Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30175/5HjB2mHS5gTqeSMw075xaRno8OM.roa
File:                     5HjB2mHS5gTqeSMw075xaRno8OM.roa (raw, json)
Hash identifier:          frfqjYgClm68iW+ZtTj90/ERzHmViDcvkQq8rp170nQ=
Subject key identifier:   E4:78:C1:DA:61:D2:E6:04:EA:79:23:30:D3:BE:71:69:19:E8:F0:E3
Certificate issuer:       /CN=DFBCD3F8BCA91915C4533A2C0A69C3D35B2E688D
Certificate serial:       0D
Authority key identifier: DF:BC:D3:F8:BC:A9:19:15:C4:53:3A:2C:0A:69:C3:D3:5B:2E:68:8D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/37zT-LypGRXEUzosCmnD01suaI0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/5HjB2mHS5gTqeSMw075xaRno8OM.roa
Signing time:             Tue 21 Nov 2023 06:36:37 +0000
ROA not before:           Tue 21 Nov 2023 06:36:37 +0000
ROA not after:            Thu 14 Nov 2024 01:30:03 +0000
asID:                     37901
IP address blocks:        240b:11::/32 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/37zT-LypGRXEUzosCmnD01suaI0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13 (0xd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFBCD3F8BCA91915C4533A2C0A69C3D35B2E688D
        Validity
            Not Before: Nov 21 06:36:37 2023 GMT
            Not After : Nov 14 01:30:03 2024 GMT
        Subject: CN=E478C1DA61D2E604EA792330D3BE716919E8F0E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:bf:da:5f:b5:98:9e:1c:17:0c:18:0a:c2:90:
                    fd:4a:25:28:1c:34:40:b1:a2:20:c6:f9:32:50:15:
                    ba:97:8a:cb:b5:cb:a8:42:f3:4f:be:1f:6a:e1:c4:
                    0a:da:7b:15:e2:9a:76:8d:b2:cc:d4:58:88:a1:11:
                    63:b3:8d:bd:de:9e:9b:b4:3d:01:5a:aa:5b:4c:28:
                    07:08:02:0b:8e:c0:fd:40:67:04:e2:7f:7b:a8:39:
                    39:8b:d2:bc:75:16:89:15:69:bb:8a:5b:0b:81:52:
                    06:2f:7a:b5:72:3a:a4:4f:05:72:00:29:5d:1e:13:
                    ec:b1:50:a4:2a:f4:55:36:aa:18:61:65:cb:73:a6:
                    a5:0a:15:cc:1c:f4:7a:45:b3:76:1d:c6:7d:f3:78:
                    8e:fd:4c:74:52:f0:f2:2d:26:5e:b4:7c:8f:07:1b:
                    e4:c7:7d:0b:1a:ab:4f:ab:95:27:00:38:a1:c3:ac:
                    69:71:1f:9e:2e:d6:61:c0:62:35:25:7a:c9:55:fb:
                    9a:83:1f:60:38:4e:c8:ba:1e:7f:23:8d:04:4c:8b:
                    df:ed:31:ad:8e:e7:d3:90:f4:d3:4d:de:5a:a1:67:
                    dc:02:61:e0:2c:e8:93:7a:56:22:7d:13:31:a1:f9:
                    15:2e:ab:1f:11:d4:f8:df:fc:ac:8a:2b:b8:b9:8b:
                    99:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:78:C1:DA:61:D2:E6:04:EA:79:23:30:D3:BE:71:69:19:E8:F0:E3
            X509v3 Authority Key Identifier:
