Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30306/jBMIGz9NKRbUalhzXC_Nd6gR4Kg.roa
File:                     jBMIGz9NKRbUalhzXC_Nd6gR4Kg.roa (raw, json)
Hash identifier:          TJShkEra4NNcja4CKShHVEC3+dIHNJ6RgCTEvd/CQkc=
Subject key identifier:   8C:13:08:1B:3F:4D:29:16:D4:6A:58:73:5C:2F:CD:77:A8:11:E0:A8
Certificate issuer:       /CN=9D8244049D9BCBBB9F587AD3A34C68C40FD8CB6B
Certificate serial:       02
Authority key identifier: 9D:82:44:04:9D:9B:CB:BB:9F:58:7A:D3:A3:4C:68:C4:0F:D8:CB:6B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nYJEBJ2by7ufWHrTo0xoxA_Yy2s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30306/jBMIGz9NKRbUalhzXC_Nd6gR4Kg.roa
Signing time:             Tue 26 Sep 2023 06:59:48 +0000
ROA not before:           Tue 26 Sep 2023 06:59:48 +0000
ROA not after:            Wed 25 Sep 2024 06:27:31 +0000
asID:                     23637
IP address blocks:        2402:3000::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30306/nYJEBJ2by7ufWHrTo0xoxA_Yy2s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30306/nYJEBJ2by7ufWHrTo0xoxA_Yy2s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nYJEBJ2by7ufWHrTo0xoxA_Yy2s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D8244049D9BCBBB9F587AD3A34C68C40FD8CB6B
        Validity
            Not Before: Sep 26 06:59:48 2023 GMT
            Not After : Sep 25 06:27:31 2024 GMT
        Subject: CN=8C13081B3F4D2916D46A58735C2FCD77A811E0A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:27:9a:ec:75:10:74:ea:dd:ca:52:5d:11:3d:
                    d3:23:82:be:94:d8:a1:0f:0b:52:15:6e:c3:d7:41:
                    3d:ef:6d:04:f0:d3:91:51:b0:cd:c0:33:61:53:00:
                    6a:d1:b9:ea:95:48:97:ea:54:e8:f7:d7:13:82:b0:
                    3e:17:91:bf:97:3b:ac:35:97:15:1f:4c:ee:c2:02:
                    41:ef:2f:c7:7b:d2:06:93:74:74:ba:86:e9:2d:39:
                    27:b5:a0:15:94:f7:96:40:f8:32:97:e1:d8:57:7c:
                    cc:cd:ea:33:70:26:6d:ac:db:5d:4a:da:0b:27:f8:
                    86:3b:25:8f:4d:f4:bb:8f:5c:f3:4b:86:7f:d7:8b:
                    dc:0c:38:70:5f:22:3f:42:5a:bb:98:a0:e2:f2:8a:
                    d5:af:8a:d9:71:25:c7:91:51:0d:e7:70:d3:cb:6a:
                    bd:f0:9e:8a:3d:03:9f:51:30:a8:af:de:d7:9b:97:
                    ec:40:3d:b7:fb:c1:71:b0:91:16:8d:14:2c:d8:41:
                    9d:1b:b6:15:e6:a0:77:4e:5d:3d:63:a9:d3:8b:3f:
                    f3:96:a6:c3:d7:a5:7b:43:be:73:75:43:57:b5:83:
                    dd:e5:12:83:8e:e2:8e:6d:50:a1:81:41:95:87:e6:
                    3a:16:d6:7c:66:23:92:c5:c9:fb:68:ed:bf:68:0a:
                    35:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:13:08:1B:3F:4D:29:16:D4:6A:58:73:5C:2F:CD:77:A8:11:E0:A8
            X509v3 Authority Key Identifier:
                keyid:9D:82:44:04:9D:9B:CB:BB:9F:58:7A:D3:A3:4C:68:C4:0F:D8:CB:6B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30306/nYJEBJ2by7ufWHrTo0xoxA_Yy2s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nYJEBJ2by7ufWHrTo0xoxA_Yy2s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30306/jBMIGz9NKRbUalhzXC_Nd6gR4Kg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:3000::/32

    Signature Algorithm: sha256WithRSAEncryption
         4c:04:fd:03:38:26:f3:fb:b3:0e:cd:61:b1:eb:46:50:99:93:
         94:f1:1e:b2:0d:1d:e5:27:0b:70:33:ad:dc:c9:c4:f6:57:1d:
         38:e0:12:2d:6b:8d:ea:b8:94:90:65:7b:3f:67:c3:14:d2:7b:
         8a:a7:11:90:2c:af:a2:7d:f1:cf:d7:e9:43:1e:63:2c:fc:bd:
         a5:cb:d7:9d:f9:2c:8a:d6:f0:a7:65:db:26:1d:27:f6:5a:60:
         b7:31:4d:ed:af:2a:d9:49:f8:4d:9a:b0:c0:3a:49:78:c4:ce:
         77:5a:dc:16:72:d3:28:1d:57:00:5f:2f:ef:3e:db:61:83:ff:
         4b:b9:d4:02:ed:a5:61:ec:61:60:9b:52:fe:87:9c:4a:84:9f:
         db:48:62:4e:bd:6a:55:22:ce:d3:2b:a4:aa:c0:fd:f2:71:2f:
         ad:62:6e:89:cf:32:09:b7:ab:e7:26:80:e2:de:c9:ff:43:d4:
         a2:55:a2:28:3f:cd:25:7e:11:57:ec:97:99:c9:8e:de:4d:51:
         b9:86:ad:65:11:56:5d:f1:cc:99:c9:4c:f6:7f:ec:f8:60:30:
         0a:ef:b1:84:ae:8f:f8:18:c4:57:ff:83:49:ca:8f:a9:7b:2c:
         c2:e4:97:ba:03:a0:ac:9c:75:35:90:06:4d:41:ea:8f:3a:a4:
         a4:32:fb:7a
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5RDgy
NDQwNDlEOUJDQkJCOUY1ODdBRDNBMzRDNjhDNDBGRDhDQjZCMB4XDTIzMDkyNjA2
NTk0OFoXDTI0MDkyNTA2MjczMVowMzExMC8GA1UEAxMoOEMxMzA4MUIzRjREMjkx
NkQ0NkE1ODczNUMyRkNENzdBODExRTBBODCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALQnmux1EHTq3cpSXRE90yOCvpTYoQ8LUhVuw9dBPe9tBPDTkVGw
zcAzYVMAatG56pVIl+pU6PfXE4KwPheRv5c7rDWXFR9M7sICQe8vx3vSBpN0dLqG
6S05J7WgFZT3lkD4Mpfh2Fd8zM3qM3AmbazbXUraCyf4hjslj030u49c80uGf9eL
3Aw4cF8iP0Jau5ig4vKK1a+K2XElx5FRDedw08tqvfCeij0Dn1EwqK/e15uX7EA9
t/vBcbCRFo0ULNhBnRu2Feagd05dPWOp04s/85amw9ele0O+c3VDV7WD3eUSg47i
jm1QoYFBlYfmOhbWfGYjksXJ+2jtv2gKNfcCAwEAAaOCAikwggIlMB0GA1UdDgQW
BBSMEwgbP00pFtRqWHNcL813qBHgqDAfBgNVHSMEGDAWgBSdgkQEnZvLu59YetOj
TGjED9jLazAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAzMDYvbllKRUJKMmJ5N3VmV0hyVG8weG94QV9ZeTJzLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvbllKRUJKMmJ5N3VmV0hyVG8weG94
QV9ZeTJzLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMzA2L2pCTUlHejlOS1JiVWFsaHpYQ19OZDZnUjRLZy5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E
AgACMAcDBQAkAjAAMA0GCSqGSIb3DQEBCwUAA4IBAQBMBP0DOCbz+7MOzWGx60ZQ
mZOU8R6yDR3lJwtwM63cycT2Vx044BIta43quJSQZXs/Z8MU0nuKpxGQLK+iffHP
1+lDHmMs/L2ly9ed+SyK1vCnZdsmHSf2WmC3MU3tryrZSfhNmrDAOkl4xM53WtwW
ctMoHVcAXy/vPtthg/9LudQC7aVh7GFgm1L+h5xKhJ/bSGJOvWpVIs7TK6SqwP3y
cS+tYm6JzzIJt6vnJoDi3sn/Q9SiVaIoP80lfhFX7JeZyY7eTVG5hq1lEVZd8cyZ
yUz2f+z4YDAK77GEro/4GMRX/4NJyo+peyzC5Je6A6CsnHU1kAZNQeqPOqSkMvt6
-----END CERTIFICATE-----
Generated at Thu May 30 03:08:53 2024 by rpki-client on console-fra.rpki-client.org