024 by rpki-client on console-ams.rpki-client.org