Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30360/SOkrGs-PF5FD0q7p2c3S2wmrwmU.roa
File:                     SOkrGs-PF5FD0q7p2c3S2wmrwmU.roa (raw, json)
Hash identifier:          kqby20emQD7/3Dhb1cghqRQ/ekMY9oodHAz/iYAoh+E=
Subject key identifier:   48:E9:2B:1A:CF:8F:17:91:43:D2:AE:E9:D9:CD:D2:DB:09:AB:C2:65
Certificate issuer:       /CN=FD31644EFA52879E57FCE1026B05325FE2118D65
Certificate serial:       11
Authority key identifier: FD:31:64:4E:FA:52:87:9E:57:FC:E1:02:6B:05:32:5F:E2:11:8D:65
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_TFkTvpSh55X_OECawUyX-IRjWU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30360/SOkrGs-PF5FD0q7p2c3S2wmrwmU.roa
Signing time:             Wed 30 Oct 2024 08:45:55 +0000
ROA not before:           Wed 30 Oct 2024 08:45:55 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     23618
IP address blocks:        2405:fe40::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30360/_TFkTvpSh55X_OECawUyX-IRjWU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30360/_TFkTvpSh55X_OECawUyX-IRjWU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_TFkTvpSh55X_OECawUyX-IRjWU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17 (0x11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD31644EFA52879E57FCE1026B05325FE2118D65
        Validity
            Not Before: Oct 30 08:45:55 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=48E92B1ACF8F179143D2AEE9D9CDD2DB09ABC265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:55:67:2b:93:70:e2:7d:c6:ce:6a:00:73:50:
                    9c:72:a7:37:d1:1b:da:2b:26:18:12:c1:27:6e:66:
                    81:1e:b0:51:0f:ee:20:b9:be:4c:cd:49:6f:6d:27:
                    32:40:b8:3c:79:ae:57:ff:3e:3b:62:c1:3c:12:51:
                    54:08:1a:17:04:2a:2e:be:fd:56:24:8b:5e:10:93:
                    79:61:c9:a3:98:ac:66:2b:a6:8f:67:72:0e:e3:48:
                    89:e3:50:09:0f:02:85:da:bc:0c:a0:67:96:d9:6e:
                    f6:fd:fa:bc:a9:1b:ce:5e:e8:a2:96:af:44:75:a9:
                    fb:16:1a:ee:fa:93:2b:74:50:48:b5:41:be:59:82:
                    b8:53:81:60:81:5c:16:7b:06:cf:15:fc:d2:93:2c:
                    e3:24:eb:d6:7b:43:9d:de:5a:62:e3:4e:76:78:24:
                    9d:e5:54:96:56:54:18:ae:8a:5f:76:7e:d4:24:13:
                    7e:3a:93:f7:6f:e5:2a:78:97:0c:e2:1b:1e:a8:83:
                    c0:db:8f:b7:4c:c8:e6:9e:29:01:bd:e3:e3:3c:34:
                    a0:dd:3c:19:cd:88:26:f8:5f:61:d9:22:ae:b7:9b:
                    f3:cc:e0:3b:2c:90:0b:5b:8a:5a:38:4e:8b:45:3d:
                    5c:f6:f3:3c:8a:32:bc:94:35:e3:ca:78:5e:01:c9:
                    56:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:E9:2B:1A:CF:8F:17:91:43:D2:AE:E9:D9:CD:D2:DB:09:AB:C2:65
            X509v3 Authority Key Identifier:
                keyid:FD:31:64:4E:FA:52:87:9E:57:FC:E1:02:6B:05:32:5F:E2:11:8D:65

