Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30175/FSNx6P3I2UBEOrcRbmZHQIAWwbM.roa
File:                     FSNx6P3I2UBEOrcRbmZHQIAWwbM.roa (raw, json)
Hash identifier:          BJMtbIA8xRvg862kXwWzbJIuUlZmryDIAZwPxXnZKCw=
Subject key identifier:   15:23:71:E8:FD:C8:D9:40:44:3A:B7:11:6E:66:47:40:80:16:C1:B3
Certificate issuer:       /CN=DFBCD3F8BCA91915C4533A2C0A69C3D35B2E688D
Certificate serial:       29
Authority key identifier: DF:BC:D3:F8:BC:A9:19:15:C4:53:3A:2C:0A:69:C3:D3:5B:2E:68:8D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/37zT-LypGRXEUzosCmnD01suaI0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/FSNx6P3I2UBEOrcRbmZHQIAWwbM.roa
Signing time:             Thu 31 Oct 2024 01:31:41 +0000
ROA not before:           Thu 31 Oct 2024 01:31:41 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     37899
IP address blocks:        240b:250::/32 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/37zT-LypGRXEUzosCmnD01suaI0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 41 (0x29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFBCD3F8BCA91915C4533A2C0A69C3D35B2E688D
        Validity
            Not Before: Oct 31 01:31:41 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=152371E8FDC8D940443AB7116E6647408016C1B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:66:5e:d2:43:dc:35:64:ee:af:23:06:3d:d6:
                    5c:0d:ce:5c:a7:8d:74:39:48:82:73:47:ea:9b:9d:
                    02:8d:9f:ba:ea:f8:98:2a:ea:80:18:ad:96:cf:05:
                    30:b3:1b:e2:ae:a2:30:4b:39:af:85:b3:bd:d1:83:
                    4d:2f:8b:37:a3:3d:4c:be:f4:d2:10:a0:b1:56:91:
                    a0:9a:d2:94:02:24:53:32:dd:7c:27:5c:a8:69:00:
                    a5:7e:aa:bb:a4:c5:c3:25:e1:60:66:de:61:70:19:
                    c8:79:97:d3:d5:b0:61:e1:3b:6d:c5:bf:87:82:45:
                    bb:cd:d9:c8:fa:1d:fb:9f:de:bc:35:f4:8c:f4:3b:
                    03:fb:29:d4:14:5d:00:f7:74:e4:5b:a8:d8:7a:00:
                    fd:da:0d:98:28:03:f2:d2:46:21:9a:5e:6d:1e:f3:
                    2a:84:33:2c:2e:43:31:2a:40:92:82:fc:f3:6f:bd:
                    43:6b:67:79:7b:c9:9e:53:17:af:b1:fe:af:2e:4d:
                    23:9c:4f:39:9d:2e:4e:d8:28:d9:97:70:52:1f:e6:
                    b5:39:c2:55:5d:74:c3:13:6b:ba:92:e4:65:aa:d9:
                    c7:38:db:de:a1:a4:cd:6c:df:a7:d9:fa:a8:d9:0f:
                    74:60:ed:0b:38:cb:21:46:3c:8c:5c:cc:ff:e1:1f:
                    8f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:23:71:E8:FD:C8:D9:40:44:3A:B7:11:6E:66:47:40:80:16:C1:B3
            X509v3 Authority Key Identifier:
