Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30349/-7nuBCxl9e7DgoQlkRt1xnayAjM.roa
File:                     -7nuBCxl9e7DgoQlkRt1xnayAjM.roa (raw, json)
Hash identifier:          +JfJeB/eG20110ph0S1CVxN2KRYnDceru5um3l4kodk=
Subject key identifier:   FB:B9:EE:04:2C:65:F5:EE:C3:82:84:25:91:1B:75:C6:76:B2:02:33
Certificate issuer:       /CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
Certificate serial:       17
Authority key identifier: 5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/-7nuBCxl9e7DgoQlkRt1xnayAjM.roa
Signing time:             Wed 18 Sep 2024 07:24:04 +0000
ROA not before:           Wed 18 Sep 2024 07:24:04 +0000
ROA not after:            Mon 15 Sep 2025 01:30:03 +0000
asID:                     0
IP address blocks:        2405:25c0:ae00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 20:13:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23 (0x17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
        Validity
            Not Before: Sep 18 07:24:04 2024 GMT
            Not After : Sep 15 01:30:03 2025 GMT
        Subject: CN=FBB9EE042C65F5EEC3828425911B75C676B20233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:cf:1f:c8:55:82:4d:80:27:11:ff:8c:4e:3d:
                    70:63:2b:8e:d2:a2:40:d1:3f:a5:ef:a0:b3:7e:52:
                    27:9e:22:84:a0:fd:3a:a5:e6:d0:93:97:2d:6e:0a:
                    9a:00:fa:fa:5a:47:fd:f9:82:df:3b:10:31:55:cb:
                    6c:0c:cb:23:00:46:17:e0:c7:1c:4b:e9:e2:8e:f9:
                    a9:0a:7f:84:3f:d9:51:e4:16:88:94:3a:5e:62:c5:
                    16:10:35:3a:91:00:48:03:b1:bc:9b:85:22:c0:94:
                    ef:82:cd:af:b1:a9:20:e2:3b:1d:81:1f:a3:5a:b3:
                    73:8f:72:24:d2:9c:1c:da:77:cb:20:43:da:1f:1f:
                    67:3c:d4:81:fe:9f:4b:b1:45:19:de:6d:ac:3d:00:
                    21:6b:38:e2:34:8b:69:39:40:29:5c:49:e1:b8:e4:
                    f6:9c:32:a7:60:45:51:76:7a:59:6a:16:6f:8a:4f:
                    a6:8e:ed:ab:92:38:6c:27:75:83:f9:39:67:11:8b:
                    35:bb:56:3f:0a:69:06:36:42:ca:7f:a2:b0:6a:83:
                    87:8c:42:eb:1b:23:8b:e8:84:bb:95:f9:8f:ae:a3:
                    70:f1:3d:00:42:0f:74:3e:5e:f1:ed:40:92:c3:32:
                    bb:9d:21:0c:f5:1b:df:d4:4e:19:28:a4:67:c5:fd:
                    3f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:B9:EE:04:2C:65:F5:EE:C3:82:84:25:91:1B:75:C6:76:B2:02:33
            X509v3 Authority Key Identifier:
                keyid:5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/-7nuBCxl9e7DgoQlkRt1xnayAjM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:25c0:ae00::/40

