Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30267/ufwLTSaaAG0VoNGVkMuXtV-h7hk.roa
File:                     ufwLTSaaAG0VoNGVkMuXtV-h7hk.roa (raw, json)
Hash identifier:          XXjwvQ75mqp8bWLJ/Rd4dUGXIf0eBI9crWezSW/oldY=
Subject key identifier:   B9:FC:0B:4D:26:9A:00:6D:15:A0:D1:95:90:CB:97:B5:5F:A1:EE:19
Certificate issuer:       /CN=AB99FE69A832191F847C33B243442E9D68AD1433
Certificate serial:       46
Authority key identifier: AB:99:FE:69:A8:32:19:1F:84:7C:33:B2:43:44:2E:9D:68:AD:14:33
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/q5n-aagyGR-EfDOyQ0QunWitFDM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30267/ufwLTSaaAG0VoNGVkMuXtV-h7hk.roa
Signing time:             Sun 31 Mar 2024 01:30:11 +0000
ROA not before:           Sun 31 Mar 2024 01:30:11 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     59103
IP address blocks:        2401:af80:9011::/56 maxlen: 56

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30267/q5n-aagyGR-EfDOyQ0QunWitFDM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30267/q5n-aagyGR-EfDOyQ0QunWitFDM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/q5n-aagyGR-EfDOyQ0QunWitFDM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:58:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70 (0x46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB99FE69A832191F847C33B243442E9D68AD1433
        Validity
            Not Before: Mar 31 01:30:11 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=B9FC0B4D269A006D15A0D19590CB97B55FA1EE19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1c:28:36:4b:cb:44:ce:b7:a0:5a:83:e2:e0:
                    68:25:8d:dd:8d:75:03:e9:68:85:07:06:b0:04:42:
                    ae:eb:22:b3:1c:68:0b:90:5c:8f:73:ff:66:af:ee:
                    ce:61:c3:77:f5:40:f5:8b:a8:73:c8:c3:b3:4f:96:
                    cb:08:f0:84:bc:d2:b8:5f:83:b2:e8:65:b3:49:5c:
                    12:1c:2e:99:73:b8:8b:d0:5f:b0:50:cf:88:69:c2:
                    79:45:77:a1:dc:dc:f8:06:07:21:e7:c1:57:13:95:
                    39:3a:f1:bd:fa:5c:18:bf:3c:85:de:08:5d:26:80:
                    9f:3f:6a:de:41:62:9c:e3:e4:4e:cc:b6:d5:ab:7e:
                    e5:1b:eb:f3:ee:ab:07:88:49:3e:36:51:33:ed:a5:
                    15:a8:2c:93:d1:2c:fd:92:8d:f2:1e:ac:3e:80:59:
                    15:ae:65:fb:c9:10:d9:b3:1d:0d:85:e0:f9:b6:58:
                    2a:4d:5e:df:22:f3:5a:2d:98:25:85:5f:82:d8:08:
                    09:fe:c8:f3:a3:10:a3:59:4a:88:c6:cb:f9:57:69:
                    99:0c:6d:3a:e4:94:72:e8:19:80:e0:76:1b:de:80:
                    06:27:bf:64:7b:7d:1a:73:ce:ab:27:fc:77:48:0d:
                    52:bb:58:8f:59:8b:0c:64:ac:e3:80:52:2a:88:05:
                    94:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:FC:0B:4D:26:9A:00:6D:15:A0:D1:95:90:CB:97:B5:5F:A1:EE:19
            X509v3 Authority Key Identifier:
                keyid:AB:99:FE:69:A8:32:19:1F:84:7C:33:B2:43:44:2E:9D:68:AD:14:33

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30267/q5n-aagyGR-EfDOyQ0QunWitFDM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/q5n-aagyGR-EfDOyQ0QunWitFDM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30267/ufwLTSaaAG0VoNGVkMuXtV-h7hk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:af80:9011::/56

