Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30409/UmGQZ1hS5NPS2BiqRY8mq_y6XFQ.roa
File:                     UmGQZ1hS5NPS2BiqRY8mq_y6XFQ.roa (raw, json)
Hash identifier:          WFXi9ZKsE9g9tWKz/dH7eu+UxuCr2C6z9vWqt6xPF50=
Subject key identifier:   52:61:90:67:58:52:E4:D3:D2:D8:18:AA:45:8F:26:AB:FC:BA:5C:54
Certificate issuer:       /CN=6084C82997BC86365F5318867EFFB82561955474
Certificate serial:       0F
Authority key identifier: 60:84:C8:29:97:BC:86:36:5F:53:18:86:7E:FF:B8:25:61:95:54:74
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/YITIKZe8hjZfUxiGfv-4JWGVVHQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30409/UmGQZ1hS5NPS2BiqRY8mq_y6XFQ.roa
Signing time:             Fri 27 Oct 2023 12:20:06 +0000
ROA not before:           Fri 27 Oct 2023 12:20:06 +0000
ROA not after:            Mon 14 Oct 2024 01:30:03 +0000
asID:                     146984
IP address blocks:        2400:b420::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30409/YITIKZe8hjZfUxiGfv-4JWGVVHQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30409/YITIKZe8hjZfUxiGfv-4JWGVVHQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/YITIKZe8hjZfUxiGfv-4JWGVVHQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Jul 2024 00:37:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6084C82997BC86365F5318867EFFB82561955474
        Validity
            Not Before: Oct 27 12:20:06 2023 GMT
            Not After : Oct 14 01:30:03 2024 GMT
        Subject: CN=526190675852E4D3D2D818AA458F26ABFCBA5C54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8c:ec:89:35:03:e4:66:cb:6d:4c:cf:d2:5b:
                    15:29:6e:67:66:71:e5:df:2e:c6:cf:c2:b0:2c:1f:
                    97:db:47:19:8a:ca:15:b9:53:3c:d7:50:94:95:59:
                    62:76:ed:60:8a:5a:16:e6:2d:97:23:13:03:1e:bf:
                    58:73:8e:ad:26:c6:84:c8:cd:6e:12:f0:cc:86:a5:
                    27:14:ab:38:7d:ed:3c:40:d8:b6:fa:4d:4e:1f:0e:
                    92:ed:27:fc:94:37:55:13:6b:c5:76:b1:14:b5:2f:
                    c2:0b:ae:7e:b2:29:ae:f8:1c:bb:ac:d1:90:3d:c8:
                    d8:6a:70:ef:73:0e:6d:98:bf:ea:3a:1d:87:78:d1:
                    dd:06:65:fd:9c:8f:53:7e:32:73:3d:86:b0:2c:49:
                    1e:f8:70:68:a0:bd:39:c2:4e:45:55:47:a9:07:bd:
                    d4:ad:84:1c:8e:75:5f:89:9f:f2:c0:3b:12:a6:96:
                    45:c1:90:95:08:ea:f2:ec:84:90:fc:2d:0c:f4:f8:
                    d0:22:dc:cc:d0:91:73:ee:ff:a8:2f:94:67:d8:78:
                    fa:65:74:63:10:29:59:66:a2:60:17:36:d0:9b:d3:
                    9b:52:86:1f:18:6d:fe:e8:0d:aa:b6:5b:68:f3:24:
                    ff:b0:f9:03:1e:c6:52:5f:ec:8f:7e:6f:69:30:d1:
                    39:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:61:90:67:58:52:E4:D3:D2:D8:18:AA:45:8F:26:AB:FC:BA:5C:54
            X509v3 Authority Key Identifier:
                keyid:60:84:C8:29:97:BC:86:36:5F:53:18:86:7E:FF:B8:25:61:95:54:74

