Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/Zu6CljrMkA3EHpFZsXfGqWbGOdg.roa
File:                     Zu6CljrMkA3EHpFZsXfGqWbGOdg.roa (raw, json)
Hash identifier:          5iUV/2aWvWNefIS8V3lmeFcXjTglXEx8hVSxYCR/ZSA=
Subject key identifier:   66:EE:82:96:3A:CC:90:0D:C4:1E:91:59:B1:77:C6:A9:66:C6:39:D8
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       01CE
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/Zu6CljrMkA3EHpFZsXfGqWbGOdg.roa
Signing time:             Wed 01 Nov 2023 01:31:16 +0000
ROA not before:           Wed 01 Nov 2023 01:31:16 +0000
ROA not after:            Mon 14 Oct 2024 01:30:03 +0000
asID:                     9371
IP address blocks:        219.94.128.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Oct 2024 13:34:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 462 (0x1ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Nov  1 01:31:16 2023 GMT
            Not After : Oct 14 01:30:03 2024 GMT
        Subject: CN=66EE82963ACC900DC41E9159B177C6A966C639D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:3d:08:48:75:b9:e1:6f:1b:42:90:a4:39:d2:
                    a7:7e:e7:1c:b5:31:94:ca:62:62:42:b7:c4:59:dc:
                    38:c8:d2:84:0e:d8:cc:b4:26:2c:54:d9:a0:84:43:
                    d9:a9:81:d3:b6:a6:8e:14:61:98:86:fe:d9:5f:37:
                    bc:11:df:b8:97:27:0c:71:e0:64:cf:11:6a:13:92:
                    d3:cd:e5:db:c9:bf:2d:6c:16:78:fa:00:cb:d4:76:
                    79:a2:3f:44:4a:21:05:e2:38:c6:d6:2a:c7:a1:e4:
                    f4:c5:a1:c1:e9:be:ae:8f:05:a6:d7:57:7c:0f:8e:
                    03:96:ad:18:f3:3d:c7:ca:39:88:fa:ed:04:0f:65:
                    ad:2a:83:2e:c0:3e:30:cb:2a:fa:ba:2f:fa:2e:de:
                    fb:e2:43:25:ab:45:8e:f7:69:69:27:74:de:02:88:
                    c4:31:20:5a:34:20:33:47:51:f3:51:5b:71:49:2b:
                    fb:17:53:07:e8:b3:d8:26:4f:a3:69:48:8d:e7:7d:
                    7e:f9:1f:90:75:a1:55:28:f7:af:5e:0d:5a:9c:61:
                    8e:2c:a8:59:aa:39:25:00:d3:66:a6:57:9e:ab:5f:
                    4b:2c:3f:e7:78:f5:12:51:fc:a4:41:67:5d:5d:fb:
                    67:d9:03:72:2b:1a:e2:a3:71:78:f4:e4:3e:2c:9f:
                    2b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:EE:82:96:3A:CC:90:0D:C4:1E:91:59:B1:77:C6:A9:66:C6:39:D8
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/Zu6CljrMkA3EHpFZsXfGqWbGOdg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.94.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         b8:f0:96:63:c6:b3:79:ee:b2:29:9b:f5:d6:8c:b8:32:df:f1:
         58:2a:fd:d9:12:6f:78:fb:72:0a:47:1b:9e:4d:13:51:27:7d:
         99:f2:9e:ae:10:ab:33:ac:e9:1a:d5:11:f6:fe:24:77:77:eb:
         fa:79:29:22:8f:03:c5:af:e3:9d:17:2f:84:d5:dc:9e:1c:52:
         29:6d:8d:23:41:9d:70:53:52:5f:ee:e5:dc:58:ae:ae:56:1b:
         79:1f:5d:c8:c7:b7:05:56:99:5f:6b:35:fe:4c:be:76:b6:21:
         fa:db:7f:66:17:cd:25:80:1a:64:ab:73:7e:bf:bd:f1:6d:ec:
         9a:af:b6:e9:ad:2f:91:f5:6b:9f:c6:4d:2a:27:50:52:4a:fb:
         6e:1d:d2:da:60:5b:19:d4:5f:59:0f:4f:cc:21:7b:07:b1:b9:
         f3:5d:6a:4f:39:2b:e0:1f:c5:df:18:08:c4:3d:56:ec:0d:c9:
         fe:19:d9:7c:f6:97:8c:be:a1:66:8a:3b:8b:87:7e:73:78:17:
         6a:cd:84:d9:9f:8f:9d:9f:b8:2e:20:7a:0c:bb:83:68:89:67:
         22:56:8c:31:b9:2a:d9:66:6d:fd:96:84:c3:6d:34:c0:e8:a7:
         d5:17:db:bf:87:90:a7:cf:b6:88:91:e9:6a:54:0e:04:71:dc:
         04:94:3c:6d
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgICAc4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjAz
MjBGNkQwOURCMThDMEY3MEIzNTRBM0Q4NzQ1MEY3MEU2RDcxQTAeFw0yMzExMDEw
MTMxMTZaFw0yNDEwMTQwMTMwMDNaMDMxMTAvBgNVBAMTKDY2RUU4Mjk2M0FDQzkw
MERDNDFFOTE1OUIxNzdDNkE5NjZDNjM5RDgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCjPQhIdbnhbxtCkKQ50qd+5xy1MZTKYmJCt8RZ3DjI0oQO2My0
JixU2aCEQ9mpgdO2po4UYZiG/tlfN7wR37iXJwxx4GTPEWoTktPN5dvJvy1sFnj6
AMvUdnmiP0RKIQXiOMbWKseh5PTFocHpvq6PBabXV3wPjgOWrRjzPcfKOYj67QQP
Za0qgy7APjDLKvq6L/ou3vviQyWrRY73aWkndN4CiMQxIFo0IDNHUfNRW3FJK/sX
Uwfos9gmT6NpSI3nfX75H5B1oVUo969eDVqcYY4sqFmqOSUA02amV56rX0ssP+d4
9RJR/KRBZ11d+2fZA3IrGuKjcXj05D4snyuvAgMBAAGjggIoMIICJDAdBgNVHQ4E
FgQUZu6CljrMkA3EHpFZsXfGqWbGOdgwHwYDVR0jBBgwFoAUIDIPbQnbGMD3CzVK
PYdFD3Dm1xowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEwMjQ3L0lESVBiUW5iR01EM0N6VktQWWRGRDNEbTF4by5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0lESVBiUW5iR01EM0N6VktQWWRG
RDNEbTF4by5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8xMDI0Ny9adTZDbGpyTWtBM0VIcEZac1hmR3FXYkdPZGcu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQH216AMA0GCSqGSIb3DQEBCwUAA4IBAQC48JZjxrN57rIpm/XWjLgy
3/FYKv3ZEm94+3IKRxueTRNRJ32Z8p6uEKszrOka1RH2/iR3d+v6eSkijwPFr+Od
Fy+E1dyeHFIpbY0jQZ1wU1Jf7uXcWK6uVht5H13Ix7cFVplfazX+TL52tiH6239m
F80lgBpkq3N+v73xbeyar7bprS+R9Wufxk0qJ1BSSvtuHdLaYFsZ1F9ZD0/MIXsH
sbnzXWpPOSvgH8XfGAjEPVbsDcn+Gdl89peMvqFmijuLh35zeBdqzYTZn4+dn7gu
IHoMu4NoiWciVowxuSrZZm39loTDbTTA6KfVF9u/h5Cnz7aIkelqVA4EcdwElDxt
-----END CERTIFICATE-----
Generated at Fri Sep 27 05:00:11 2024 by rpki-client on console-fra.rpki-client.org