                keyid:DF:BC:D3:F8:BC:A9:19:15:C4:53:3A:2C:0A:69:C3:D3:5B:2E:68:8D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/37zT-LypGRXEUzosCmnD01suaI0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/5HjB2mHS5gTqeSMw075xaRno8OM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240b:11::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:a3:10:4c:10:81:5d:56:19:c3:38:ed:12:8c:53:fe:b2:7a:
         a6:dc:a9:4d:63:c0:01:7a:9f:b6:3b:9e:c1:f0:cd:cf:f7:ba:
         8d:98:0f:1c:00:26:a3:73:a6:49:31:f6:22:24:b7:6c:59:49:
         6f:f5:ab:5a:34:6a:3e:04:b0:df:60:4b:e5:39:10:20:9b:2a:
         61:ea:98:a3:a6:ae:4f:aa:e9:ee:0b:39:c1:69:f2:06:c6:bd:
         2d:0e:fc:16:fb:75:b9:f4:13:27:af:2e:94:e6:da:03:5e:81:
         72:bd:33:f0:d2:a2:14:a8:c0:c6:83:ba:bb:b0:a2:e1:38:e8:
         a7:81:7d:23:65:35:41:fe:bb:f0:e9:02:eb:51:2c:70:4c:61:
         10:bf:29:25:77:48:da:cf:af:f9:50:42:c6:4f:df:2e:3e:b9:
         ac:17:cb:09:ff:34:e0:14:0f:6f:b4:a5:ce:6f:7d:58:a4:f6:
         fa:8c:d7:5a:b8:bb:18:a4:99:c7:1a:ee:f7:6f:73:c2:a0:a7:
         c4:c3:98:c7:10:c5:91:23:c4:54:6b:4d:65:e8:38:a7:ec:9b:
         99:8a:d4:b5:3a:57:09:c4:b7:6b:d0:93:fc:b7:7a:4b:18:ae:
         ec:79:da:f3:c7:23:89:5a:b6:aa:14:26:02:84:57:ca:55:46:
         1c:60:7b:80
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIBDTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhERkJD
RDNGOEJDQTkxOTE1QzQ1MzNBMkMwQTY5QzNEMzVCMkU2ODhEMB4XDTIzMTEyMTA2
MzYzN1oXDTI0MTExNDAxMzAwM1owMzExMC8GA1UEAxMoRTQ3OEMxREE2MUQyRTYw
NEVBNzkyMzMwRDNCRTcxNjkxOUU4RjBFMzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMm/2l+1mJ4cFwwYCsKQ/UolKBw0QLGiIMb5MlAVupeKy7XLqELz
T74fauHECtp7FeKado2yzNRYiKERY7ONvd6em7Q9AVqqW0woBwgCC47A/UBnBOJ/
e6g5OYvSvHUWiRVpu4pbC4FSBi96tXI6pE8FcgApXR4T7LFQpCr0VTaqGGFly3Om
pQoVzBz0ekWzdh3GffN4jv1MdFLw8i0mXrR8jwcb5Md9CxqrT6uVJwA4ocOsaXEf
ni7WYcBiNSV6yVX7moMfYDhOyLoefyONBEyL3+0xrY7n05D0003eWqFn3AJh4Czo
k3pWIn0TMaH5FS6rHxHU+N/8rIoruLmLmWUCAwEAAaOCAikwggIlMB0GA1UdDgQW
BBTkeMHaYdLmBOp5IzDTvnFpGejw4zAfBgNVHSMEGDAWgBTfvNP4vKkZFcRTOiwK
acPTWy5ojTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAxNzUvMzd6VC1MeXBHUlhFVXpvc0NtbkQwMXN1YUkwLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMzd6VC1MeXBHUlhFVXpvc0NtbkQw
MXN1YUkwLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMTc1LzVIakIybUhTNWdUcWVTTXcwNzV4YVJubzhPTS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E
AgACMAcDBQAkCwARMA0GCSqGSIb3DQEBCwUAA4IBAQAfoxBMEIFdVhnDOO0SjFP+
snqm3KlNY8ABep+2O57B8M3P97qNmA8cACajc6ZJMfYiJLdsWUlv9ataNGo+BLDf
YEvlORAgmyph6pijpq5PqunuCznBafIGxr0tDvwW+3W59BMnry6U5toDXoFyvTPw
0qIUqMDGg7q7sKLhOOingX0jZTVB/rvw6QLrUSxwTGEQvykld0jaz6/5UELGT98u
PrmsF8sJ/zTgFA9vtKXOb31YpPb6jNdauLsYpJnHGu73b3PCoKfEw5jHEMWRI8RU
a01l6Din7JuZitS1OlcJxLdr0JP8t3pLGK7sedrzxyOJWraqFCYChFfKVUYcYHuA
-----END CERTIFICATE-----
Generated at Thu Jun 6 14:56:16 2024 by rpki-client on console-fra.rpki-client.org