Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11207/f1Wxy8KjglbnKscginCNoFO9gIA.roa
File:                     f1Wxy8KjglbnKscginCNoFO9gIA.roa (raw, json)
Hash identifier:          2d3CGWu8q31rV1E3LmVANYjC4usO7vr7hDXeM4344+4=
Subject key identifier:   7F:55:B1:CB:C2:A3:82:56:E7:2A:C7:20:8A:70:8D:A0:53:BD:80:80
Certificate issuer:       /CN=E056D0501D430CE0FCF0DB0675BAFC90B05D9BF5
Certificate serial:       59
Authority key identifier: E0:56:D0:50:1D:43:0C:E0:FC:F0:DB:06:75:BA:FC:90:B0:5D:9B:F5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4FbQUB1DDOD88NsGdbr8kLBdm_U.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/f1Wxy8KjglbnKscginCNoFO9gIA.roa
Signing time:             Thu 29 Feb 2024 01:29:19 +0000
ROA not before:           Thu 29 Feb 2024 01:29:19 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     55392
IP address blocks:        217.178.64.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4FbQUB1DDOD88NsGdbr8kLBdm_U.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Oct 2024 13:34:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89 (0x59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E056D0501D430CE0FCF0DB0675BAFC90B05D9BF5
        Validity
            Not Before: Feb 29 01:29:19 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=7F55B1CBC2A38256E72AC7208A708DA053BD8080
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:70:ba:3f:09:56:0e:45:5e:b5:9e:fa:2b:c8:
                    ca:a2:2d:6b:fd:38:75:9d:70:dc:83:9d:6f:cd:9f:
                    12:20:18:79:4f:ff:53:b4:2c:70:21:4e:c7:c0:7c:
                    5a:05:28:86:c8:11:0b:96:0d:50:5f:d6:cc:6f:ae:
                    99:08:2d:5c:1b:6c:b0:d9:58:92:95:41:6c:4f:e5:
                    97:6d:77:97:ea:80:de:12:59:07:62:87:3e:df:f5:
                    0c:63:a0:06:75:10:49:4b:eb:d6:84:c4:3d:57:25:
                    c0:7c:f7:90:41:38:be:f3:d3:bd:f9:14:9d:0e:da:
                    88:64:3a:3d:9f:0d:06:07:2e:35:a5:95:7c:51:66:
                    92:d7:b9:62:22:06:48:27:e9:5f:3a:8b:86:ca:ca:
                    bc:b5:d6:d6:5d:86:79:b1:e3:d0:64:89:3b:44:36:
                    ae:0d:f6:f9:75:16:c2:25:29:c3:89:d4:2d:e9:00:
                    a4:0b:ad:4a:ce:35:c5:91:8f:ef:75:f7:60:ae:2e:
                    ac:7f:72:50:6e:ec:2f:af:b2:d3:8d:5f:52:25:05:
                    ad:6b:08:83:9f:c8:64:21:2d:c4:d6:9a:b5:a7:2d:
                    60:4e:8d:99:8f:12:cb:85:22:ff:3f:4d:99:09:d1:
                    c8:23:a4:0c:86:1c:48:39:ab:66:b3:de:37:fe:54:
                    9a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:55:B1:CB:C2:A3:82:56:E7:2A:C7:20:8A:70:8D:A0:53:BD:80:80
            X509v3 Authority Key Identifier:
