Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30349/jcg_Kp4rUURaOZgGejZGxckOaqs.roa
File:                     jcg_Kp4rUURaOZgGejZGxckOaqs.roa (raw, json)
Hash identifier:          G20XJ4wBgk/ZlpI3vibUUHl37TNKr0B6TxCSok8W2gI=
Subject key identifier:   8D:C8:3F:2A:9E:2B:51:44:5A:39:98:06:7A:36:46:C5:C9:0E:6A:AB
Certificate issuer:       /CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
Certificate serial:       0C
Authority key identifier: 5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/jcg_Kp4rUURaOZgGejZGxckOaqs.roa
Signing time:             Wed 18 Sep 2024 07:16:11 +0000
ROA not before:           Wed 18 Sep 2024 07:16:11 +0000
ROA not after:            Mon 15 Sep 2025 01:30:03 +0000
asID:                     0
IP address blocks:        2405:25c0:9000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Oct 2024 13:49:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
        Validity
            Not Before: Sep 18 07:16:11 2024 GMT
            Not After : Sep 15 01:30:03 2025 GMT
        Subject: CN=8DC83F2A9E2B51445A3998067A3646C5C90E6AAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:61:3a:b9:9d:83:77:ab:af:89:f0:01:58:39:
                    4a:01:b8:7d:d0:01:cc:d0:45:65:33:53:1b:c9:b1:
                    52:c8:75:b5:66:56:58:bb:9a:51:fb:26:4e:3e:f8:
                    9d:c5:54:2f:5d:01:54:43:bb:25:9c:af:5b:26:d4:
                    a3:93:a6:7f:b9:6b:cc:e3:cd:9b:e5:3f:70:f9:25:
                    3f:db:68:c8:c1:e4:08:d1:30:80:f0:db:40:05:8d:
                    c9:ae:83:bf:98:ed:67:c6:ca:0a:82:9a:e7:77:2f:
                    78:83:8f:c8:ca:97:05:05:75:f9:b3:c2:b7:5e:47:
                    53:2f:db:f9:d0:e5:c9:a9:3e:ae:a7:ef:1c:ce:ef:
                    88:5d:a1:8c:c9:1f:c9:9b:87:b3:83:4f:06:57:09:
                    9b:3f:e3:d0:a5:68:ab:e3:57:bf:74:d0:13:d5:6d:
                    c5:22:fa:c1:01:ed:d5:da:fe:c2:47:a0:03:29:70:
                    f7:76:0a:f4:e4:31:03:89:9a:e1:41:fc:73:bf:01:
                    61:63:9c:18:23:a4:4f:22:a6:5e:ea:50:3a:d2:a3:
                    8a:09:5d:07:f3:a9:1e:ab:bc:f4:fe:36:61:b5:bc:
                    77:0c:45:a3:37:ab:0b:d6:2c:f1:0b:72:ae:14:fa:
                    48:5c:72:87:df:07:75:f2:42:bc:a6:79:e5:2a:2b:
                    41:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:C8:3F:2A:9E:2B:51:44:5A:39:98:06:7A:36:46:C5:C9:0E:6A:AB
            X509v3 Authority Key Identifier:
                keyid:5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/jcg_Kp4rUURaOZgGejZGxckOaqs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:25c0:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         59:04:07:a0:f6:67:a2:9e:78:7d:f4:2e:b0:65:26:93:08:13:
         0f:6a:39:d1:84:f3:4c:b2:be:24:0f:51:b6:07:31:51:bc:dc:
         c3:72:5d:68:b2:bf:c4:08:b3:5d:1e:44:ce:80:c7:16:4a:a6:
         20:99:6b:ba:7e:0e:85:5c:c3:d0:de:2d:4e:b3:0e:34:d8:90:
         59:16:2f:ff:60:2a:8d:81:47:18:7f:0f:32:f8:46:5b:d2:9d:
         3f:16:57:59:4c:3c:df:10:95:3e:18:94:ca:ea:93:17:cf:c9:
         37:08:90:cd:6c:01:b9:a8:08:ab:2d:6e:74:fa:3b:9d:f3:0c:
         a7:98:47:1d:5e:0a:20:9c:d4:49:d5:ba:2f:ae:26:66:72:bf:
         7e:57:7c:bb:b6:c1:76:d8:d4:d0:ca:2e:37:a7:26:9b:51:c4:
         9e:85:21:b1:74:33:0b:a6:d1:7d:18:be:cd:3d:ed:ac:f8:f7:
         fb:76:cb:66:4d:e0:01:c3:a4:cb:a7:90:d5:dd:5b:fa:9d:04:
         25:a5:dc:73:e8:18:8d:88:38:0b:91:7b:de:15:5e:d1:ef:9b:
         99:25:b4:ff:b2:ad:22:ff:d4:07:12:ca:55:bb:e0:35:f0:bc:
         09:3c:cc:e2:9b:98:c5:92:a9:84:a3:95:7c:a3:c8:49:01:9b:
         2d:cd:2a:a8
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIBDDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1QTVB
MDhGOUJGRTBDNTQxQ0M4RDk4MDI3QTE2NDk3RUE1MTkyMDIzMB4XDTI0MDkxODA3
MTYxMVoXDTI1MDkxNTAxMzAwM1owMzExMC8GA1UEAxMoOERDODNGMkE5RTJCNTE0
NDVBMzk5ODA2N0EzNjQ2QzVDOTBFNkFBQjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOxhOrmdg3err4nwAVg5SgG4fdABzNBFZTNTG8mxUsh1tWZWWLua
UfsmTj74ncVUL10BVEO7JZyvWybUo5Omf7lrzOPNm+U/cPklP9toyMHkCNEwgPDb
QAWNya6Dv5jtZ8bKCoKa53cveIOPyMqXBQV1+bPCt15HUy/b+dDlyak+rqfvHM7v
iF2hjMkfyZuHs4NPBlcJmz/j0KVoq+NXv3TQE9VtxSL6wQHt1dr+wkegAylw93YK
9OQxA4ma4UH8c78BYWOcGCOkTyKmXupQOtKjigldB/OpHqu89P42YbW8dwxFozer
C9Ys8QtyrhT6SFxyh98HdfJCvKZ55SorQS0CAwEAAaOCAiowggImMB0GA1UdDgQW
BBSNyD8qnitRRFo5mAZ6NkbFyQ5qqzAfBgNVHSMEGDAWgBRaWgj5v+DFQcyNmAJ6
Fkl+pRkgIzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAzNDkvV2xvSS1iX2d4VUhNalpnQ2VoWkpmcVVaSUNNLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvV2xvSS1iX2d4VUhNalpnQ2VoWkpm
cVVaSUNNLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMzQ5L2pjZ19LcDRyVVVSYU9aZ0dlalpHeGNrT2Fxcy5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgQkBSXAkDANBgkqhkiG9w0BAQsFAAOCAQEAWQQHoPZnop54ffQusGUm
kwgTD2o50YTzTLK+JA9RtgcxUbzcw3JdaLK/xAizXR5EzoDHFkqmIJlrun4OhVzD
0N4tTrMONNiQWRYv/2AqjYFHGH8PMvhGW9KdPxZXWUw83xCVPhiUyuqTF8/JNwiQ
zWwBuagIqy1udPo7nfMMp5hHHV4KIJzUSdW6L64mZnK/fld8u7bBdtjU0MouN6cm
m1HEnoUhsXQzC6bRfRi+zT3trPj3+3bLZk3gAcOky6eQ1d1b+p0EJaXcc+gYjYg4
C5F73hVe0e+bmSW0/7KtIv/UBxLKVbvgNfC8CTzM4puYxZKphKOVfKPISQGbLc0q
qA==
-----END CERTIFICATE-----
Generated at Tue Oct 22 15:00:05 2024 by rpki-client on console-fra.rpki-client.org