Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30413/fmhMBMDuGsV-YcACq658dO3S08g.roa
File:                     fmhMBMDuGsV-YcACq658dO3S08g.roa (raw, json)
Hash identifier:          ozVOvj0BSMdb53L7vdqWG2giJ4dbjbDQ5W4SWJoTANo=
Subject key identifier:   7E:68:4C:04:C0:EE:1A:C5:7E:61:C0:02:AB:AE:7C:74:ED:D2:D3:C8
Certificate issuer:       /CN=6A137C41EFB32248F58A4EAB898F5DE0F2A3BAD3
Certificate serial:       0E
Authority key identifier: 6A:13:7C:41:EF:B3:22:48:F5:8A:4E:AB:89:8F:5D:E0:F2:A3:BA:D3
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ahN8Qe-zIkj1ik6riY9d4PKjutM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30413/fmhMBMDuGsV-YcACq658dO3S08g.roa
Signing time:             Sun 10 Dec 2023 10:44:19 +0000
ROA not before:           Sun 10 Dec 2023 10:44:19 +0000
ROA not after:            Thu 14 Nov 2024 01:30:03 +0000
asID:                     63797
IP address blocks:        2400:c7e0::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30413/ahN8Qe-zIkj1ik6riY9d4PKjutM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30413/ahN8Qe-zIkj1ik6riY9d4PKjutM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ahN8Qe-zIkj1ik6riY9d4PKjutM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 22 Jun 2024 01:32:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A137C41EFB32248F58A4EAB898F5DE0F2A3BAD3
        Validity
            Not Before: Dec 10 10:44:19 2023 GMT
            Not After : Nov 14 01:30:03 2024 GMT
        Subject: CN=7E684C04C0EE1AC57E61C002ABAE7C74EDD2D3C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f8:29:df:fd:89:7d:91:48:57:8c:4e:f6:09:
                    88:e9:99:55:6c:2e:8b:7d:c1:60:d6:d9:b8:56:d9:
                    c4:97:a0:a2:2a:b7:58:84:45:c0:59:51:67:eb:f1:
                    c5:a6:74:b3:2e:11:59:d4:7e:0f:22:f4:74:7c:d3:
                    da:45:81:58:b0:1e:80:77:0f:72:dc:ea:b2:1e:2b:
                    bf:9e:57:47:3e:a5:25:eb:03:e7:8c:b8:b7:9b:23:
                    1d:cd:e1:53:e7:de:00:1d:02:fa:98:f5:91:46:1f:
                    dd:62:25:14:f0:db:53:29:3b:54:46:fb:5c:c4:60:
                    57:67:5f:8b:65:19:da:5b:ae:2f:bb:8a:fd:e2:a1:
                    9e:88:09:c4:f1:68:a7:cf:61:b6:3a:28:5d:35:d3:
                    6a:bf:7f:83:3b:38:69:2f:18:eb:9d:01:52:fd:a8:
                    ec:6b:83:7a:50:d4:49:da:17:eb:82:fe:ee:99:95:
                    6d:27:28:b7:aa:8d:9f:2f:42:40:a8:08:f2:ef:23:
                    ab:91:75:b6:59:54:29:7e:da:7e:2d:44:84:52:8c:
                    df:aa:9a:20:a6:cc:6b:b4:00:f0:23:b0:09:d5:09:
                    68:c7:9f:5a:a2:eb:ec:a0:fd:20:81:09:fa:c8:53:
                    8b:e3:0b:d0:ec:be:08:0e:a6:d9:28:17:72:11:53:
                    c3:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:68:4C:04:C0:EE:1A:C5:7E:61:C0:02:AB:AE:7C:74:ED:D2:D3:C8
            X509v3 Authority Key Identifier:
                keyid:6A:13:7C:41:EF:B3:22:48:F5:8A:4E:AB:89:8F:5D:E0:F2:A3:BA:D3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30413/ahN8Qe-zIkj1ik6riY9d4PKjutM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ahN8Qe-zIkj1ik6riY9d4PKjutM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30413/fmhMBMDuGsV-YcACq658dO3S08g.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:c7e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:8e:40:1a:d4:41:b7:99:7f:88:54:15:f1:20:66:b2:f4:7b:
         f2:fb:8a:35:d5:e4:e4:aa:d3:e7:70:22:53:b0:37:03:1c:85:
         ed:9b:1d:c9:83:47:23:cb:11:d8:5f:70:ee:75:2d:3b:24:ae:
         f8:d5:0e:1c:89:6b:67:7b:57:82:25:b1:cb:37:6b:da:09:13:
         2c:3e:b0:e7:93:10:bf:8e:00:7e:dc:77:5b:b9:2a:99:50:b1:
         43:e5:37:06:6d:48:eb:98:35:6d:21:5d:8c:ad:47:3a:18:90:
         57:9f:59:0d:df:56:fd:5d:66:cb:eb:01:90:b1:e9:8d:a0:b7:
         d2:9b:fe:ec:62:20:ce:d6:7f:86:7d:8d:3e:50:ed:d8:35:4b:
         7f:69:33:2e:f0:b4:45:1b:40:17:4a:5e:b1:29:ec:33:cd:77:
         45:bb:5a:ab:5f:35:5e:48:f8:11:9e:e3:12:9c:43:a4:56:b1:
         2d:62:cd:4e:7c:5a:0f:5e:27:ae:e2:49:b1:41:2c:9c:d3:05:
         8f:1e:c9:13:1e:36:10:0e:b9:eb:25:ae:f0:9d:ad:4d:05:b7:
         05:bb:1f:a2:3e:42:5c:c6:4e:dc:c6:97:9a:05:b4:a8:15:96:
         63:2d:53:05:8d:20:96:ae:7d:4a:79:ea:a9:ff:94:38:c2:23:
         8f:a7:e7:a8
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgIBDjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2QTEz
N0M0MUVGQjMyMjQ4RjU4QTRFQUI4OThGNURFMEYyQTNCQUQzMB4XDTIzMTIxMDEw
NDQxOVoXDTI0MTExNDAxMzAwM1owMzExMC8GA1UEAxMoN0U2ODRDMDRDMEVFMUFD
NTdFNjFDMDAyQUJBRTdDNzRFREQyRDNDODCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKX4Kd/9iX2RSFeMTvYJiOmZVWwui33BYNbZuFbZxJegoiq3WIRF
wFlRZ+vxxaZ0sy4RWdR+DyL0dHzT2kWBWLAegHcPctzqsh4rv55XRz6lJesD54y4
t5sjHc3hU+feAB0C+pj1kUYf3WIlFPDbUyk7VEb7XMRgV2dfi2UZ2luuL7uK/eKh
nogJxPFop89htjooXTXTar9/gzs4aS8Y650BUv2o7GuDelDUSdoX64L+7pmVbSco
t6qNny9CQKgI8u8jq5F1tllUKX7afi1EhFKM36qaIKbMa7QA8COwCdUJaMefWqLr
7KD9IIEJ+shTi+ML0Oy+CA6m2SgXchFTw0kCAwEAAaOCAikwggIlMB0GA1UdDgQW
BBR+aEwEwO4axX5hwAKrrnx07dLTyDAfBgNVHSMEGDAWgBRqE3xB77MiSPWKTquJ
j13g8qO60zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzA0MTMvYWhOOFFlLXpJa2oxaWs2cmlZOWQ0UEtqdXRNLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvYWhOOFFlLXpJa2oxaWs2cmlZOWQ0
UEtqdXRNLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzMwNDEzL2ZtaE1CTUR1R3NWLVljQUNxNjU4ZE8zUzA4Zy5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E
AgACMAcDBQAkAMfgMA0GCSqGSIb3DQEBCwUAA4IBAQByjkAa1EG3mX+IVBXxIGay
9Hvy+4o11eTkqtPncCJTsDcDHIXtmx3Jg0cjyxHYX3DudS07JK741Q4ciWtne1eC
JbHLN2vaCRMsPrDnkxC/jgB+3HdbuSqZULFD5TcGbUjrmDVtIV2MrUc6GJBXn1kN
31b9XWbL6wGQsemNoLfSm/7sYiDO1n+GfY0+UO3YNUt/aTMu8LRFG0AXSl6xKewz
zXdFu1qrXzVeSPgRnuMSnEOkVrEtYs1OfFoPXieu4kmxQSyc0wWPHskTHjYQDrnr
Ja7wna1NBbcFux+iPkJcxk7cxpeaBbSoFZZjLVMFjSCWrn1Keeqp/5Q4wiOPp+eo
-----END CERTIFICATE-----
Generated at Sat Jun 15 02:41:51 2024 by rpki-client on console-ams.rpki-client.org