Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30175/TIgEuISRFfEagrWWcbN-Cs393yA.roa
File:                     TIgEuISRFfEagrWWcbN-Cs393yA.roa (raw, json)
Hash identifier:          7ilSKujXAyVV5OEcIQUSwxvxp6ql8d1uJtDVSXr37lA=
Subject key identifier:   4C:88:04:B8:84:91:15:F1:1A:82:B5:96:71:B3:7E:0A:CD:FD:DF:20
Certificate issuer:       /CN=DFBCD3F8BCA91915C4533A2C0A69C3D35B2E688D
Certificate serial:       13
Authority key identifier: DF:BC:D3:F8:BC:A9:19:15:C4:53:3A:2C:0A:69:C3:D3:5B:2E:68:8D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/37zT-LypGRXEUzosCmnD01suaI0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/TIgEuISRFfEagrWWcbN-Cs393yA.roa
Signing time:             Tue 28 Nov 2023 04:27:26 +0000
ROA not before:           Tue 28 Nov 2023 04:27:26 +0000
ROA not after:            Thu 14 Nov 2024 01:30:03 +0000
asID:                     37899
IP address blocks:        240b:252::/32 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/37zT-LypGRXEUzosCmnD01suaI0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19 (0x13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFBCD3F8BCA91915C4533A2C0A69C3D35B2E688D
        Validity
            Not Before: Nov 28 04:27:26 2023 GMT
            Not After : Nov 14 01:30:03 2024 GMT
        Subject: CN=4C8804B8849115F11A82B59671B37E0ACDFDDF20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:53:7f:a2:75:82:c7:dc:e2:e5:bb:e3:57:cf:
                    4d:4a:48:24:a5:21:48:9b:2c:be:82:d7:2b:09:63:
                    c2:e0:9e:b5:a6:37:54:c9:ff:eb:0f:c4:a5:50:43:
                    30:5e:2a:ae:2c:f9:23:a1:25:f6:c7:1d:10:08:a6:
                    f6:e5:84:2a:e8:c0:90:83:40:86:7d:80:33:3e:3b:
                    e7:7a:5a:57:f7:bd:ca:e7:49:b5:2e:d1:23:dd:7f:
                    e4:6a:d8:4b:0c:f6:c7:dc:9e:d7:e9:55:ef:1d:81:
                    f8:22:af:6c:7d:df:17:3b:4c:06:31:19:21:0a:21:
                    e2:63:94:7f:71:98:4b:4b:b2:0c:62:a7:95:06:4f:
                    3e:23:4d:cd:16:aa:08:a0:e6:53:52:cd:c5:3f:4b:
                    eb:1f:c5:dd:e0:6f:d3:a1:df:ef:3a:d4:19:29:c3:
                    64:f8:2e:40:6c:6d:84:28:f2:75:c9:b8:64:f7:fc:
                    1f:dd:16:87:a1:26:54:da:98:de:e5:2d:a0:92:24:
                    cb:93:de:28:81:66:2c:5b:3e:d8:33:af:7b:37:c6:
                    db:6f:eb:0b:54:06:a7:36:fd:5e:19:72:2c:db:d7:
                    91:16:a5:6b:7e:52:17:77:a5:ed:94:d1:08:78:70:
                    e9:bb:73:2a:f6:fb:8c:24:d9:8a:5c:64:44:1d:4d:
                    a5:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:88:04:B8:84:91:15:F1:1A:82:B5:96:71:B3:7E:0A:CD:FD:DF:20
            X509v3 Authority Key Identifier:
