Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/DsvE5LbqTKrTFNpU2AjQH1S8u-I.roa
File:                     DsvE5LbqTKrTFNpU2AjQH1S8u-I.roa (raw, json)
Hash identifier:          5SgjE5TwxIXeZ5mvCH5qE2tkgajeOA3tOK3SzrvMycg=
Subject key identifier:   0E:CB:C4:E4:B6:EA:4C:AA:D3:14:DA:54:D8:08:D0:1F:54:BC:BB:E2
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       01C8
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/DsvE5LbqTKrTFNpU2AjQH1S8u-I.roa
Signing time:             Wed 01 Nov 2023 01:31:14 +0000
ROA not before:           Wed 01 Nov 2023 01:31:14 +0000
ROA not after:            Mon 14 Oct 2024 01:30:03 +0000
asID:                     7684
IP address blocks:        49.212.215.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 14:09:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 456 (0x1c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Nov  1 01:31:14 2023 GMT
            Not After : Oct 14 01:30:03 2024 GMT
        Subject: CN=0ECBC4E4B6EA4CAAD314DA54D808D01F54BCBBE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:8e:1c:0b:40:3b:3e:41:82:66:2d:b7:0e:0a:
                    c1:af:91:be:0b:e3:2e:ca:34:56:66:69:1d:80:65:
                    4b:4c:da:51:96:59:f4:cb:df:f2:8a:b0:be:41:e2:
                    22:5c:49:04:f1:bb:f7:fa:27:b7:ea:01:fd:a3:8b:
                    d0:a8:e8:a9:6e:5c:6b:f7:a1:38:eb:4b:40:7a:3c:
                    c9:73:33:0d:8f:9b:01:2e:e3:e1:a4:5b:54:77:c9:
                    54:72:23:ba:a1:19:7a:49:1d:c6:55:fc:89:6a:cf:
                    b3:5d:ca:9b:d5:e8:c7:d4:4a:1b:dd:ea:eb:17:47:
                    8f:1b:28:6e:e5:b4:75:44:f8:f2:b0:79:42:94:0c:
                    8a:c5:73:99:68:dd:73:da:c2:60:51:51:b1:89:4d:
                    81:39:60:e8:f9:88:51:d4:8b:60:63:1e:83:db:47:
                    55:15:35:06:75:cf:6e:a3:87:f3:38:67:65:ad:21:
                    ef:d0:c0:ec:1e:ad:34:d0:14:f1:e4:63:8a:a7:ec:
                    4f:d9:42:8e:c8:d7:08:06:d8:85:ca:7a:b0:cd:f3:
                    7a:49:56:eb:57:fb:20:fa:3a:e1:e2:97:3b:02:c9:
                    b6:72:30:10:24:3a:31:a7:10:27:98:92:71:2b:75:
                    b8:97:78:74:e8:ee:c5:9d:07:b2:5c:84:69:cf:a6:
                    fc:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:CB:C4:E4:B6:EA:4C:AA:D3:14:DA:54:D8:08:D0:1F:54:BC:BB:E2
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/DsvE5LbqTKrTFNpU2AjQH1S8u-I.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.212.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:72:f7:a9:6b:bb:ad:b4:b9:fc:bf:ed:03:c6:b6:34:b5:1e:
         70:ad:d9:3f:9f:a7:38:2f:56:7b:91:d6:a9:56:9f:64:16:f8:
         a5:b9:be:1f:e1:74:50:6f:4d:9a:e5:7c:dc:a8:3c:34:0b:34:
         f1:a1:21:2b:ca:97:db:54:88:14:c4:2a:47:77:c2:db:ad:f8:
         54:61:8c:e3:57:b3:1a:8e:d3:73:9d:aa:05:23:8d:de:6f:58:
         b7:d7:b2:46:8c:c2:c4:aa:a4:5b:d3:58:cf:49:93:d4:d0:64:
         91:83:59:0a:bf:36:7b:40:b8:fb:98:1e:ae:c5:94:c7:90:65:
         70:a6:41:28:33:3e:1a:4e:98:0d:6f:f1:e5:b7:ea:87:f3:43:
         30:57:95:b8:3a:bf:a8:82:b2:0e:b9:6f:0b:ae:71:1c:b0:12:
         9e:92:7e:2e:e1:7a:a3:73:b5:bf:30:65:f5:2f:60:8a:0a:50:
         fd:c5:e9:87:90:1f:93:24:78:e7:75:64:6b:e7:b4:9b:a9:3f:
         de:8a:9d:b7:cd:0c:a7:e0:4b:8f:90:97:9f:7e:af:a9:65:6f:
         c0:64:65:01:c7:5f:d1:6b:ff:8f:4d:b8:d5:ad:28:64:e9:58:
         88:23:e9:8c:83:84:14:ab:87:8a:d9:8d:a5:bf:40:0e:16:d5:
         4c:43:36:c0
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgICAcgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjAz
MjBGNkQwOURCMThDMEY3MEIzNTRBM0Q4NzQ1MEY3MEU2RDcxQTAeFw0yMzExMDEw
MTMxMTRaFw0yNDEwMTQwMTMwMDNaMDMxMTAvBgNVBAMTKDBFQ0JDNEU0QjZFQTRD
QUFEMzE0REE1NEQ4MDhEMDFGNTRCQ0JCRTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDijhwLQDs+QYJmLbcOCsGvkb4L4y7KNFZmaR2AZUtM2lGWWfTL
3/KKsL5B4iJcSQTxu/f6J7fqAf2ji9Co6KluXGv3oTjrS0B6PMlzMw2PmwEu4+Gk
W1R3yVRyI7qhGXpJHcZV/Ilqz7NdypvV6MfUShvd6usXR48bKG7ltHVE+PKweUKU
DIrFc5lo3XPawmBRUbGJTYE5YOj5iFHUi2BjHoPbR1UVNQZ1z26jh/M4Z2WtIe/Q
wOwerTTQFPHkY4qn7E/ZQo7I1wgG2IXKerDN83pJVutX+yD6OuHilzsCybZyMBAk
OjGnECeYknErdbiXeHTo7sWdB7JchGnPpvxNAgMBAAGjggIoMIICJDAdBgNVHQ4E
FgQUDsvE5LbqTKrTFNpU2AjQH1S8u+IwHwYDVR0jBBgwFoAUIDIPbQnbGMD3CzVK
PYdFD3Dm1xowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEwMjQ3L0lESVBiUW5iR01EM0N6VktQWWRGRDNEbTF4by5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0lESVBiUW5iR01EM0N6VktQWWRG
RDNEbTF4by5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8xMDI0Ny9Ec3ZFNUxicVRLclRGTnBVMkFqUUgxUzh1LUku
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAMdTXMA0GCSqGSIb3DQEBCwUAA4IBAQB6cvepa7uttLn8v+0DxrY0
tR5wrdk/n6c4L1Z7kdapVp9kFvilub4f4XRQb02a5XzcqDw0CzTxoSErypfbVIgU
xCpHd8LbrfhUYYzjV7MajtNznaoFI43eb1i317JGjMLEqqRb01jPSZPU0GSRg1kK
vzZ7QLj7mB6uxZTHkGVwpkEoMz4aTpgNb/Hlt+qH80MwV5W4Or+ogrIOuW8LrnEc
sBKekn4u4Xqjc7W/MGX1L2CKClD9xemHkB+TJHjndWRr57SbqT/eip23zQyn4EuP
kJeffq+pZW/AZGUBx1/Ra/+PTbjVrShk6ViII+mMg4QUq4eK2Y2lv0AOFtVMQzbA
-----END CERTIFICATE-----
Generated at Mon Jun 17 14:51:59 2024 by rpki-client on console-ams.rpki-client.org