                keyid:DF:BC:D3:F8:BC:A9:19:15:C4:53:3A:2C:0A:69:C3:D3:5B:2E:68:8D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/37zT-LypGRXEUzosCmnD01suaI0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/FSNx6P3I2UBEOrcRbmZHQIAWwbM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240b:250::/32

    Signature Algorithm: sha256WithRSAEncryption
         31:b2:d7:2e:15:2c:97:2e:73:51:eb:f6:86:cc:7b:0c:21:be:
         d2:ef:2c:38:2d:88:e7:ce:b3:51:9a:e9:04:61:06:9b:d9:3c:
         ce:6a:3b:a6:c3:a8:df:41:bd:01:da:b0:7c:f2:ae:33:94:60:
         f0:fe:ed:6c:57:b1:cb:07:0e:fc:c5:2d:d7:9d:91:62:41:4c:
         13:b1:41:4b:f3:72:5d:ed:4d:4c:00:ab:4d:c9:0c:81:81:7c:
         72:d4:75:58:ea:3f:90:d8:bf:69:74:ad:00:65:fc:f2:d4:ad:
         56:9c:fc:9d:8b:0a:0f:5f:21:bb:8a:b5:8e:cc:0a:ba:dd:64:
         63:da:57:70:f3:46:4d:18:23:1c:cc:ce:d4:b0:4b:19:a2:f5:
         0f:a4:d6:ec:ff:05:82:f1:7a:b6:d9:61:ed:eb:32:5a:30:6b:
         a4:5f:78:5d:c3:a3:59:71:9e:71:c5:60:d6:02:0c:c5:fb:41:
         9e:7c:3a:fc:93:a7:76:8c:41:71:d0:06:e5:f4:6c:c2:c9:b9:
         4a:e8:94:e2:f1:70:48:a3:23:9d:c1:ad:da:e9:be:85:19:19:
         c1:04:8a:55:13:b1:79:5a:c4:16:23:7b:f4:a2:a9:bb:ac:5f:
         6e:23:dd:0e:8e:da:a2:f3:4c:75:d1:be:2a:98:d5:f2:ca:c3:
         69:31:6d:2b
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIBKTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhERkJD
RDNGOEJDQTkxOTE1QzQ1MzNBMkMwQTY5QzNEMzVCMkU2ODhEMB4XDTI0MTAzMTAx
MzE0MVoXDTI1MTAxNTAxMzAwMlowMzExMC8GA1UEAxMoMTUyMzcxRThGREM4RDk0
MDQ0M0FCNzExNkU2NjQ3NDA4MDE2QzFCMzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMZmXtJD3DVk7q8jBj3WXA3OXKeNdDlIgnNH6pudAo2fuur4mCrq
gBitls8FMLMb4q6iMEs5r4WzvdGDTS+LN6M9TL700hCgsVaRoJrSlAIkUzLdfCdc
qGkApX6qu6TFwyXhYGbeYXAZyHmX09WwYeE7bcW/h4JFu83ZyPod+5/evDX0jPQ7
A/sp1BRdAPd05Fuo2HoA/doNmCgD8tJGIZpebR7zKoQzLC5DMSpAkoL882+9Q2tn
eXvJnlMXr7H+ry5NI5xPOZ0uTtgo2ZdwUh/mtTnCVV10wxNrupLkZarZxzjb3qGk
zWzfp9n6qNkPdGDtCzjLIUY8jFzM/+Efj+sCAwEAAaOCAikwggIlMB0GA1UdDgQW
BBQVI3Ho/cjZQEQ6txFuZkdAgBbBszAfBgNVHSMEGDAWgBTfvNP4vKkZFcRTOiwK
acPTWy5ojTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAxNzUvMzd6VC1MeXBHUlhFVXpvc0NtbkQwMXN1YUkwLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMzd6VC1MeXBHUlhFVXpvc0NtbkQw
MXN1YUkwLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMTc1L0ZTTng2UDNJMlVCRU9yY1JibVpIUUlBV3diTS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E
AgACMAcDBQAkCwJQMA0GCSqGSIb3DQEBCwUAA4IBAQAxstcuFSyXLnNR6/aGzHsM
Ib7S7yw4LYjnzrNRmukEYQab2TzOajumw6jfQb0B2rB88q4zlGDw/u1sV7HLBw78
xS3XnZFiQUwTsUFL83Jd7U1MAKtNyQyBgXxy1HVY6j+Q2L9pdK0AZfzy1K1WnPyd
iwoPXyG7irWOzAq63WRj2ldw80ZNGCMczM7UsEsZovUPpNbs/wWC8Xq22WHt6zJa
MGukX3hdw6NZcZ5xxWDWAgzF+0GefDr8k6d2jEFx0Abl9GzCyblK6JTi8XBIoyOd
wa3a6b6FGRnBBIpVE7F5WsQWI3v0oqm7rF9uI90Ojtqi80x10b4qmNXyysNpMW0r
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:31 2024 by rpki-client on console-ams.rpki-client.org