Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30187/dROpUuAfdpbfc1XXBPaiCocZgDA.roa
File:                     dROpUuAfdpbfc1XXBPaiCocZgDA.roa (raw, json)
Hash identifier:          ho80zb7Zo2DPN0gmBdZQy3EQ7/AT5TnSvNtqNBUgsaw=
Subject key identifier:   75:13:A9:52:E0:1F:76:96:DF:73:55:D7:04:F6:A2:0A:87:19:80:30
Certificate issuer:       /CN=FC972C719F86C53B82DFBD681FB31F14CDABDCED
Certificate serial:       10
Authority key identifier: FC:97:2C:71:9F:86:C5:3B:82:DF:BD:68:1F:B3:1F:14:CD:AB:DC:ED
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_JcscZ-GxTuC371oH7MfFM2r3O0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30187/dROpUuAfdpbfc1XXBPaiCocZgDA.roa
Signing time:             Sat 02 Nov 2024 07:01:29 +0000
ROA not before:           Sat 02 Nov 2024 07:01:29 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     18278
IP address blocks:        2400:a300::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30187/_JcscZ-GxTuC371oH7MfFM2r3O0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30187/_JcscZ-GxTuC371oH7MfFM2r3O0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_JcscZ-GxTuC371oH7MfFM2r3O0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC972C719F86C53B82DFBD681FB31F14CDABDCED
        Validity
            Not Before: Nov  2 07:01:29 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=7513A952E01F7696DF7355D704F6A20A87198030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:19:52:29:56:e2:cc:10:d1:10:f4:a4:7f:38:
                    bf:f8:86:45:18:06:57:f0:2c:be:fc:11:47:09:21:
                    b8:92:f2:34:b5:be:35:7e:7c:80:40:67:f2:db:db:
                    a0:e9:d4:2a:71:5f:67:6f:4c:4b:ff:df:74:78:eb:
                    60:2f:8d:69:2e:90:a1:65:0b:af:40:c9:ac:21:0b:
                    63:9c:c0:06:bf:ec:d6:99:ee:92:90:85:8e:0a:85:
                    bc:2d:84:50:94:a2:54:cf:6f:d2:f2:19:72:c4:02:
                    56:0f:dc:f3:51:42:bd:ed:23:cb:2b:7c:75:4e:a8:
                    da:24:7d:3a:d8:8b:6e:0e:f1:b0:1b:1d:da:c5:7d:
                    14:21:bf:8b:92:79:5f:02:53:73:38:17:61:d7:05:
                    9a:0d:40:4e:a2:df:ae:7d:b8:61:e2:5b:ea:65:55:
                    7c:9a:22:d2:24:f2:e9:ff:ec:f2:cc:c8:a5:77:ff:
                    33:96:58:7a:c2:86:a4:eb:8a:56:14:ae:42:14:05:
                    00:e3:e9:cf:79:cc:88:e6:9f:63:10:cb:19:88:2c:
                    2d:d8:91:2d:a3:67:de:85:7c:fa:01:ec:0e:c0:4d:
                    03:d1:35:bb:57:2a:58:2d:8d:3b:f3:14:22:cf:ad:
                    76:eb:8a:5a:96:55:ed:15:79:8a:09:8f:2a:9c:1d:
                    1e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:13:A9:52:E0:1F:76:96:DF:73:55:D7:04:F6:A2:0A:87:19:80:30
            X509v3 Authority Key Identifier:
                keyid:FC:97:2C:71:9F:86:C5:3B:82:DF:BD:68:1F:B3:1F:14:CD:AB:DC:ED