                keyid:E0:56:D0:50:1D:43:0C:E0:FC:F0:DB:06:75:BA:FC:90:B0:5D:9B:F5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4FbQUB1DDOD88NsGdbr8kLBdm_U.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/f1Wxy8KjglbnKscginCNoFO9gIA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.178.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         93:9d:ba:e9:cc:ce:22:b5:56:eb:40:82:18:17:ce:f3:0d:bd:
         04:84:dc:15:fa:08:e4:59:72:d4:81:78:81:8e:83:0f:53:bb:
         51:f1:c3:a6:ce:94:12:7c:bc:14:fc:3e:08:e3:cf:87:fc:20:
         1e:35:36:db:9f:e2:1c:50:6f:2c:06:e0:53:2a:94:f9:e2:de:
         f4:74:8a:f5:3f:02:09:92:34:05:01:46:b3:e8:26:1d:b5:3b:
         86:8c:dd:bd:0a:fd:18:f8:73:13:bb:c4:e2:f0:1a:f7:25:09:
         9d:58:2b:9c:a1:61:7a:f3:d6:af:66:2a:e4:8f:5d:94:ce:63:
         2b:b7:18:34:4f:dc:da:51:04:7b:f6:89:b4:1b:c5:08:1f:0b:
         a0:1e:18:05:b8:64:e0:c6:08:32:32:88:41:85:8b:f5:d4:35:
         50:05:08:4b:37:f4:49:31:4a:95:84:d3:30:6b:f4:46:bb:38:
         d2:e4:55:f4:8b:ea:d4:5c:da:a9:39:eb:d8:d7:85:ac:33:c7:
         cc:5b:22:56:bf:1a:ae:50:5a:43:49:27:81:46:a9:e1:44:71:
         12:6f:0e:7c:1f:ee:f1:08:ea:49:0d:0c:9d:2d:4e:db:cd:81:
         01:58:a4:21:16:b6:19:40:4f:11:51:ed:dc:2f:2f:96:97:28:
         15:4a:39:b9
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBWTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFMDU2
RDA1MDFENDMwQ0UwRkNGMERCMDY3NUJBRkM5MEIwNUQ5QkY1MB4XDTI0MDIyOTAx
MjkxOVoXDTI1MDIxNDAxMzAwM1owMzExMC8GA1UEAxMoN0Y1NUIxQ0JDMkEzODI1
NkU3MkFDNzIwOEE3MDhEQTA1M0JEODA4MDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKdwuj8JVg5FXrWe+ivIyqIta/04dZ1w3IOdb82fEiAYeU//U7Qs
cCFOx8B8WgUohsgRC5YNUF/WzG+umQgtXBtssNlYkpVBbE/ll213l+qA3hJZB2KH
Pt/1DGOgBnUQSUvr1oTEPVclwHz3kEE4vvPTvfkUnQ7aiGQ6PZ8NBgcuNaWVfFFm
kte5YiIGSCfpXzqLhsrKvLXW1l2GebHj0GSJO0Q2rg32+XUWwiUpw4nULekApAut
Ss41xZGP73X3YK4urH9yUG7sL6+y041fUiUFrWsIg5/IZCEtxNaatactYE6NmY8S
y4Ui/z9NmQnRyCOkDIYcSDmrZrPeN/5UmhUCAwEAAaOCAigwggIkMB0GA1UdDgQW
BBR/VbHLwqOCVucqxyCKcI2gU72AgDAfBgNVHSMEGDAWgBTgVtBQHUMM4Pzw2wZ1
uvyQsF2b9TAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTEyMDcvNEZiUVVCMURET0Q4OE5zR2RicjhrTEJkbV9VLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvNEZiUVVCMURET0Q4OE5zR2Ricjhr
TEJkbV9VLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzExMjA3L2YxV3h5OEtqZ2xibktzY2dpbkNOb0ZPOWdJQS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAbZskAwDQYJKoZIhvcNAQELBQADggEBAJOduunMziK1VutAghgXzvMN
vQSE3BX6CORZctSBeIGOgw9Tu1Hxw6bOlBJ8vBT8Pgjjz4f8IB41Ntuf4hxQbywG
4FMqlPni3vR0ivU/AgmSNAUBRrPoJh21O4aM3b0K/Rj4cxO7xOLwGvclCZ1YK5yh
YXrz1q9mKuSPXZTOYyu3GDRP3NpRBHv2ibQbxQgfC6AeGAW4ZODGCDIyiEGFi/XU
NVAFCEs39EkxSpWE0zBr9Ea7ONLkVfSL6tRc2qk569jXhawzx8xbIla/Gq5QWkNJ
J4FGqeFEcRJvDnwf7vEI6kkNDJ0tTtvNgQFYpCEWthlATxFR7dwvL5aXKBVKObk=
-----END CERTIFICATE-----
Generated at Fri Sep 27 05:00:11 2024 by rpki-client on console-fra.rpki-client.org