    Signature Algorithm: sha256WithRSAEncryption
         61:0b:6f:36:a8:eb:15:25:12:98:3b:cb:54:55:60:5c:1f:58:
         93:ad:b1:ad:0e:45:1a:d5:60:c1:f0:7b:7b:bc:75:36:9c:d3:
         6b:d7:48:4d:bd:74:d7:07:e7:9f:bc:98:9e:39:59:1f:63:ef:
         41:d8:5a:4f:b2:c1:96:ed:f8:12:dc:6e:8f:ac:67:f5:9c:0b:
         0b:c1:99:45:ea:c6:09:f3:db:5e:fd:35:b1:70:12:d2:d8:f7:
         96:12:63:10:db:cc:39:e6:b3:2d:a8:d1:72:45:24:0c:16:37:
         e7:55:cb:ea:89:86:c5:59:3d:e4:69:0d:0b:b9:9e:6a:bf:2e:
         25:a9:4e:83:d1:cc:1e:95:45:98:f0:93:40:d5:3a:bf:ec:c5:
         6f:2f:ea:88:c2:cc:ed:d0:a4:69:99:cb:44:36:f3:f2:a4:1f:
         2d:5e:f0:25:9e:b2:fb:43:e5:4d:93:03:be:dc:c3:94:9a:de:
         d0:4b:50:dc:1f:44:83:a2:1a:88:a4:8e:9a:ca:62:66:c6:79:
         04:07:36:9e:ef:d2:7d:21:ed:be:92:84:71:2e:8d:de:4b:87:
         7e:7d:b8:e4:05:69:4a:48:97:8c:4c:0d:34:40:69:14:fd:97:
         e4:67:d0:e9:dd:85:60:de:cd:e8:fa:d0:55:7c:58:ca:23:0c:
         82:dd:2b:cd
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIBFzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1QTVB
MDhGOUJGRTBDNTQxQ0M4RDk4MDI3QTE2NDk3RUE1MTkyMDIzMB4XDTI0MDkxODA3
MjQwNFoXDTI1MDkxNTAxMzAwM1owMzExMC8GA1UEAxMoRkJCOUVFMDQyQzY1RjVF
RUMzODI4NDI1OTExQjc1QzY3NkIyMDIzMzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMnPH8hVgk2AJxH/jE49cGMrjtKiQNE/pe+gs35SJ54ihKD9OqXm
0JOXLW4KmgD6+lpH/fmC3zsQMVXLbAzLIwBGF+DHHEvp4o75qQp/hD/ZUeQWiJQ6
XmLFFhA1OpEASAOxvJuFIsCU74LNr7GpIOI7HYEfo1qzc49yJNKcHNp3yyBD2h8f
ZzzUgf6fS7FFGd5trD0AIWs44jSLaTlAKVxJ4bjk9pwyp2BFUXZ6WWoWb4pPpo7t
q5I4bCd1g/k5ZxGLNbtWPwppBjZCyn+isGqDh4xC6xsji+iEu5X5j66jcPE9AEIP
dD5e8e1AksMyu50hDPUb39ROGSikZ8X9P08CAwEAAaOCAiowggImMB0GA1UdDgQW
BBT7ue4ELGX17sOChCWRG3XGdrICMzAfBgNVHSMEGDAWgBRaWgj5v+DFQcyNmAJ6
Fkl+pRkgIzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAzNDkvV2xvSS1iX2d4VUhNalpnQ2VoWkpmcVVaSUNNLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvV2xvSS1iX2d4VUhNalpnQ2VoWkpm
cVVaSUNNLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMzQ5Ly03bnVCQ3hsOWU3RGdvUWxrUnQxeG5heUFqTS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgAkBSXArjANBgkqhkiG9w0BAQsFAAOCAQEAYQtvNqjrFSUSmDvLVFVg
XB9Yk62xrQ5FGtVgwfB7e7x1NpzTa9dITb101wfnn7yYnjlZH2PvQdhaT7LBlu34
Etxuj6xn9ZwLC8GZRerGCfPbXv01sXAS0tj3lhJjENvMOeazLajRckUkDBY351XL
6omGxVk95GkNC7mear8uJalOg9HMHpVFmPCTQNU6v+zFby/qiMLM7dCkaZnLRDbz
8qQfLV7wJZ6y+0PlTZMDvtzDlJre0EtQ3B9Eg6IaiKSOmspiZsZ5BAc2nu/SfSHt
vpKEcS6N3kuHfn245AVpSkiXjEwNNEBpFP2X5GfQ6d2FYN7N6PrQVXxYyiMMgt0r
zQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 01:33:22 2024 by rpki-client on console-ams.rpki-client.org