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30187/_JcscZ-GxTuC371oH7MfFM2r3O0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_JcscZ-GxTuC371oH7MfFM2r3O0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30187/dROpUuAfdpbfc1XXBPaiCocZgDA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:a300::/32

    Signature Algorithm: sha256WithRSAEncryption
         da:8d:22:41:9a:db:0a:d8:82:af:64:61:07:2a:22:da:a9:4c:
         86:a2:4c:90:22:56:9c:86:82:f2:02:2b:c2:3a:04:cd:c2:61:
         9a:ad:2f:dc:07:74:4d:37:8f:6f:60:61:f3:1c:f8:4d:36:36:
         18:9c:5c:81:20:31:d9:a1:d8:4a:d5:24:26:66:af:dc:5f:b8:
         38:3c:5d:19:f3:02:c5:1b:a1:0b:99:4a:82:be:b7:ed:04:9f:
         5b:f0:0f:96:34:fc:a7:67:3a:7f:5f:a7:f0:d6:12:81:52:76:
         97:4e:2a:f4:c2:41:c1:3c:d1:ee:8a:b4:ca:23:f4:5d:ec:6b:
         60:62:33:b4:a9:8f:74:d1:7c:32:3b:4a:74:75:86:b2:3d:fe:
         0f:07:f9:d8:01:5a:6b:c9:bf:1e:ce:8a:dc:67:02:7d:bf:8e:
         f3:12:21:d6:6d:ea:6b:e6:d5:55:8b:a0:a5:bd:85:e1:66:87:
         96:02:28:3f:cd:34:5c:c9:1e:4a:ee:b8:63:60:82:8f:8e:29:
         97:8a:72:d9:d9:95:75:fb:5a:3a:02:3c:30:48:0c:e8:41:c4:
         00:b0:94:5c:8e:92:93:42:2b:fb:28:99:24:4e:7d:6a:4f:6e:
         f3:42:91:49:47:0c:81:13:2a:9e:b1:fd:95:c1:28:97:4f:df:
         c9:da:d2:ea
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIBEDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGQzk3
MkM3MTlGODZDNTNCODJERkJENjgxRkIzMUYxNENEQUJEQ0VEMB4XDTI0MTEwMjA3
MDEyOVoXDTI1MTAxNTAxMzAwMlowMzExMC8GA1UEAxMoNzUxM0E5NTJFMDFGNzY5
NkRGNzM1NUQ3MDRGNkEyMEE4NzE5ODAzMDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOYZUilW4swQ0RD0pH84v/iGRRgGV/AsvvwRRwkhuJLyNLW+NX58
gEBn8tvboOnUKnFfZ29MS//fdHjrYC+NaS6QoWULr0DJrCELY5zABr/s1pnukpCF
jgqFvC2EUJSiVM9v0vIZcsQCVg/c81FCve0jyyt8dU6o2iR9OtiLbg7xsBsd2sV9
FCG/i5J5XwJTczgXYdcFmg1ATqLfrn24YeJb6mVVfJoi0iTy6f/s8szIpXf/M5ZY
esKGpOuKVhSuQhQFAOPpz3nMiOafYxDLGYgsLdiRLaNn3oV8+gHsDsBNA9E1u1cq
WC2NO/MUIs+tduuKWpZV7RV5igmPKpwdHnUCAwEAAaOCAikwggIlMB0GA1UdDgQW
BBR1E6lS4B92lt9zVdcE9qIKhxmAMDAfBgNVHSMEGDAWgBT8lyxxn4bFO4LfvWgf
sx8Uzavc7TAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAxODcvX0pjc2NaLUd4VHVDMzcxb0g3TWZGTTJyM08wLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvX0pjc2NaLUd4VHVDMzcxb0g3TWZG
TTJyM08wLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMTg3L2RST3BVdUFmZHBiZmMxWFhCUGFpQ29jWmdEQS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E
AgACMAcDBQAkAKMAMA0GCSqGSIb3DQEBCwUAA4IBAQDajSJBmtsK2IKvZGEHKiLa
qUyGokyQIlachoLyAivCOgTNwmGarS/cB3RNN49vYGHzHPhNNjYYnFyBIDHZodhK
1SQmZq/cX7g4PF0Z8wLFG6ELmUqCvrftBJ9b8A+WNPynZzp/X6fw1hKBUnaXTir0
wkHBPNHuirTKI/Rd7GtgYjO0qY900XwyO0p0dYayPf4PB/nYAVpryb8ezorcZwJ9
v47zEiHWbepr5tVVi6ClvYXhZoeWAig/zTRcyR5K7rhjYIKPjimXinLZ2ZV1+1o6
AjwwSAzoQcQAsJRcjpKTQiv7KJkkTn1qT27zQpFJRwyBEyqesf2VwSiXT9/J2tLq
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:31 2024 by rpki-client on console-ams.rpki-client.org