Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10699/LQY7TdtQs-iak6NGFFV4NI_rBus.roa
File:                     LQY7TdtQs-iak6NGFFV4NI_rBus.roa (raw, json)
Hash identifier:          ApgJ6pWDDESZc8ePCFPEjJTGI3PbsSGaNX/Fk/RzU70=
Subject key identifier:   2D:06:3B:4D:DB:50:B3:E8:9A:93:A3:46:14:55:78:34:8F:EB:06:EB
Certificate issuer:       /CN=CFEA2C2AAD63BCCA4D4AC96A852140D4261597B8
Certificate serial:       53
Authority key identifier: CF:EA:2C:2A:AD:63:BC:CA:4D:4A:C9:6A:85:21:40:D4:26:15:97:B8
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/z-osKq1jvMpNSslqhSFA1CYVl7g.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10699/LQY7TdtQs-iak6NGFFV4NI_rBus.roa
Signing time:             Thu 29 Feb 2024 01:29:38 +0000
ROA not before:           Thu 29 Feb 2024 01:29:38 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     7671
IP address blocks:        122.50.16.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10699/z-osKq1jvMpNSslqhSFA1CYVl7g.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10699/z-osKq1jvMpNSslqhSFA1CYVl7g.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/z-osKq1jvMpNSslqhSFA1CYVl7g.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 14:09:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83 (0x53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFEA2C2AAD63BCCA4D4AC96A852140D4261597B8
        Validity
            Not Before: Feb 29 01:29:38 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=2D063B4DDB50B3E89A93A346145578348FEB06EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:94:18:d1:05:4f:64:46:ba:c9:ea:8f:18:b1:
                    20:cf:c5:f9:7a:e3:ee:01:d2:6d:f3:7d:59:0d:a2:
                    7e:df:0a:40:a7:59:fa:09:2f:f2:fd:a6:38:9b:41:
                    cc:56:52:72:a9:68:6a:9f:47:8a:b7:5c:74:3e:4b:
                    c3:a5:72:a0:16:9e:fb:01:a9:8f:21:8b:0f:0a:31:
                    9b:84:fe:52:4d:36:f1:28:de:90:a6:0b:6b:dc:c2:
                    ad:b6:01:3b:ce:d7:9e:79:34:98:c4:cb:18:fa:b5:
                    e9:d3:4e:27:7d:57:71:c5:01:e3:4e:2a:fe:72:f0:
                    73:a0:d0:d3:76:d4:55:cc:fc:67:e1:28:7a:c1:74:
                    0c:ba:8c:18:23:0f:ec:fd:bd:77:51:a0:d0:d9:6e:
                    29:9d:d1:bf:4c:9d:8a:04:2e:50:01:59:10:70:67:
                    a9:7c:9a:17:f0:14:c0:dc:e2:6d:94:c9:a9:2d:f7:
                    e0:22:42:f3:43:8e:80:99:71:6c:6f:2d:3e:4e:8c:
                    fd:e8:a7:a0:f8:15:c0:1f:5c:ef:3b:ae:24:7f:ee:
                    b4:b6:a0:be:88:1f:2f:e7:d0:cd:ca:db:8b:c3:52:
                    d7:04:4c:ba:b4:6a:c0:6a:3d:60:45:d2:43:da:75:
                    a5:bf:94:03:05:d6:1d:6e:e2:03:63:cf:52:a9:4c:
                    39:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:06:3B:4D:DB:50:B3:E8:9A:93:A3:46:14:55:78:34:8F:EB:06:EB
            X509v3 Authority Key Identifier:
