Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/2GEcPdassmTG4Gd05C1kh_dFjk4.roa
File:                     2GEcPdassmTG4Gd05C1kh_dFjk4.roa (raw, json)
Hash identifier:          1LicF5yr6VyLbv9BdehBkA0lV2wJnsd4gLkoofM0YiQ=
Subject key identifier:   D8:61:1C:3D:D6:AC:B2:64:C6:E0:67:74:E4:2D:64:87:F7:45:8E:4E
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       01BC
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/2GEcPdassmTG4Gd05C1kh_dFjk4.roa
Signing time:             Wed 01 Nov 2023 01:29:20 +0000
ROA not before:           Wed 01 Nov 2023 01:29:20 +0000
ROA not after:            Mon 14 Oct 2024 01:30:03 +0000
asID:                     9371
IP address blocks:        182.163.0.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 14:09:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 444 (0x1bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Nov  1 01:29:20 2023 GMT
            Not After : Oct 14 01:30:03 2024 GMT
        Subject: CN=D8611C3DD6ACB264C6E06774E42D6487F7458E4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:da:15:fd:30:06:bd:5b:2f:3b:48:b2:dc:ca:
                    a0:45:45:e2:bc:53:25:66:3e:11:84:da:84:d4:2f:
                    08:cd:0b:d4:de:47:e3:2a:d7:04:81:b4:90:8a:eb:
                    da:c1:3b:fb:d5:84:14:90:b1:be:39:e5:86:6a:e2:
                    2d:f9:53:85:07:83:4f:1b:2e:e0:aa:cd:af:89:20:
                    69:23:67:1b:7e:76:20:28:be:aa:d8:2a:5b:99:af:
                    20:e4:b1:66:a7:15:35:fa:20:ce:0c:ce:cd:55:70:
                    46:46:bc:7d:59:ee:83:be:ac:14:c1:ee:1f:8b:90:
                    1a:ab:25:88:55:41:22:24:35:73:01:47:a9:22:b0:
                    31:5d:cd:8f:87:4f:5a:ba:54:6f:0f:bb:e3:95:69:
                    a9:7e:32:5e:28:9a:49:ce:8a:e6:48:2d:54:64:e6:
                    a9:50:2a:da:2d:bc:5b:51:cc:86:d1:17:a9:02:e5:
                    ab:f7:af:aa:ee:6a:0c:5a:e6:79:b3:2d:15:71:2b:
                    51:04:59:b7:c5:e4:c1:a9:f8:dc:5d:26:2b:7a:89:
                    78:47:3e:4c:e1:f8:ed:81:02:ea:d8:d1:94:13:65:
                    92:96:99:cb:38:a8:ad:35:c3:04:3f:56:4e:e9:d5:
                    66:1d:c4:8f:b0:f2:7e:61:e6:ba:ca:bb:10:2d:68:
                    16:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:61:1C:3D:D6:AC:B2:64:C6:E0:67:74:E4:2D:64:87:F7:45:8E:4E
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/2GEcPdassmTG4Gd05C1kh_dFjk4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.163.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         c3:24:62:7b:21:b7:4f:a3:9a:a0:4b:3e:02:d1:10:4e:01:2e:
