Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30278/B238lFEevJPp49IyXwsaCmgApwM.roa
File:                     B238lFEevJPp49IyXwsaCmgApwM.roa (raw, json)
Hash identifier:          V+/Rr3vyfnSTl2k90FUiBJWa6zXqXFHcPhztpZsfA8I=
Subject key identifier:   07:6D:FC:94:51:1E:BC:93:E9:E3:D2:32:5F:0B:1A:0A:68:00:A7:03
Certificate issuer:       /CN=0B362BBEE67B929BB502A2AD011A1AA7C00D57BB
Certificate serial:       13
Authority key identifier: 0B:36:2B:BE:E6:7B:92:9B:B5:02:A2:AD:01:1A:1A:A7:C0:0D:57:BB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CzYrvuZ7kpu1AqKtARoap8ANV7s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30278/B238lFEevJPp49IyXwsaCmgApwM.roa
Signing time:             Wed 05 Jun 2024 07:13:02 +0000
ROA not before:           Wed 05 Jun 2024 07:13:02 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     0
IP address blocks:        2403:c780:7200::/48 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30278/CzYrvuZ7kpu1AqKtARoap8ANV7s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30278/CzYrvuZ7kpu1AqKtARoap8ANV7s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CzYrvuZ7kpu1AqKtARoap8ANV7s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 20:13:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19 (0x13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B362BBEE67B929BB502A2AD011A1AA7C00D57BB
        Validity
            Not Before: Jun  5 07:13:02 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=076DFC94511EBC93E9E3D2325F0B1A0A6800A703
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ab:19:3d:ed:5a:25:7b:af:1b:ef:f7:f0:ec:
                    19:e4:3a:66:59:4b:12:4b:ff:6d:83:c2:cc:27:f0:
                    30:89:6f:85:3d:33:c5:3c:9c:12:d3:cb:95:9b:b9:
                    5c:74:89:fd:e2:9d:ad:34:c5:eb:63:82:3d:d6:69:
                    bf:e0:09:41:54:04:23:e6:f0:cb:d9:34:55:74:47:
                    85:22:f5:4d:b3:9a:ee:4d:7a:51:3b:72:46:32:c6:
                    c8:75:85:3b:eb:80:fc:94:56:5a:10:2d:1b:90:cd:
                    21:90:96:01:ca:56:88:16:18:f0:c7:75:8e:1c:9b:
                    92:a3:2e:d9:41:f9:ad:26:7d:2b:65:60:95:fa:a2:
                    59:84:3a:fd:15:14:9f:5a:b2:cb:f0:bd:a4:57:7c:
                    05:d8:99:86:42:e1:79:9f:ce:7c:64:56:fd:7b:62:
                    7b:cf:79:b5:45:13:50:66:54:00:f0:77:c4:80:ee:
                    57:95:a9:b5:1c:19:73:01:ec:01:3b:c6:35:33:04:
                    59:f6:55:73:5b:2c:fc:42:d3:5f:ac:e0:30:67:7c:
                    39:7f:00:2c:f3:5a:e3:d5:80:1f:31:c6:ab:22:2f:
                    3e:da:00:0b:a1:ba:8b:41:59:03:e3:6c:26:1d:33:
                    62:66:db:9b:0e:b4:e6:8d:89:70:41:d6:24:9b:e4:
                    41:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:6D:FC:94:51:1E:BC:93:E9:E3:D2:32:5F:0B:1A:0A:68:00:A7:03
            X509v3 Authority Key Identifier:
                keyid:0B:36:2B:BE:E6:7B:92:9B:B5:02:A2:AD:01:1A:1A:A7:C0:0D:57:BB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30278/CzYrvuZ7kpu1AqKtARoap8ANV7s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CzYrvuZ7kpu1AqKtARoap8ANV7s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30278/B238lFEevJPp49IyXwsaCmgApwM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:c780:7200::/48

    Signature Algorithm: sha256WithRSAEncryption
         1e:1c:a7:e2:a8:a1:65:39:02:00:d6:79:25:4f:18:83:48:e5:
         bc:1c:2f:a0:90:83:23:92:b6:30:92:0c:79:de:d8:5e:65:be:
         ce:87:58:6b:a2:97:3a:99:67:76:0c:1e:19:e7:b9:0a:c7:d4:
         17:36:5b:92:af:16:87:69:aa:ba:4c:b6:21:5c:00:77:e1:b1:
         f5:a1:04:09:e4:3e:13:66:ef:54:bd:e6:76:84:6f:d0:09:e7:
         8f:49:c0:17:97:a7:78:cf:00:03:6f:84:12:70:d9:b9:db:7e:
         68:d3:9f:b5:09:00:dd:c9:0f:c8:49:35:d9:d4:98:4e:cc:88:
         59:21:0b:03:4f:a0:dc:79:42:26:79:a3:f6:98:eb:ab:4e:df:
         cd:63:50:e1:c0:7e:56:35:c5:1c:2a:d1:51:4d:8e:d7:7f:d3:
         c6:8e:4f:df:a0:9f:94:2d:49:dd:ed:68:f5:5e:c5:6c:30:00:
         6a:ec:45:ec:2b:f0:dc:e8:38:ca:c7:e3:e8:a4:85:10:ba:c7:
         ba:66:23:21:0c:be:d5:b9:d8:1d:3d:be:84:11:c2:c5:de:cb:
         3e:ad:40:ba:3d:6a:54:7f:af:f4:f1:95:c9:16:51:f2:21:42:
         41:89:58:31:d9:ff:90:a1:a5:f3:c7:22:7f:2d:b1:01:89:55:
         d2:a6:30:99
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgIBEzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwQjM2
MkJCRUU2N0I5MjlCQjUwMkEyQUQwMTFBMUFBN0MwMEQ1N0JCMB4XDTI0MDYwNTA3
MTMwMloXDTI1MDUxNTAxMzAwM1owMzExMC8GA1UEAxMoMDc2REZDOTQ1MTFFQkM5
M0U5RTNEMjMyNUYwQjFBMEE2ODAwQTcwMzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKmrGT3tWiV7rxvv9/DsGeQ6ZllLEkv/bYPCzCfwMIlvhT0zxTyc
EtPLlZu5XHSJ/eKdrTTF62OCPdZpv+AJQVQEI+bwy9k0VXRHhSL1TbOa7k16UTty
RjLGyHWFO+uA/JRWWhAtG5DNIZCWAcpWiBYY8Md1jhybkqMu2UH5rSZ9K2Vglfqi
WYQ6/RUUn1qyy/C9pFd8BdiZhkLheZ/OfGRW/Xtie895tUUTUGZUAPB3xIDuV5Wp
tRwZcwHsATvGNTMEWfZVc1ss/ELTX6zgMGd8OX8ALPNa49WAHzHGqyIvPtoAC6G6
i0FZA+NsJh0zYmbbmw605o2JcEHWJJvkQV8CAwEAAaOCAiswggInMB0GA1UdDgQW
BBQHbfyUUR68k+nj0jJfCxoKaACnAzAfBgNVHSMEGDAWgBQLNiu+5nuSm7UCoq0B
GhqnwA1XuzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAyNzgvQ3pZcnZ1WjdrcHUxQXFLdEFSb2FwOEFOVjdzLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvQ3pZcnZ1WjdrcHUxQXFLdEFSb2Fw
OEFOVjdzLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMjc4L0IyMzhsRkVldkpQcDQ5SXlYd3NhQ21nQXB3TS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwAkA8eAcgAwDQYJKoZIhvcNAQELBQADggEBAB4cp+KooWU5AgDWeSVP
GINI5bwcL6CQgyOStjCSDHne2F5lvs6HWGuilzqZZ3YMHhnnuQrH1Bc2W5KvFodp
qrpMtiFcAHfhsfWhBAnkPhNm71S95naEb9AJ549JwBeXp3jPAANvhBJw2bnbfmjT
n7UJAN3JD8hJNdnUmE7MiFkhCwNPoNx5QiZ5o/aY66tO381jUOHAflY1xRwq0VFN
jtd/08aOT9+gn5QtSd3taPVexWwwAGrsRewr8NzoOMrH4+ikhRC6x7pmIyEMvtW5
2B09voQRwsXeyz6tQLo9alR/r/TxlckWUfIhQkGJWDHZ/5ChpfPHIn8tsQGJVdKm
MJk=
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:34:39 2024 by rpki-client on console-ams.rpki-client.org