Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30175/wzt1SeYZkHeiHvU88pgBnNbejV8.roa
File:                     wzt1SeYZkHeiHvU88pgBnNbejV8.roa (raw, json)
Hash identifier:          stXj8fH31frocodDoAtC7Le+bAkxni4chXVfnyWonys=
Subject key identifier:   C3:3B:75:49:E6:19:90:77:A2:1E:F5:3C:F2:98:01:9C:D6:DE:8D:5F
Certificate issuer:       /CN=DFBCD3F8BCA91915C4533A2C0A69C3D35B2E688D
Certificate serial:       11
Authority key identifier: DF:BC:D3:F8:BC:A9:19:15:C4:53:3A:2C:0A:69:C3:D3:5B:2E:68:8D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/37zT-LypGRXEUzosCmnD01suaI0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/wzt1SeYZkHeiHvU88pgBnNbejV8.roa
Signing time:             Tue 28 Nov 2023 04:11:28 +0000
ROA not before:           Tue 28 Nov 2023 04:11:28 +0000
ROA not after:            Thu 14 Nov 2024 01:30:03 +0000
asID:                     37899
IP address blocks:        240b:250::/32 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/37zT-LypGRXEUzosCmnD01suaI0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17 (0x11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFBCD3F8BCA91915C4533A2C0A69C3D35B2E688D
        Validity
            Not Before: Nov 28 04:11:28 2023 GMT
            Not After : Nov 14 01:30:03 2024 GMT
        Subject: CN=C33B7549E6199077A21EF53CF298019CD6DE8D5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6b:55:96:c1:0a:c7:f3:f3:e4:55:18:f1:bd:
                    ba:15:3f:61:f2:33:ee:00:a2:6c:b7:00:4f:11:9b:
                    99:36:22:c4:b5:4d:c9:27:ff:b8:50:2f:93:b3:92:
                    15:28:72:ad:9b:00:ed:59:ed:96:62:3e:b0:4b:bb:
                    75:a0:d3:43:74:7c:62:25:fe:93:03:5b:09:4a:86:
                    f3:3c:e0:7c:54:6c:1a:a6:78:77:a0:63:a6:ad:56:
                    60:a5:d0:fd:16:60:f9:5d:2b:56:35:f5:f3:3c:d8:
                    53:0f:24:03:50:e4:cf:04:ed:61:a7:fc:40:3c:e0:
                    d7:48:9d:d1:21:04:8b:37:c0:24:ba:0e:81:92:6e:
                    69:5a:77:4f:b5:99:aa:45:75:bb:18:0e:49:27:7d:
                    12:14:61:14:b2:e2:c8:ae:e1:63:8b:60:ef:fc:70:
                    5f:04:56:43:fa:91:67:ef:1a:cb:33:4d:f1:b0:78:
                    4d:d4:cc:2a:f4:5f:ea:9a:67:df:0e:74:3c:35:c8:
                    c7:77:6a:50:5e:86:5f:95:95:f6:3d:b8:97:21:d5:
                    b1:49:4e:be:de:e7:cb:0e:31:39:75:a0:a2:72:68:
                    ce:cb:6d:9b:87:dd:ad:aa:7d:27:47:a8:ce:ed:7a:
                    5b:d1:9f:69:0b:11:23:0a:dc:19:f3:ad:d4:b6:a4:
                    cc:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:3B:75:49:E6:19:90:77:A2:1E:F5:3C:F2:98:01:9C:D6:DE:8D:5F
            X509v3 Authority Key Identifier:
                keyid:DF:BC:D3:F8:BC:A9:19:15:C4:53:3A:2C:0A:69:C3:D3:5B:2E:68:8D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/37zT-LypGRXEUzosCmnD01suaI0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/37zT-LypGRXEUzosCmnD01suaI0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30175/wzt1SeYZkHeiHvU88pgBnNbejV8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  240b:250::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:c0:61:1e:39:18:da:4a:e2:28:8e:5c:a1:5b:ce:e7:a9:d3:
         7e:5d:57:db:f7:49:ec:1e:9f:d6:b5:28:a9:b1:8a:dd:ab:a6:
         19:49:a8:37:00:5c:92:6d:0e:c8:36:66:20:a4:10:bb:a1:53:
         5c:b8:15:2f:52:36:64:b2:aa:6a:4c:89:8d:79:0f:fe:44:f1:
         f3:d6:51:fc:92:0f:49:ba:3a:90:14:d0:6b:bd:63:f0:03:bb:
         c1:84:29:ad:b0:fb:fd:9a:ac:da:41:95:57:b9:f1:5f:1c:ac:
         fe:c2:d9:3c:db:ca:75:89:f2:c0:1c:57:36:cf:aa:00:69:8f:
         f6:cf:71:88:5a:d0:de:df:33:32:e6:f9:de:60:eb:51:e2:e2:
         1f:9a:bd:ea:e7:2f:37:71:68:d7:2d:88:2f:9b:5c:74:21:c9:
         e9:59:60:39:35:ba:39:e5:c5:e9:6d:08:72:98:68:5a:ea:63:
         a8:94:8f:b4:66:b4:63:73:3b:79:09:dc:bc:82:f9:1f:72:19:
         68:e3:4b:ed:96:1c:14:72:4e:73:13:98:96:5e:50:ad:32:be:
         fb:24:c2:96:59:9e:7b:13:67:c9:3f:c0:b7:52:e8:f1:2d:21:
         4e:47:20:52:fe:e5:f2:6d:b2:d6:7b:5b:40:cf:4b:15:d7:77:
         e1:85:36:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 15:06:34 2024 by rpki-client on console-ams.rpki-client.org