                keyid:CF:EA:2C:2A:AD:63:BC:CA:4D:4A:C9:6A:85:21:40:D4:26:15:97:B8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10699/z-osKq1jvMpNSslqhSFA1CYVl7g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/z-osKq1jvMpNSslqhSFA1CYVl7g.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10699/LQY7TdtQs-iak6NGFFV4NI_rBus.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.50.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         48:20:95:a7:70:93:ba:3e:41:1e:39:de:ad:14:82:e2:2b:7c:
         4f:16:7a:ca:da:ee:29:58:59:9c:4f:b9:c5:2b:40:e9:5c:20:
         a0:4a:78:1c:76:a2:f2:5f:c5:9d:02:35:49:ac:21:79:2c:d1:
         28:58:cf:7c:af:b5:95:8f:ca:63:67:c9:ab:f3:c4:fd:f6:1f:
         75:6e:cb:cf:ce:7a:de:57:21:69:87:21:25:34:81:fb:92:0c:
         f6:31:15:c8:25:af:0a:4e:aa:e3:b9:af:93:6f:23:d0:96:c6:
         a2:93:22:ce:32:ce:56:73:7c:a8:ae:d2:0c:2c:da:e4:40:3e:
         52:a5:45:c0:b6:9e:c1:43:90:3f:33:5a:28:9b:8d:1b:19:3c:
         b0:46:79:67:40:59:23:99:18:4e:6b:a8:67:2b:80:1d:5a:31:
         be:6b:a8:fb:f5:0b:69:62:84:ec:fe:6d:c9:0e:c1:37:28:74:
         e5:16:c8:25:39:07:4b:87:04:f3:ac:56:94:85:1b:b4:2f:42:
         8b:e9:22:0f:09:69:28:84:36:bd:d0:bd:54:06:31:02:6e:2a:
         54:2e:05:98:7a:7a:1c:ef:92:45:e2:93:3f:73:52:b1:4d:31:
         34:2e:da:3e:74:54:75:d0:e0:e5:99:a9:60:41:04:ac:27:66:
         cf:65:3e:2e
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBUzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDRkVB
MkMyQUFENjNCQ0NBNEQ0QUM5NkE4NTIxNDBENDI2MTU5N0I4MB4XDTI0MDIyOTAx
MjkzOFoXDTI1MDIxNDAxMzAwM1owMzExMC8GA1UEAxMoMkQwNjNCNEREQjUwQjNF
ODlBOTNBMzQ2MTQ1NTc4MzQ4RkVCMDZFQjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANiUGNEFT2RGusnqjxixIM/F+Xrj7gHSbfN9WQ2ift8KQKdZ+gkv
8v2mOJtBzFZScqloap9HirdcdD5Lw6VyoBae+wGpjyGLDwoxm4T+Uk028SjekKYL
a9zCrbYBO87Xnnk0mMTLGPq16dNOJ31XccUB404q/nLwc6DQ03bUVcz8Z+EoesF0
DLqMGCMP7P29d1Gg0NluKZ3Rv0ydigQuUAFZEHBnqXyaF/AUwNzibZTJqS334CJC
80OOgJlxbG8tPk6M/einoPgVwB9c7zuuJH/utLagvogfL+fQzcrbi8NS1wRMurRq
wGo9YEXSQ9p1pb+UAwXWHW7iA2PPUqlMOd0CAwEAAaOCAigwggIkMB0GA1UdDgQW
BBQtBjtN21Cz6JqTo0YUVXg0j+sG6zAfBgNVHSMEGDAWgBTP6iwqrWO8yk1KyWqF
IUDUJhWXuDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTA2OTkvei1vc0txMWp2TXBOU3NscWhTRkExQ1lWbDdnLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvei1vc0txMWp2TXBOU3NscWhTRkEx
Q1lWbDdnLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzEwNjk5L0xRWTdUZHRRcy1pYWs2TkdGRlY0TklfckJ1cy5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAR6MhAwDQYJKoZIhvcNAQELBQADggEBAEggladwk7o+QR453q0UguIr
fE8Wesra7ilYWZxPucUrQOlcIKBKeBx2ovJfxZ0CNUmsIXks0ShYz3yvtZWPymNn
yavzxP32H3Vuy8/Oet5XIWmHISU0gfuSDPYxFcglrwpOquO5r5NvI9CWxqKTIs4y
zlZzfKiu0gws2uRAPlKlRcC2nsFDkD8zWiibjRsZPLBGeWdAWSOZGE5rqGcrgB1a
Mb5rqPv1C2lihOz+bckOwTcodOUWyCU5B0uHBPOsVpSFG7QvQovpIg8JaSiENr3Q
vVQGMQJuKlQuBZh6ehzvkkXikz9zUrFNMTQu2j50VHXQ4OWZqWBBBKwnZs9lPi4=
-----END CERTIFICATE-----
Generated at Mon Jun 17 14:51:59 2024 by rpki-client on console-ams.rpki-client.org