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30360/_TFkTvpSh55X_OECawUyX-IRjWU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_TFkTvpSh55X_OECawUyX-IRjWU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30360/SOkrGs-PF5FD0q7p2c3S2wmrwmU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:fe40::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:4a:5f:15:fa:64:e6:92:d8:ad:f6:e0:b6:78:ac:f6:ad:d1:
         e6:87:46:93:7c:b5:cf:84:e0:30:8b:04:16:07:45:b5:2c:b1:
         f7:7b:c0:6f:d7:89:03:c5:7a:c4:2a:f0:82:37:14:1a:cd:53:
         b1:fc:2f:be:b1:66:80:d8:fd:eb:bc:c6:95:df:a0:81:1d:37:
         66:88:53:62:39:29:c7:c9:aa:39:0c:00:5a:2d:15:e8:76:30:
         1f:44:3e:9a:58:c0:a7:35:9e:41:35:59:e7:5e:0f:dd:6c:45:
         2e:f2:b7:8a:f4:70:0c:d8:ec:26:b4:18:dd:7a:98:9c:fd:1f:
         ea:01:c5:cb:ae:74:04:f9:4e:8b:00:12:1d:ae:b4:da:26:7f:
         8d:9d:99:39:f3:5b:0f:4c:74:ef:98:33:1d:61:da:3b:54:6a:
         83:7b:ae:58:d9:56:fa:47:40:de:05:20:06:4f:0e:9f:f9:c1:
         f6:88:32:9c:fe:a6:4f:0d:f3:1f:7c:a4:b7:3f:38:2f:f0:6e:
         04:4f:4b:78:57:83:4b:38:14:55:f6:27:62:e7:34:76:42:da:
         10:2a:4f:4b:5f:9c:b9:39:11:41:3b:6a:39:6e:f1:6d:69:dd:
         d4:d3:aa:2e:70:cc:5c:f2:3f:73:9f:3f:b0:a2:03:2f:b6:ba:
         40:3a:0f:c7
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIBETANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGRDMx
NjQ0RUZBNTI4NzlFNTdGQ0UxMDI2QjA1MzI1RkUyMTE4RDY1MB4XDTI0MTAzMDA4
NDU1NVoXDTI1MTAxNTAxMzAwMlowMzExMC8GA1UEAxMoNDhFOTJCMUFDRjhGMTc5
MTQzRDJBRUU5RDlDREQyREIwOUFCQzI2NTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMlVZyuTcOJ9xs5qAHNQnHKnN9Eb2ismGBLBJ25mgR6wUQ/uILm+
TM1Jb20nMkC4PHmuV/8+O2LBPBJRVAgaFwQqLr79ViSLXhCTeWHJo5isZiumj2dy
DuNIieNQCQ8Chdq8DKBnltlu9v36vKkbzl7oopavRHWp+xYa7vqTK3RQSLVBvlmC
uFOBYIFcFnsGzxX80pMs4yTr1ntDnd5aYuNOdngkneVUllZUGK6KX3Z+1CQTfjqT
92/lKniXDOIbHqiDwNuPt0zI5p4pAb3j4zw0oN08Gc2IJvhfYdkirreb88zgOyyQ
C1uKWjhOi0U9XPbzPIoyvJQ148p4XgHJVg8CAwEAAaOCAikwggIlMB0GA1UdDgQW
BBRI6Ssaz48XkUPSrunZzdLbCavCZTAfBgNVHSMEGDAWgBT9MWRO+lKHnlf84QJr
BTJf4hGNZTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAzNjAvX1RGa1R2cFNoNTVYX09FQ2F3VXlYLUlSaldVLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvX1RGa1R2cFNoNTVYX09FQ2F3VXlY
LUlSaldVLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMzYwL1NPa3JHcy1QRjVGRDBxN3AyYzNTMndtcndtVS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E
AgACMAcDBQAkBf5AMA0GCSqGSIb3DQEBCwUAA4IBAQBoSl8V+mTmktit9uC2eKz2
rdHmh0aTfLXPhOAwiwQWB0W1LLH3e8Bv14kDxXrEKvCCNxQazVOx/C++sWaA2P3r
vMaV36CBHTdmiFNiOSnHyao5DABaLRXodjAfRD6aWMCnNZ5BNVnnXg/dbEUu8reK
9HAM2OwmtBjdepic/R/qAcXLrnQE+U6LABIdrrTaJn+NnZk581sPTHTvmDMdYdo7
VGqDe65Y2Vb6R0DeBSAGTw6f+cH2iDKc/qZPDfMffKS3Pzgv8G4ET0t4V4NLOBRV
9idi5zR2QtoQKk9LX5y5ORFBO2o5bvFtad3U06oucMxc8j9znz+wogMvtrpAOg/H
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:15 2024 by rpki-client on console-fra.rpki-client.org