    Signature Algorithm: sha256WithRSAEncryption
         98:b6:37:33:35:f8:1a:ce:2b:c6:fc:b4:bc:13:17:32:c6:ff:
         fd:5f:4d:1c:19:f6:a6:55:d4:b8:b0:98:dc:1f:6f:76:bd:7a:
         3e:51:15:a2:51:1e:db:46:8a:e9:b0:a7:e7:6e:9a:c9:af:b2:
         7a:2a:2d:87:15:55:16:3c:35:ed:fb:58:aa:a9:77:99:21:87:
         ab:3b:7b:a8:b3:10:89:eb:8e:dd:fb:43:76:76:30:0e:88:30:
         de:b5:a6:a3:a2:f8:d8:af:6d:f0:38:15:71:48:28:fe:83:35:
         07:19:c9:c0:c4:e3:ab:59:19:a9:29:10:06:65:f0:b9:d6:97:
         86:10:49:3f:44:97:11:26:22:5f:9a:25:02:51:af:22:9d:c3:
         0a:ce:07:1e:33:fa:35:02:e6:ba:d6:82:48:fc:7f:ee:d2:1e:
         71:cf:04:1c:43:09:76:ed:24:ef:95:bc:7a:6a:84:97:8c:43:
         fd:97:9e:17:af:5e:55:73:7e:94:37:85:2a:ac:c7:4f:07:45:
         08:b3:8b:7c:7d:71:28:0f:2f:e0:c6:d2:79:b8:73:76:a0:eb:
         f5:b7:9b:0c:69:f1:57:e0:70:e8:17:94:d0:5b:8d:b7:b6:3d:
         cf:c5:f9:5b:bc:7f:23:d4:e9:dc:fb:8d:d4:56:20:21:a2:76:
         ce:6a:57:98
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgIBRjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBQjk5
RkU2OUE4MzIxOTFGODQ3QzMzQjI0MzQ0MkU5RDY4QUQxNDMzMB4XDTI0MDMzMTAx
MzAxMVoXDTI1MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoQjlGQzBCNEQyNjlBMDA2
RDE1QTBEMTk1OTBDQjk3QjU1RkExRUUxOTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALscKDZLy0TOt6Bag+LgaCWN3Y11A+lohQcGsARCrusisxxoC5Bc
j3P/Zq/uzmHDd/VA9Yuoc8jDs0+WywjwhLzSuF+Dsuhls0lcEhwumXO4i9BfsFDP
iGnCeUV3odzc+AYHIefBVxOVOTrxvfpcGL88hd4IXSaAnz9q3kFinOPkTsy21at+
5Rvr8+6rB4hJPjZRM+2lFagsk9Es/ZKN8h6sPoBZFa5l+8kQ2bMdDYXg+bZYKk1e
3yLzWi2YJYVfgtgICf7I86MQo1lKiMbL+VdpmQxtOuSUcugZgOB2G96ABie/ZHt9
GnPOqyf8d0gNUrtYj1mLDGSs44BSKogFlHkCAwEAAaOCAiwwggIoMB0GA1UdDgQW
BBS5/AtNJpoAbRWg0ZWQy5e1X6HuGTAfBgNVHSMEGDAWgBSrmf5pqDIZH4R8M7JD
RC6daK0UMzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAyNjcvcTVuLWFhZ3lHUi1FZkRPeVEwUXVuV2l0RkRNLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvcTVuLWFhZ3lHUi1FZkRPeVEwUXVu
V2l0RkRNLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMjY3L3Vmd0xUU2FhQUcwVm9OR1ZrTXVYdFYtaDdoay5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIwYIKwYBBQUHAQcBAf8EFDASMBAE
AgACMAoDCAAkAa+AkBEAMA0GCSqGSIb3DQEBCwUAA4IBAQCYtjczNfgazivG/LS8
Excyxv/9X00cGfamVdS4sJjcH292vXo+URWiUR7bRorpsKfnbprJr7J6Ki2HFVUW
PDXt+1iqqXeZIYerO3uosxCJ647d+0N2djAOiDDetaajovjYr23wOBVxSCj+gzUH
GcnAxOOrWRmpKRAGZfC51peGEEk/RJcRJiJfmiUCUa8incMKzgceM/o1Aua61oJI
/H/u0h5xzwQcQwl27STvlbx6aoSXjEP9l54Xr15Vc36UN4UqrMdPB0UIs4t8fXEo
Dy/gxtJ5uHN2oOv1t5sMafFX4HDoF5TQW423tj3PxflbvH8j1Onc+43UViAhonbO
aleY
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:21:17 2024 by rpki-client on console-ams.rpki-client.org