Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30349/8fGywU5X5EtWDYowJSr0LKsiPhY.roa
File:                     8fGywU5X5EtWDYowJSr0LKsiPhY.roa (raw, json)
Hash identifier:          elcjlnUXkUXa2QBi7BwcGUVVTQ3VWUYPM5zWkNKcEH4=
Subject key identifier:   F1:F1:B2:C1:4E:57:E4:4B:56:0D:8A:30:25:2A:F4:2C:AB:22:3E:16
Certificate issuer:       /CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
Certificate serial:       10
Authority key identifier: 5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/8fGywU5X5EtWDYowJSr0LKsiPhY.roa
Signing time:             Wed 18 Sep 2024 07:20:10 +0000
ROA not before:           Wed 18 Sep 2024 07:20:10 +0000
ROA not after:            Mon 15 Sep 2025 01:30:03 +0000
asID:                     0
IP address blocks:        2405:25c0:a700::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Oct 2024 13:49:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
        Validity
            Not Before: Sep 18 07:20:10 2024 GMT
            Not After : Sep 15 01:30:03 2025 GMT
        Subject: CN=F1F1B2C14E57E44B560D8A30252AF42CAB223E16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:12:54:d7:38:02:0e:ca:37:17:17:6e:88:a5:
                    af:b2:bf:23:05:3f:28:4c:db:d3:e7:8e:4a:08:bf:
                    df:98:8f:72:18:45:be:4a:ca:df:96:06:79:fb:94:
                    8e:49:78:7c:86:30:9f:f6:5d:62:55:60:0a:03:88:
                    75:71:bf:44:b3:b4:8c:88:a9:f7:bf:b4:af:dc:3b:
                    ac:0c:5f:4f:35:de:8a:9c:7b:ab:e4:6d:b8:a4:5f:
                    88:d9:db:72:53:37:de:27:8a:dc:f2:6e:b9:e5:37:
                    d0:a6:cb:0b:8c:5b:c1:51:9f:78:ec:22:10:a3:f5:
                    c8:12:af:44:7f:cb:77:db:20:27:c4:01:ff:50:91:
                    15:42:bc:d1:13:2f:d2:61:d7:b7:6d:8b:7f:05:73:
                    42:4a:a6:91:d1:97:ef:14:2b:9b:b0:12:b8:1c:d6:
                    5c:a3:81:c3:83:e2:2e:b2:e3:78:a3:1b:08:0b:ad:
                    74:31:66:62:99:8d:fe:2c:d4:00:d5:4b:9c:36:43:
                    9a:94:fe:da:87:e8:74:d3:56:58:0a:c1:09:77:d4:
                    32:9b:31:bc:5e:43:4c:88:5e:85:85:48:5e:2a:a0:
                    03:43:cf:f7:00:6c:66:e6:20:16:b4:89:c6:cb:e6:
                    3d:ef:65:0e:1b:e6:17:6e:74:f5:dc:7e:a5:62:1b:
                    d9:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:F1:B2:C1:4E:57:E4:4B:56:0D:8A:30:25:2A:F4:2C:AB:22:3E:16
            X509v3 Authority Key Identifier:
                keyid:5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/8fGywU5X5EtWDYowJSr0LKsiPhY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:25c0:a700::/40

