Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/xVRC500v3-DgoqAVYJhCCatax6w.roa
File:                     xVRC500v3-DgoqAVYJhCCatax6w.roa (raw, json)
Hash identifier:          7G7BjxnboWPJ+8qbDZ/cGD+8C88f0R5yHFNHhe6yVek=
Subject key identifier:   C5:54:42:E7:4D:2F:DF:E0:E0:A2:A0:15:60:98:42:09:AB:5A:C7:AC
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       01D6
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/xVRC500v3-DgoqAVYJhCCatax6w.roa
Signing time:             Wed 01 Nov 2023 01:31:20 +0000
ROA not before:           Wed 01 Nov 2023 01:31:20 +0000
ROA not after:            Mon 14 Oct 2024 01:30:03 +0000
asID:                     9371
IP address blocks:        183.181.76.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 14:09:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 470 (0x1d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Nov  1 01:31:20 2023 GMT
            Not After : Oct 14 01:30:03 2024 GMT
        Subject: CN=C55442E74D2FDFE0E0A2A01560984209AB5AC7AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:3b:35:8c:8d:87:74:d4:ae:df:3e:19:3e:dd:
                    02:05:21:dd:41:69:46:4b:8a:0f:ed:17:8f:72:af:
                    e1:8f:0f:f0:6e:61:3d:c8:61:37:bc:8e:a9:28:1a:
                    9d:64:2d:d3:ad:8f:13:d6:24:2d:ef:6e:12:ba:e6:
                    40:96:03:00:2d:99:5b:53:2e:d1:f3:17:28:74:74:
                    0d:66:ea:ac:0f:9e:dd:ea:f0:30:ec:52:7c:2e:21:
                    9b:4f:16:72:ce:be:e5:5e:a5:9a:5f:ff:ee:7f:cf:
                    99:a5:66:bf:a7:a7:a1:ca:dc:53:0d:6c:56:ef:11:
                    fe:9d:88:1c:70:f1:18:31:9b:59:ed:20:f1:ab:84:
                    41:a3:4c:94:61:dc:26:f3:42:58:5c:59:24:2e:f9:
                    ca:71:bd:a9:2a:6f:5d:8c:d2:e5:79:8d:27:47:f6:
                    c9:91:1b:8f:96:02:bb:56:37:31:c0:bf:09:aa:08:
                    56:c1:1b:54:1d:82:0d:be:42:70:6c:44:ef:98:41:
                    13:f1:72:ff:a0:72:08:f9:b2:79:75:e7:77:44:ba:
                    19:33:b1:34:b7:91:2c:0d:8c:99:aa:b8:cb:18:aa:
                    b5:f4:e2:62:47:af:03:60:7a:8d:f8:86:9b:eb:b9:
                    57:85:e2:81:85:aa:74:17:f4:be:84:86:c9:c5:9d:
                    a5:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:54:42:E7:4D:2F:DF:E0:E0:A2:A0:15:60:98:42:09:AB:5A:C7:AC
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/xVRC500v3-DgoqAVYJhCCatax6w.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.181.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c3:4d:1c:23:48:fa:b6:93:17:96:31:55:34:f2:6a:9c:c5:41:
         b5:10:49:e7:8d:39:c4:fb:77:6e:21:b4:ca:9a:70:76:87:4d:
         d5:83:06:ae:82:f9:66:7b:39:43:87:b0:8b:ee:b8:3a:e3:81:
         5c:38:33:e2:1a:19:ce:c8:63:a4:5e:86:ab:93:cb:17:e3:8f:
         77:3a:5a:03:2f:c1:80:84:f6:14:bd:1b:f9:f4:7e:ff:1b:3b:
         44:3b:99:47:9b:03:20:7e:4b:5b:7c:5a:b9:4a:c9:29:3f:5d:
         e9:8a:68:25:66:f7:73:85:b2:6a:13:3e:37:b9:bc:ef:dc:10:
         0d:72:3e:1b:31:54:01:f1:fd:41:c3:cb:62:de:7a:f8:b0:5e:
         27:fa:34:c7:70:a5:03:56:f3:93:8e:86:b4:bb:c8:27:8c:24:
         43:40:e1:d3:a8:da:6e:77:69:be:fa:3b:b1:1d:c6:44:42:8b:
         62:61:72:96:09:e4:5d:a4:f9:93:9c:b7:b1:1a:df:ed:52:d5:
         9d:b7:d7:50:79:f0:22:f7:4e:ca:d1:6e:ad:5f:30:00:98:99:
         c6:7e:bc:a3:8b:4d:6d:00:18:85:a6:1a:b1:58:93:1a:11:01:
         1e:f0:0f:99:67:60:f4:81:14:86:06:50:b8:e2:f9:3f:9a:ae:
         8e:0f:4e:61
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgICAdYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjAz
MjBGNkQwOURCMThDMEY3MEIzNTRBM0Q4NzQ1MEY3MEU2RDcxQTAeFw0yMzExMDEw
MTMxMjBaFw0yNDEwMTQwMTMwMDNaMDMxMTAvBgNVBAMTKEM1NTQ0MkU3NEQyRkRG
RTBFMEEyQTAxNTYwOTg0MjA5QUI1QUM3QUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDDOzWMjYd01K7fPhk+3QIFId1BaUZLig/tF49yr+GPD/BuYT3I
YTe8jqkoGp1kLdOtjxPWJC3vbhK65kCWAwAtmVtTLtHzFyh0dA1m6qwPnt3q8DDs
UnwuIZtPFnLOvuVepZpf/+5/z5mlZr+np6HK3FMNbFbvEf6diBxw8Rgxm1ntIPGr
hEGjTJRh3CbzQlhcWSQu+cpxvakqb12M0uV5jSdH9smRG4+WArtWNzHAvwmqCFbB
G1Qdgg2+QnBsRO+YQRPxcv+gcgj5snl153dEuhkzsTS3kSwNjJmquMsYqrX04mJH
rwNgeo34hpvruVeF4oGFqnQX9L6EhsnFnaVpAgMBAAGjggIoMIICJDAdBgNVHQ4E
FgQUxVRC500v3+DgoqAVYJhCCatax6wwHwYDVR0jBBgwFoAUIDIPbQnbGMD3CzVK
PYdFD3Dm1xowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEwMjQ3L0lESVBiUW5iR01EM0N6VktQWWRGRDNEbTF4by5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0lESVBiUW5iR01EM0N6VktQWWRG
RDNEbTF4by5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8xMDI0Ny94VlJDNTAwdjMtRGdvcUFWWUpoQ0NhdGF4Nncu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBt7VMMA0GCSqGSIb3DQEBCwUAA4IBAQDDTRwjSPq2kxeWMVU08mqc
xUG1EEnnjTnE+3duIbTKmnB2h03VgwaugvlmezlDh7CL7rg644FcODPiGhnOyGOk
Xoark8sX4493OloDL8GAhPYUvRv59H7/GztEO5lHmwMgfktbfFq5SskpP13pimgl
ZvdzhbJqEz43ubzv3BANcj4bMVQB8f1Bw8ti3nr4sF4n+jTHcKUDVvOTjoa0u8gn
jCRDQOHTqNpud2m++juxHcZEQotiYXKWCeRdpPmTnLexGt/tUtWdt9dQefAi907K
0W6tXzAAmJnGfryji01tABiFphqxWJMaEQEe8A+ZZ2D0gRSGBlC44vk/mq6OD05h
-----END CERTIFICATE-----
Generated at Mon Jun 17 11:39:06 2024 by rpki-client on console-fra.rpki-client.org