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30409/YITIKZe8hjZfUxiGfv-4JWGVVHQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/YITIKZe8hjZfUxiGfv-4JWGVVHQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30409/UmGQZ1hS5NPS2BiqRY8mq_y6XFQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:b420::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:68:66:4e:51:d1:da:a7:50:7d:0b:5f:0c:61:38:79:61:03:
         94:21:d0:86:ed:a8:42:db:63:2f:3b:9b:12:e4:19:ff:d7:75:
         f4:5f:45:20:de:62:0b:ef:a2:a5:7e:88:ba:47:0e:a6:9e:a2:
         8e:fe:ad:08:0a:0f:75:5c:87:e2:0f:66:4c:2c:29:26:75:b7:
         ea:05:42:e8:a8:ba:79:58:4c:b6:73:e1:0f:be:26:5a:a6:8a:
         0d:c6:0c:0a:df:68:0a:b2:29:32:a6:73:9d:f9:3f:0f:f1:cb:
         2e:7b:5f:e4:65:34:c3:48:01:2c:96:cd:c1:8e:de:7f:58:c1:
         b4:56:c0:58:6c:dd:a3:1e:03:da:4f:2f:cb:3d:4f:87:dd:0b:
         05:74:9c:cd:46:0c:ab:07:9d:d9:d8:0a:90:2b:66:12:ad:22:
         43:83:a9:d6:6c:93:7c:b9:7e:0c:93:cb:11:db:05:c0:85:85:
         30:aa:83:b7:c1:a6:90:ad:37:c8:64:4e:0c:56:51:d8:ae:d3:
         6e:a8:3d:bd:fd:4c:b4:98:89:ed:cf:57:82:ea:93:15:2f:51:
         b8:67:a1:e5:ec:5f:4d:87:2f:d7:73:ea:7c:0d:4d:f2:11:45:
         8d:4f:2b:b6:11:97:a0:e9:78:b1:1c:cd:0d:72:3d:48:e7:cf:
         13:1d:81:45
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIBDzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2MDg0
QzgyOTk3QkM4NjM2NUY1MzE4ODY3RUZGQjgyNTYxOTU1NDc0MB4XDTIzMTAyNzEy
MjAwNloXDTI0MTAxNDAxMzAwM1owMzExMC8GA1UEAxMoNTI2MTkwNjc1ODUyRTRE
M0QyRDgxOEFBNDU4RjI2QUJGQ0JBNUM1NDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALaM7Ik1A+Rmy21Mz9JbFSluZ2Zx5d8uxs/CsCwfl9tHGYrKFblT
PNdQlJVZYnbtYIpaFuYtlyMTAx6/WHOOrSbGhMjNbhLwzIalJxSrOH3tPEDYtvpN
Th8Oku0n/JQ3VRNrxXaxFLUvwguufrIprvgcu6zRkD3I2Gpw73MObZi/6jodh3jR
3QZl/ZyPU34ycz2GsCxJHvhwaKC9OcJORVVHqQe91K2EHI51X4mf8sA7EqaWRcGQ
lQjq8uyEkPwtDPT40CLczNCRc+7/qC+UZ9h4+mV0YxApWWaiYBc20JvTm1KGHxht
/ugNqrZbaPMk/7D5Ax7GUl/sj35vaTDROXECAwEAAaOCAikwggIlMB0GA1UdDgQW
BBRSYZBnWFLk09LYGKpFjyar/LpcVDAfBgNVHSMEGDAWgBRghMgpl7yGNl9TGIZ+
/7glYZVUdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzA0MDkvWUlUSUtaZThoalpmVXhpR2Z2LTRKV0dWVkhRLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvWUlUSUtaZThoalpmVXhpR2Z2LTRK
V0dWVkhRLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwNDA5L1VtR1FaMWhTNU5QUzJCaXFSWThtcV95NlhGUS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E
AgACMAcDBQAkALQgMA0GCSqGSIb3DQEBCwUAA4IBAQAwaGZOUdHap1B9C18MYTh5
YQOUIdCG7ahC22MvO5sS5Bn/13X0X0Ug3mIL76Klfoi6Rw6mnqKO/q0ICg91XIfi
D2ZMLCkmdbfqBULoqLp5WEy2c+EPviZapooNxgwK32gKsikypnOd+T8P8csue1/k
ZTTDSAEsls3Bjt5/WMG0VsBYbN2jHgPaTy/LPU+H3QsFdJzNRgyrB53Z2AqQK2YS
rSJDg6nWbJN8uX4Mk8sR2wXAhYUwqoO3waaQrTfIZE4MVlHYrtNuqD29/Uy0mInt
z1eC6pMVL1G4Z6Hl7F9Nhy/Xc+p8DU3yEUWNTyu2EZeg6XixHM0Ncj1I588THYFF
-----END CERTIFICATE-----
Generated at Thu Jun 27 03:27:59 2024 by rpki-client on console-ams.rpki-client.org