    Signature Algorithm: sha256WithRSAEncryption
         3c:7c:9a:6a:ae:68:20:55:5d:36:56:77:48:81:8e:27:f9:c9:
         e0:38:ca:c9:b5:63:1a:62:06:d4:8f:d2:74:91:d2:1a:45:c5:
         bc:a2:43:43:14:70:24:fc:93:e2:72:78:11:16:e3:ac:9a:33:
         1d:ff:fc:07:fd:65:d3:04:d2:49:c4:44:1b:2d:74:ca:cc:f6:
         46:9f:a1:6e:68:75:7b:38:13:7d:b4:0f:82:75:ba:29:b7:4f:
         c4:ad:82:cd:3f:91:64:59:d5:d8:16:00:d5:45:dd:e2:60:7d:
         be:f4:20:e9:b4:74:e6:48:f3:12:2b:c6:bf:6d:73:53:cb:30:
         cb:d9:39:73:dc:be:03:54:25:c3:28:fb:1b:d1:ac:a8:e8:f5:
         18:90:14:f2:d8:52:24:e6:5d:47:8d:d3:87:ea:6b:83:4b:b9:
         bb:84:5a:43:b1:32:51:26:a3:d1:24:ef:76:6a:18:f6:70:c8:
         5e:b1:d5:3b:2c:64:92:91:a3:3f:2d:1b:0b:9e:6a:78:77:01:
         95:33:5b:1a:79:86:2d:4a:bd:97:f9:26:55:46:e3:3f:45:5c:
         2c:a8:d5:cd:6e:53:d7:b8:8f:14:fa:f2:a3:9b:d7:44:a0:15:
         c8:a1:41:09:5f:0a:9c:35:4d:67:e4:9d:7e:45:ca:6a:69:a6:
         d7:79:eb:fe
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIBEDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1QTVB
MDhGOUJGRTBDNTQxQ0M4RDk4MDI3QTE2NDk3RUE1MTkyMDIzMB4XDTI0MDkxODA3
MjAxMFoXDTI1MDkxNTAxMzAwM1owMzExMC8GA1UEAxMoRjFGMUIyQzE0RTU3RTQ0
QjU2MEQ4QTMwMjUyQUY0MkNBQjIyM0UxNjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALASVNc4Ag7KNxcXboilr7K/IwU/KEzb0+eOSgi/35iPchhFvkrK
35YGefuUjkl4fIYwn/ZdYlVgCgOIdXG/RLO0jIip97+0r9w7rAxfTzXeipx7q+Rt
uKRfiNnbclM33ieK3PJuueU30KbLC4xbwVGfeOwiEKP1yBKvRH/Ld9sgJ8QB/1CR
FUK80RMv0mHXt22LfwVzQkqmkdGX7xQrm7ASuBzWXKOBw4PiLrLjeKMbCAutdDFm
YpmN/izUANVLnDZDmpT+2ofodNNWWArBCXfUMpsxvF5DTIhehYVIXiqgA0PP9wBs
ZuYgFrSJxsvmPe9lDhvmF2509dx+pWIb2esCAwEAAaOCAiowggImMB0GA1UdDgQW
BBTx8bLBTlfkS1YNijAlKvQsqyI+FjAfBgNVHSMEGDAWgBRaWgj5v+DFQcyNmAJ6
Fkl+pRkgIzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAzNDkvV2xvSS1iX2d4VUhNalpnQ2VoWkpmcVVaSUNNLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvV2xvSS1iX2d4VUhNalpnQ2VoWkpm
cVVaSUNNLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMzQ5LzhmR3l3VTVYNUV0V0RZb3dKU3IwTEtzaVBoWS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgAkBSXApzANBgkqhkiG9w0BAQsFAAOCAQEAPHyaaq5oIFVdNlZ3SIGO
J/nJ4DjKybVjGmIG1I/SdJHSGkXFvKJDQxRwJPyT4nJ4ERbjrJozHf/8B/1l0wTS
ScREGy10ysz2Rp+hbmh1ezgTfbQPgnW6KbdPxK2CzT+RZFnV2BYA1UXd4mB9vvQg
6bR05kjzEivGv21zU8swy9k5c9y+A1Qlwyj7G9GsqOj1GJAU8thSJOZdR43Th+pr
g0u5u4RaQ7EyUSaj0STvdmoY9nDIXrHVOyxkkpGjPy0bC55qeHcBlTNbGnmGLUq9
l/kmVUbjP0VcLKjVzW5T17iPFPryo5vXRKAVyKFBCV8KnDVNZ+SdfkXKammm13nr
/g==
-----END CERTIFICATE-----
Generated at Tue Oct 22 15:00:05 2024 by rpki-client on console-fra.rpki-client.org