Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30349/z9nt-xS_liuIs5oFuBxxKnPYHsM.roa
File:                     z9nt-xS_liuIs5oFuBxxKnPYHsM.roa (raw, json)
Hash identifier:          hct3ehOZLviJXrnEOPkScf7XcZgdiDHRkgiu/tbJY3w=
Subject key identifier:   CF:D9:ED:FB:14:BF:96:2B:88:B3:9A:05:B8:1C:71:2A:73:D8:1E:C3
Certificate issuer:       /CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
Certificate serial:       0A
Authority key identifier: 5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/z9nt-xS_liuIs5oFuBxxKnPYHsM.roa
Signing time:             Wed 18 Sep 2024 07:16:11 +0000
ROA not before:           Wed 18 Sep 2024 07:16:11 +0000
ROA not after:            Mon 15 Sep 2025 01:30:03 +0000
asID:                     0
IP address blocks:        2405:25c0:7000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 20:13:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
        Validity
            Not Before: Sep 18 07:16:11 2024 GMT
            Not After : Sep 15 01:30:03 2025 GMT
        Subject: CN=CFD9EDFB14BF962B88B39A05B81C712A73D81EC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:90:68:60:5d:9d:3b:d4:7b:c1:52:3f:8f:a5:
                    12:ff:0f:fd:00:a3:88:ed:b0:d7:0f:a5:47:7c:b5:
                    dd:14:4b:5b:be:16:55:8e:11:8f:d5:1b:c8:a4:ca:
                    61:64:bb:69:22:84:63:43:d9:45:60:24:e1:15:8d:
                    5b:23:2f:46:67:4e:d4:ba:ed:f1:9a:1a:c0:8f:73:
                    12:4b:8e:50:a0:0f:23:c9:20:d1:28:57:be:13:45:
                    aa:a0:27:64:64:f7:4a:1e:ac:39:3e:2a:bb:92:38:
                    af:df:95:9f:0b:7b:92:e0:22:61:11:71:ef:ef:55:
                    f4:f6:1f:fd:7a:38:a4:7e:6f:8a:9c:2c:ac:05:05:
                    89:cd:3f:f3:47:47:e1:39:0e:33:7b:91:fa:74:c1:
                    2c:b8:19:ea:59:3a:fe:0d:39:c4:8f:1e:72:e1:5d:
                    f8:07:9b:bf:a0:10:fb:c4:23:a9:b6:86:02:ac:32:
                    78:71:3f:a4:5f:84:b0:83:1f:26:db:1f:e9:43:58:
                    f9:3d:e7:39:3b:c9:e2:75:b9:d5:4c:cb:44:3a:fe:
                    dc:eb:40:55:ed:ff:2a:3a:0c:84:08:b5:4b:d4:08:
                    74:ae:84:10:91:76:6d:cd:0e:e6:38:5b:e1:ee:f4:
                    af:95:c7:62:05:dd:2d:20:dc:db:7b:55:e9:84:5f:
                    dd:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:D9:ED:FB:14:BF:96:2B:88:B3:9A:05:B8:1C:71:2A:73:D8:1E:C3
            X509v3 Authority Key Identifier:
                keyid:5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/z9nt-xS_liuIs5oFuBxxKnPYHsM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:25c0:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         a5:0a:78:e8:b6:71:50:56:7f:22:be:37:af:85:9e:6d:74:00:
         9d:d5:69:fa:23:9d:e5:7d:7b:76:51:36:5d:ab:be:73:5d:37:
         71:ff:f7:32:6e:9c:af:98:18:78:f1:86:82:82:be:e7:d0:68:
         78:37:ad:fc:84:d5:fb:cd:95:9f:38:7b:6d:89:5c:3d:0e:b2:
         65:6e:bf:f4:bb:c6:39:ce:ef:b4:ac:8e:28:aa:22:9d:93:66:
         71:8d:e9:cb:95:b0:11:20:c5:4d:0a:bb:12:ac:36:57:6c:b5:
         f2:b5:0c:b4:af:2f:f5:83:ac:6e:41:8b:9c:f1:2e:35:bf:56:
         99:a8:e5:33:11:3e:86:f6:18:77:0c:af:16:99:35:ec:a9:ad:
         b1:b0:cd:a6:42:73:7c:ff:73:9f:50:d0:fa:1e:26:47:04:cb:
         89:b0:c2:01:5c:42:bd:3f:7c:0d:f6:a7:9a:50:7b:77:ab:7d:
         ae:72:5e:90:57:88:12:56:09:4a:3b:4f:99:1c:96:70:41:ee:
         71:94:af:41:7c:48:23:6d:b0:3b:12:43:b7:c6:de:cf:c1:22:
         1b:8e:15:eb:51:f9:17:19:80:6d:ef:e3:fa:af:03:01:ba:56:
         d0:cf:33:89:43:56:88:5e:e1:95:35:55:9e:1f:e6:d9:a3:77:
         83:03:42:35
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIBCjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1QTVB
MDhGOUJGRTBDNTQxQ0M4RDk4MDI3QTE2NDk3RUE1MTkyMDIzMB4XDTI0MDkxODA3
MTYxMVoXDTI1MDkxNTAxMzAwM1owMzExMC8GA1UEAxMoQ0ZEOUVERkIxNEJGOTYy
Qjg4QjM5QTA1QjgxQzcxMkE3M0Q4MUVDMzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOWQaGBdnTvUe8FSP4+lEv8P/QCjiO2w1w+lR3y13RRLW74WVY4R
j9UbyKTKYWS7aSKEY0PZRWAk4RWNWyMvRmdO1Lrt8ZoawI9zEkuOUKAPI8kg0ShX
vhNFqqAnZGT3Sh6sOT4qu5I4r9+Vnwt7kuAiYRFx7+9V9PYf/Xo4pH5vipwsrAUF
ic0/80dH4TkOM3uR+nTBLLgZ6lk6/g05xI8ecuFd+Aebv6AQ+8QjqbaGAqwyeHE/
pF+EsIMfJtsf6UNY+T3nOTvJ4nW51UzLRDr+3OtAVe3/KjoMhAi1S9QIdK6EEJF2
bc0O5jhb4e70r5XHYgXdLSDc23tV6YRf3a0CAwEAAaOCAiowggImMB0GA1UdDgQW
BBTP2e37FL+WK4izmgW4HHEqc9gewzAfBgNVHSMEGDAWgBRaWgj5v+DFQcyNmAJ6
Fkl+pRkgIzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAzNDkvV2xvSS1iX2d4VUhNalpnQ2VoWkpmcVVaSUNNLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvV2xvSS1iX2d4VUhNalpnQ2VoWkpm
cVVaSUNNLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMzQ5L3o5bnQteFNfbGl1SXM1b0Z1Qnh4S25QWUhzTS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIQYIKwYBBQUHAQcBAf8EEjAQMA4E
AgACMAgDBgQkBSXAcDANBgkqhkiG9w0BAQsFAAOCAQEApQp46LZxUFZ/Ir43r4We
bXQAndVp+iOd5X17dlE2Xau+c103cf/3Mm6cr5gYePGGgoK+59BoeDet/ITV+82V
nzh7bYlcPQ6yZW6/9LvGOc7vtKyOKKoinZNmcY3py5WwESDFTQq7Eqw2V2y18rUM
tK8v9YOsbkGLnPEuNb9WmajlMxE+hvYYdwyvFpk17KmtsbDNpkJzfP9zn1DQ+h4m
RwTLibDCAVxCvT98DfanmlB7d6t9rnJekFeIElYJSjtPmRyWcEHucZSvQXxII22w
OxJDt8bez8EiG44V61H5FxmAbe/j+q8DAbpW0M8ziUNWiF7hlTVVnh/m2aN3gwNC
NQ==
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:34:43 2024 by rpki-client on console-ams.rpki-client.org