         44:c7:86:8a:77:66:3c:c8:9e:f1:1f:cd:9c:dc:b1:6d:ef:71:
         fc:4a:7e:1b:26:e4:f4:b0:31:b7:ff:e9:1b:5c:dc:11:12:fa:
         d6:18:90:62:e4:a8:10:74:7f:d0:5a:65:f5:e2:9c:5d:92:49:
         38:64:81:f6:27:d9:d2:cd:cb:0d:96:b6:92:6d:78:6b:6a:6f:
         62:97:fb:69:04:9f:3a:58:dd:db:b2:51:1d:b0:47:40:26:f7:
         5f:61:8a:b2:bf:97:be:df:a6:c9:fd:4f:81:7d:65:a4:36:21:
         19:67:6a:3c:10:4f:41:b5:6c:17:fa:5d:69:6e:6c:8a:3d:6b:
         d9:2d:f1:7b:c0:c9:02:c1:b2:2e:88:21:c7:28:1f:b2:de:10:
         de:91:09:6b:eb:22:13:1d:36:dd:2c:7c:4c:34:6d:dc:d5:ac:
         99:a0:f1:bf:60:35:77:82:a3:47:17:e0:54:c6:ff:90:59:5d:
         08:59:e1:d4:2d:07:d3:64:54:d3:39:07:8b:fe:7b:02:b7:bb:
         71:9a:5b:ed:92:8b:17:6b:d3:38:af:cb:90:9c:f3:38:bc:e0:
         57:4d:ba:69:fa:f3:b7:32:25:3d:c4:b0:fe:69:3d:c4:78:49:
         81:ed:8a:ae
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgICAbwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjAz
MjBGNkQwOURCMThDMEY3MEIzNTRBM0Q4NzQ1MEY3MEU2RDcxQTAeFw0yMzExMDEw
MTI5MjBaFw0yNDEwMTQwMTMwMDNaMDMxMTAvBgNVBAMTKEQ4NjExQzNERDZBQ0Iy
NjRDNkUwNjc3NEU0MkQ2NDg3Rjc0NThFNEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC32hX9MAa9Wy87SLLcyqBFReK8UyVmPhGE2oTULwjNC9TeR+Mq
1wSBtJCK69rBO/vVhBSQsb455YZq4i35U4UHg08bLuCqza+JIGkjZxt+diAovqrY
KluZryDksWanFTX6IM4Mzs1VcEZGvH1Z7oO+rBTB7h+LkBqrJYhVQSIkNXMBR6ki
sDFdzY+HT1q6VG8Pu+OVaal+Ml4omknOiuZILVRk5qlQKtotvFtRzIbRF6kC5av3
r6ruagxa5nmzLRVxK1EEWbfF5MGp+NxdJit6iXhHPkzh+O2BAurY0ZQTZZKWmcs4
qK01wwQ/Vk7p1WYdxI+w8n5h5rrKuxAtaBYnAgMBAAGjggIoMIICJDAdBgNVHQ4E
FgQU2GEcPdassmTG4Gd05C1kh/dFjk4wHwYDVR0jBBgwFoAUIDIPbQnbGMD3CzVK
PYdFD3Dm1xowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEwMjQ3L0lESVBiUW5iR01EM0N6VktQWWRGRDNEbTF4by5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0lESVBiUW5iR01EM0N6VktQWWRG
RDNEbTF4by5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8xMDI0Ny8yR0VjUGRhc3NtVEc0R2QwNUMxa2hfZEZqazQu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQFtqMAMA0GCSqGSIb3DQEBCwUAA4IBAQDDJGJ7IbdPo5qgSz4C0RBO
AS5Ex4aKd2Y8yJ7xH82c3LFt73H8Sn4bJuT0sDG3/+kbXNwREvrWGJBi5KgQdH/Q
WmX14pxdkkk4ZIH2J9nSzcsNlraSbXhram9il/tpBJ86WN3bslEdsEdAJvdfYYqy
v5e+36bJ/U+BfWWkNiEZZ2o8EE9BtWwX+l1pbmyKPWvZLfF7wMkCwbIuiCHHKB+y
3hDekQlr6yITHTbdLHxMNG3c1ayZoPG/YDV3gqNHF+BUxv+QWV0IWeHULQfTZFTT
OQeL/nsCt7txmlvtkosXa9M4r8uQnPM4vOBXTbpp+vO3MiU9xLD+aT3EeEmB7Yqu
-----END CERTIFICATE-----
Generated at Mon Jun 17 11:39:06 2024 by rpki-client on console-fra.rpki-client.org