                keyid:DF:BC:D3:F8:BC:A9:19:15:C4:53:3A:2C:0A:69:C3:D3:5B:2E:68:8D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/37zT-LypGRXEUzosCmnD01suaI0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/TIgEuISRFfEagrWWcbN-Cs393yA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240b:252::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:3b:62:8e:39:92:24:d4:fa:41:6b:a6:21:76:cb:07:4c:0d:
         73:08:18:30:b8:eb:1a:17:b8:8d:1c:d3:91:f8:92:b0:48:6f:
         0b:94:c2:46:2d:e3:fb:b0:3c:1a:ec:65:7a:cf:18:00:b1:76:
         b6:8c:b8:4c:11:fb:f4:d0:59:6b:48:63:3e:4c:7d:5c:a8:9f:
         cb:72:80:65:0f:fd:ea:04:91:d1:ff:8f:e3:f5:71:3f:4c:87:
         2a:c0:49:37:b4:4a:fb:6d:f2:b2:1b:20:17:66:86:35:d0:06:
         34:af:4f:38:e2:7b:aa:f2:27:59:7a:bb:f5:8a:f7:92:24:9d:
         50:e7:70:b6:17:3e:57:ce:a2:90:39:34:b7:dc:b4:c6:dc:d7:
         c7:8a:67:fe:c1:ad:03:77:11:f2:f7:b5:f8:86:e2:53:02:c3:
         f4:c4:0d:ed:34:4b:01:2e:6c:08:f2:6a:7f:3e:4d:f9:5a:76:
         19:42:fe:6e:2e:eb:3b:f7:b0:3f:85:68:e6:e4:f6:02:81:47:
         d7:8b:49:a3:6b:ed:66:74:22:b1:11:21:30:eb:1b:8c:85:0f:
         0b:19:e1:e4:c8:8d:5e:04:a9:de:44:82:9e:97:2e:c5:64:f9:
         d0:b2:be:82:71:41:f3:5b:02:98:6c:8b:aa:8a:6e:e4:29:0c:
         06:18:c9:e4
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIBEzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhERkJD
RDNGOEJDQTkxOTE1QzQ1MzNBMkMwQTY5QzNEMzVCMkU2ODhEMB4XDTIzMTEyODA0
MjcyNloXDTI0MTExNDAxMzAwM1owMzExMC8GA1UEAxMoNEM4ODA0Qjg4NDkxMTVG
MTFBODJCNTk2NzFCMzdFMEFDREZEREYyMDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAO9Tf6J1gsfc4uW741fPTUpIJKUhSJssvoLXKwljwuCetaY3VMn/
6w/EpVBDMF4qriz5I6El9scdEAim9uWEKujAkINAhn2AMz4753paV/e9yudJtS7R
I91/5GrYSwz2x9ye1+lV7x2B+CKvbH3fFztMBjEZIQoh4mOUf3GYS0uyDGKnlQZP
PiNNzRaqCKDmU1LNxT9L6x/F3eBv06Hf7zrUGSnDZPguQGxthCjydcm4ZPf8H90W
h6EmVNqY3uUtoJIky5PeKIFmLFs+2DOvezfG22/rC1QGpzb9XhlyLNvXkRala35S
F3el7ZTRCHhw6btzKvb7jCTZilxkRB1NpeUCAwEAAaOCAikwggIlMB0GA1UdDgQW
BBRMiAS4hJEV8RqCtZZxs34Kzf3fIDAfBgNVHSMEGDAWgBTfvNP4vKkZFcRTOiwK
acPTWy5ojTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAxNzUvMzd6VC1MeXBHUlhFVXpvc0NtbkQwMXN1YUkwLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMzd6VC1MeXBHUlhFVXpvc0NtbkQw
MXN1YUkwLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMTc1L1RJZ0V1SVNSRmZFYWdyV1djYk4tQ3MzOTN5QS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E
AgACMAcDBQAkCwJSMA0GCSqGSIb3DQEBCwUAA4IBAQA5O2KOOZIk1PpBa6YhdssH
TA1zCBgwuOsaF7iNHNOR+JKwSG8LlMJGLeP7sDwa7GV6zxgAsXa2jLhMEfv00Flr
SGM+TH1cqJ/LcoBlD/3qBJHR/4/j9XE/TIcqwEk3tEr7bfKyGyAXZoY10AY0r084
4nuq8idZerv1iveSJJ1Q53C2Fz5XzqKQOTS33LTG3NfHimf+wa0DdxHy97X4huJT
AsP0xA3tNEsBLmwI8mp/Pk35WnYZQv5uLus797A/hWjm5PYCgUfXi0mja+1mdCKx
ESEw6xuMhQ8LGeHkyI1eBKneRIKely7FZPnQsr6CcUHzWwKYbIuqim7kKQwGGMnk
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:45 2024 by rpki-client on console-fra.rpki-client.org