Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30380/YVlPLBwiJsmDd7BUed_qAuRQRnA.roa
File:                     YVlPLBwiJsmDd7BUed_qAuRQRnA.roa (raw, json)
Hash identifier:          r0FH8CZNXhfba4acAtVy7G/6aPMUceMVxLOkAoCCEHE=
Subject key identifier:   61:59:4F:2C:1C:22:26:C9:83:77:B0:54:79:DF:EA:02:E4:50:46:70
Certificate issuer:       /CN=1FDAA792A5FE0213BC4AC64EDF21DF2EAC40EB0E
Certificate serial:       04
Authority key identifier: 1F:DA:A7:92:A5:FE:02:13:BC:4A:C6:4E:DF:21:DF:2E:AC:40:EB:0E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/H9qnkqX-AhO8SsZO3yHfLqxA6w4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30380/YVlPLBwiJsmDd7BUed_qAuRQRnA.roa
Signing time:             Thu 25 Jul 2024 04:10:51 +0000
ROA not before:           Thu 25 Jul 2024 04:10:51 +0000
ROA not after:            Fri 25 Jul 2025 01:50:19 +0000
asID:                     14618
IP address blocks:        2407:a6c0::/32 maxlen: 56

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30380/H9qnkqX-AhO8SsZO3yHfLqxA6w4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30380/H9qnkqX-AhO8SsZO3yHfLqxA6w4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/H9qnkqX-AhO8SsZO3yHfLqxA6w4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Sep 2024 01:31:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FDAA792A5FE0213BC4AC64EDF21DF2EAC40EB0E
        Validity
            Not Before: Jul 25 04:10:51 2024 GMT
            Not After : Jul 25 01:50:19 2025 GMT
        Subject: CN=61594F2C1C2226C98377B05479DFEA02E4504670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9d:41:df:78:36:b8:17:09:33:c5:73:73:63:
                    71:5f:5c:d0:7c:81:82:a5:41:51:84:03:05:da:6a:
                    d1:f4:11:4a:df:87:35:74:af:39:28:26:c8:ae:ec:
                    e7:8d:85:7d:02:2c:94:73:95:7a:91:a2:59:a2:3f:
                    bf:da:81:be:d1:82:1a:b4:aa:23:57:02:59:20:34:
                    b6:a2:fb:f2:d3:f7:e6:7f:8e:41:a5:13:3d:6f:58:
                    d6:b7:57:80:35:2a:62:45:75:a7:db:07:94:b7:74:
                    0c:7d:f5:d5:ae:67:4c:e1:35:8d:2e:19:8c:31:a6:
                    40:5d:ba:3f:85:af:b6:8d:f7:35:37:9d:4c:17:69:
                    4d:95:cd:97:3f:6a:b0:88:19:a1:37:ac:10:ee:1e:
                    de:6c:35:a4:93:55:69:81:04:99:70:6e:65:5a:4d:
                    47:a2:d5:dd:7f:0e:08:64:dd:d0:41:6c:95:60:c1:
                    41:e8:4e:d6:3f:2d:b3:f5:2e:cd:47:b0:48:4e:dd:
                    72:9a:80:1f:40:b7:37:03:c6:9c:ec:65:71:e3:c3:
                    5b:bf:da:f5:97:4e:04:99:69:bd:99:88:68:7b:a4:
                    1a:6f:f4:67:d6:8c:dd:1f:73:5f:8f:48:de:a9:b3:
                    60:95:40:0d:b4:d5:ef:89:4a:4e:a9:75:2c:1e:dd:
                    40:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:59:4F:2C:1C:22:26:C9:83:77:B0:54:79:DF:EA:02:E4:50:46:70
            X509v3 Authority Key Identifier:
