Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30305/mWuDsyoswrYNdUss3oLMuoeC-8A.roa
File:                     mWuDsyoswrYNdUss3oLMuoeC-8A.roa (raw, json)
Hash identifier:          aB/m6/6k2GkyqpqzW9yGRJ659EJuJCR7LOrI85CAHnw=
Subject key identifier:   99:6B:83:B3:2A:2C:C2:B6:0D:75:4B:2C:DE:82:CC:BA:87:82:FB:C0
Certificate issuer:       /CN=F9702167D1CAF36891642C8BB6206EBD407D4AA4
Certificate serial:       02
Authority key identifier: F9:70:21:67:D1:CA:F3:68:91:64:2C:8B:B6:20:6E:BD:40:7D:4A:A4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-XAhZ9HK82iRZCyLtiBuvUB9SqQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30305/mWuDsyoswrYNdUss3oLMuoeC-8A.roa
Signing time:             Tue 26 Sep 2023 07:01:51 +0000
ROA not before:           Tue 26 Sep 2023 07:01:51 +0000
ROA not after:            Wed 25 Sep 2024 06:05:46 +0000
asID:                     17941
IP address blocks:        2402:c600::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30305/-XAhZ9HK82iRZCyLtiBuvUB9SqQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30305/-XAhZ9HK82iRZCyLtiBuvUB9SqQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-XAhZ9HK82iRZCyLtiBuvUB9SqQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9702167D1CAF36891642C8BB6206EBD407D4AA4
        Validity
            Not Before: Sep 26 07:01:51 2023 GMT
            Not After : Sep 25 06:05:46 2024 GMT
        Subject: CN=996B83B32A2CC2B60D754B2CDE82CCBA8782FBC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:43:86:d4:7c:e9:ef:b6:dd:5a:6c:9a:da:14:
                    92:04:cf:71:8c:c1:c8:44:6c:9e:bd:ff:b5:12:12:
                    00:7f:9d:10:ba:90:e6:1c:53:3d:f0:83:06:47:9a:
                    fd:1f:e7:4f:68:d2:f8:74:ec:94:f4:94:a0:9d:28:
                    bb:ce:35:a7:4f:1f:1f:5c:aa:20:8c:22:c1:44:82:
                    09:b4:cb:7d:d1:bd:58:79:cb:db:71:be:35:9a:de:
                    41:20:66:8d:8a:63:60:ff:d4:36:a0:af:4d:9f:37:
                    e5:20:24:e7:71:58:93:33:9e:04:67:6e:10:15:22:
                    08:57:30:64:72:35:50:f2:cd:d9:b7:23:94:d8:03:
                    f9:30:8a:66:17:5c:cf:6f:9f:47:48:f3:be:08:77:
                    b1:79:d6:67:54:62:43:51:0c:3e:54:0a:47:f0:94:
                    33:bb:c6:13:88:b1:bf:23:22:66:3d:a9:f1:3e:21:
                    a3:ad:df:2e:ff:4f:68:df:a7:1a:34:4c:8f:eb:94:
                    82:91:f3:10:36:18:1c:7c:29:15:9b:42:1b:9e:2a:
                    4b:34:18:e3:01:6a:4e:b7:e6:7d:ea:2c:19:b9:35:
                    01:ac:81:39:d7:a8:ef:95:5c:93:29:19:41:a5:65:
                    9e:4d:1d:79:2f:09:bd:db:ab:9e:3c:55:87:53:3d:
                    a0:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:6B:83:B3:2A:2C:C2:B6:0D:75:4B:2C:DE:82:CC:BA:87:82:FB:C0
            X509v3 Authority Key Identifier:
                keyid:F9:70:21:67:D1:CA:F3:68:91:64:2C:8B:B6:20:6E:BD:40:7D:4A:A4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30305/-XAhZ9HK82iRZCyLtiBuvUB9SqQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-XAhZ9HK82iRZCyLtiBuvUB9SqQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30305/mWuDsyoswrYNdUss3oLMuoeC-8A.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:c600::/32

    Signature Algorithm: sha256WithRSAEncryption
         af:a4:e3:df:d8:b9:7a:f0:86:0f:3b:ea:fe:95:90:fe:d0:29:
         91:f9:31:87:ba:aa:89:04:3d:a6:9f:ce:c8:79:51:82:a6:ab:
         23:13:fc:41:43:45:5e:26:14:e9:8b:73:38:b5:47:57:71:54:
         7e:2c:64:4e:30:1a:84:25:1f:32:a5:b6:b2:b3:9e:67:54:41:
         ad:f3:82:d9:53:21:ed:30:ee:23:87:87:48:55:c3:94:25:91:
         26:04:8f:42:fe:36:93:5d:ad:05:68:81:8f:45:83:b0:fc:a6:
         0b:e1:68:1c:98:b9:11:37:47:cd:5d:79:e2:1e:7a:ee:1a:ec:
         05:1a:92:04:99:4b:59:40:64:ff:64:71:1c:3b:6a:d6:dc:b1:
         c1:40:e8:a5:03:f7:2c:59:83:9b:ef:94:54:2d:42:2a:af:95:
         63:81:f0:7f:49:4e:39:f8:a1:e0:60:e1:c2:79:95:3f:2d:b3:
         69:14:b1:ca:a3:3e:98:7f:98:e4:09:f2:56:3d:d1:81:9b:f6:
         37:56:15:39:04:4f:61:2d:b9:bf:f3:a7:0d:dd:9e:63:2c:96:
         e0:1e:b0:81:d1:9b:82:90:8c:06:8e:32:3b:54:c3:45:60:4e:
         b3:e4:cb:53:16:a2:5d:68:8b:b2:c2:f6:c5:5f:37:d9:58:15:
         59:fe:24:80
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGOTcw
MjE2N0QxQ0FGMzY4OTE2NDJDOEJCNjIwNkVCRDQwN0Q0QUE0MB4XDTIzMDkyNjA3
MDE1MVoXDTI0MDkyNTA2MDU0NlowMzExMC8GA1UEAxMoOTk2QjgzQjMyQTJDQzJC
NjBENzU0QjJDREU4MkNDQkE4NzgyRkJDMDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOhDhtR86e+23VpsmtoUkgTPcYzByERsnr3/tRISAH+dELqQ5hxT
PfCDBkea/R/nT2jS+HTslPSUoJ0ou841p08fH1yqIIwiwUSCCbTLfdG9WHnL23G+
NZreQSBmjYpjYP/UNqCvTZ835SAk53FYkzOeBGduEBUiCFcwZHI1UPLN2bcjlNgD
+TCKZhdcz2+fR0jzvgh3sXnWZ1RiQ1EMPlQKR/CUM7vGE4ixvyMiZj2p8T4ho63f
Lv9PaN+nGjRMj+uUgpHzEDYYHHwpFZtCG54qSzQY4wFqTrfmfeosGbk1AayBOdeo
75VckykZQaVlnk0deS8JvdurnjxVh1M9oA8CAwEAAaOCAikwggIlMB0GA1UdDgQW
BBSZa4OzKizCtg11Syzegsy6h4L7wDAfBgNVHSMEGDAWgBT5cCFn0crzaJFkLIu2
IG69QH1KpDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAzMDUvLVhBaFo5SEs4MmlSWkN5THRpQnV2VUI5U3FRLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvLVhBaFo5SEs4MmlSWkN5THRpQnV2
VUI5U3FRLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMzA1L21XdURzeW9zd3JZTmRVc3Mzb0xNdW9lQy04QS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E
AgACMAcDBQAkAsYAMA0GCSqGSIb3DQEBCwUAA4IBAQCvpOPf2Ll68IYPO+r+lZD+
0CmR+TGHuqqJBD2mn87IeVGCpqsjE/xBQ0VeJhTpi3M4tUdXcVR+LGROMBqEJR8y
pbays55nVEGt84LZUyHtMO4jh4dIVcOUJZEmBI9C/jaTXa0FaIGPRYOw/KYL4Wgc
mLkRN0fNXXniHnruGuwFGpIEmUtZQGT/ZHEcO2rW3LHBQOilA/csWYOb75RULUIq
r5VjgfB/SU45+KHgYOHCeZU/LbNpFLHKoz6Yf5jkCfJWPdGBm/Y3VhU5BE9hLbm/
86cN3Z5jLJbgHrCB0ZuCkIwGjjI7VMNFYE6z5MtTFqJdaIuywvbFXzfZWBVZ/iSA
-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:28 2024 by rpki-client on console-ams.rpki-client.org