                keyid:1F:DA:A7:92:A5:FE:02:13:BC:4A:C6:4E:DF:21:DF:2E:AC:40:EB:0E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30380/H9qnkqX-AhO8SsZO3yHfLqxA6w4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/H9qnkqX-AhO8SsZO3yHfLqxA6w4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30380/YVlPLBwiJsmDd7BUed_qAuRQRnA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:a6c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:3e:ad:f3:16:38:8a:55:a5:0b:22:e5:7e:fd:e5:60:24:d9:
         c4:34:08:08:5f:97:03:b8:37:f1:1d:06:80:f8:b2:f9:e6:e4:
         04:e0:5c:07:6f:6b:fe:6d:19:13:55:52:d4:0a:41:50:8d:89:
         ab:86:9d:03:f3:5e:6b:06:68:83:20:1d:73:14:e5:7d:2a:15:
         9f:32:55:4e:60:37:55:b2:4a:1d:60:9e:9f:04:c4:df:d3:69:
         ee:96:8c:c7:36:d7:55:31:f6:d9:f8:f4:34:e4:f2:11:08:a6:
         28:27:18:0a:7b:4f:39:9c:d0:2e:68:9c:35:50:d6:8c:f2:58:
         75:ce:d6:9d:97:0e:8b:14:7d:38:71:e9:1d:aa:34:bc:c3:e1:
         c2:6c:f8:21:a8:f4:ce:8f:6b:65:b6:43:25:ec:78:6e:28:19:
         45:03:cd:f5:90:f3:89:23:2f:90:7c:07:89:f2:b7:4b:80:1d:
         21:c2:31:c2:74:a1:0e:ae:e9:39:21:2d:4b:65:aa:2c:fb:c0:
         3c:51:7e:0c:86:1f:35:ce:2a:f7:47:5c:e7:69:7b:a0:51:30:
         ff:51:87:55:dd:df:1b:7a:7d:b9:4d:65:43:1e:f2:e9:4f:50:
         e1:31:89:3c:4f:2a:fb:f5:d5:d8:69:b0:b3:d3:53:c2:8c:e4:
         79:ee:9f:a2
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIBBDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxRkRB
QTc5MkE1RkUwMjEzQkM0QUM2NEVERjIxREYyRUFDNDBFQjBFMB4XDTI0MDcyNTA0
MTA1MVoXDTI1MDcyNTAxNTAxOVowMzExMC8GA1UEAxMoNjE1OTRGMkMxQzIyMjZD
OTgzNzdCMDU0NzlERkVBMDJFNDUwNDY3MDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALudQd94NrgXCTPFc3NjcV9c0HyBgqVBUYQDBdpq0fQRSt+HNXSv
OSgmyK7s542FfQIslHOVepGiWaI/v9qBvtGCGrSqI1cCWSA0tqL78tP35n+OQaUT
PW9Y1rdXgDUqYkV1p9sHlLd0DH311a5nTOE1jS4ZjDGmQF26P4Wvto33NTedTBdp
TZXNlz9qsIgZoTesEO4e3mw1pJNVaYEEmXBuZVpNR6LV3X8OCGTd0EFslWDBQehO
1j8ts/UuzUewSE7dcpqAH0C3NwPGnOxlcePDW7/a9ZdOBJlpvZmIaHukGm/0Z9aM
3R9zX49I3qmzYJVADbTV74lKTql1LB7dQNsCAwEAAaOCAikwggIlMB0GA1UdDgQW
BBRhWU8sHCImyYN3sFR53+oC5FBGcDAfBgNVHSMEGDAWgBQf2qeSpf4CE7xKxk7f
Id8urEDrDjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzAzODAvSDlxbmtxWC1BaE84U3NaTzN5SGZMcXhBNnc0LmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvSDlxbmtxWC1BaE84U3NaTzN5SGZM
cXhBNnc0LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwMzgwL1lWbFBMQndpSnNtRGQ3QlVlZF9xQXVSUVJuQS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E
AgACMAcDBQAkB6bAMA0GCSqGSIb3DQEBCwUAA4IBAQB9Pq3zFjiKVaULIuV+/eVg
JNnENAgIX5cDuDfxHQaA+LL55uQE4FwHb2v+bRkTVVLUCkFQjYmrhp0D815rBmiD
IB1zFOV9KhWfMlVOYDdVskodYJ6fBMTf02nulozHNtdVMfbZ+PQ05PIRCKYoJxgK
e085nNAuaJw1UNaM8lh1ztadlw6LFH04cekdqjS8w+HCbPghqPTOj2tltkMl7Hhu
KBlFA831kPOJIy+QfAeJ8rdLgB0hwjHCdKEOruk5IS1LZaos+8A8UX4Mhh81zir3
R1znaXugUTD/UYdV3d8ben25TWVDHvLpT1DhMYk8Tyr79dXYabCz01PCjOR57p+i
-----END CERTIFICATE-----
Generated at Wed Sep 18 17:02:26 2024 by rpki-client on console-fra.rpki-client.org