Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/CCeaDZpHW2mGYVSwgt2xDJ5lfRs.roa
File:                     CCeaDZpHW2mGYVSwgt2xDJ5lfRs.roa (raw, json)
Hash identifier:          yyzy+nFOLIdT5a4fVGNC17LsVDmlRmcIMMM7V4Irbh0=
Subject key identifier:   08:27:9A:0D:9A:47:5B:69:86:61:54:B0:82:DD:B1:0C:9E:65:7D:1B
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       01D3
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/CCeaDZpHW2mGYVSwgt2xDJ5lfRs.roa
Signing time:             Fri 31 May 2024 01:30:52 +0000
ROA not before:           Fri 31 May 2024 01:30:52 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     4713
IP address blocks:        210.248.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jul 2024 06:55:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 467 (0x1d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: May 31 01:30:52 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=08279A0D9A475B69866154B082DDB10C9E657D1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:28:94:a3:68:2f:33:cd:1b:96:9b:45:5c:9e:
                    fd:5b:53:39:b3:af:e9:22:f1:4a:8a:00:ff:21:15:
                    72:fc:de:cc:2d:ad:4b:03:fe:a5:aa:49:f8:76:b4:
                    aa:56:ab:c9:a6:16:e1:27:ba:85:27:c5:69:cb:1e:
                    a7:ac:db:c8:ac:a6:c9:a3:6f:4e:fc:6f:1b:b8:26:
                    54:de:04:0e:c9:60:45:cf:b8:3a:3b:2a:5d:f2:7c:
                    60:77:bc:05:e0:96:aa:ec:b5:22:d7:88:e6:6c:8c:
                    93:1e:c2:9e:f9:38:fd:4d:3a:0c:34:a2:cd:ae:bb:
                    f2:d8:e8:e8:0a:6f:88:28:b5:1d:ba:36:4b:a4:07:
                    75:75:bf:bb:55:73:ec:a5:a5:a0:8b:a8:fd:a8:14:
                    f0:47:01:65:a2:13:c8:5e:74:d5:30:05:6b:75:f0:
                    50:c2:ad:8e:ba:3b:be:f6:c9:c1:99:60:f3:67:7a:
                    a5:94:57:f3:53:0c:0e:1f:c6:7b:82:bb:e6:28:c4:
                    27:6e:a0:b8:02:c8:9f:51:26:7d:25:38:a7:3f:02:
                    18:f5:93:93:41:97:b5:36:1b:50:5d:06:40:83:f1:
                    0c:dd:47:ca:17:85:58:8d:6b:78:b6:d7:e4:cf:c4:
                    d5:ef:62:7f:a0:d7:f0:71:6c:d7:f5:81:2c:8e:bc:
                    fa:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:27:9A:0D:9A:47:5B:69:86:61:54:B0:82:DD:B1:0C:9E:65:7D:1B
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/CCeaDZpHW2mGYVSwgt2xDJ5lfRs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.248.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         37:ba:fe:a8:48:2b:90:54:57:26:73:32:f5:e9:7e:af:b9:03:
         ca:04:1c:25:5f:06:81:7b:2f:1f:cd:da:8d:d9:b9:e8:b2:9b:
         88:87:d4:c0:7a:22:b3:9d:9c:28:7d:2c:c3:d5:1e:61:03:5c:
         68:54:6d:b7:fb:db:71:84:13:82:74:39:b3:3e:e3:62:36:b4:
         24:71:a5:52:05:0a:58:b7:91:ea:f2:80:6c:a3:73:34:09:a6:
         8b:77:a7:b8:0c:67:d4:04:c7:dc:94:e8:3e:e6:29:da:68:44:
         f4:bd:03:09:d1:81:a7:44:02:51:52:25:c4:20:19:61:61:b9:
         26:f3:fb:07:7d:48:81:95:35:64:74:3e:86:a3:83:27:6b:ec:
         4e:62:32:06:bf:a9:92:ad:30:0d:89:bc:b0:b3:30:84:da:8c:
         8c:0b:98:c4:22:5d:c2:f9:84:a1:09:9d:b4:60:ef:f1:6b:22:
         27:ae:4e:de:99:d9:f9:a9:d4:35:df:c9:0f:0e:64:de:d9:55:
         cc:d8:95:97:ea:9b:55:92:0d:08:a6:29:4d:9c:20:1f:b5:ab:
         bd:c9:98:1d:06:5d:46:ef:72:48:4b:b5:cb:99:1d:87:16:de:
         52:36:48:e9:92:47:2a:07:68:8e:3a:a1:be:ff:f4:ad:cf:44:
         1d:c6:41:4f
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICAdMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD
MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yNDA1MzEw
MTMwNTJaFw0yNTA1MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDA4Mjc5QTBEOUE0NzVC
Njk4NjYxNTRCMDgyRERCMTBDOUU2NTdEMUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCyKJSjaC8zzRuWm0Vcnv1bUzmzr+ki8UqKAP8hFXL83swtrUsD
/qWqSfh2tKpWq8mmFuEnuoUnxWnLHqes28ispsmjb078bxu4JlTeBA7JYEXPuDo7
Kl3yfGB3vAXglqrstSLXiOZsjJMewp75OP1NOgw0os2uu/LY6OgKb4gotR26Nkuk
B3V1v7tVc+ylpaCLqP2oFPBHAWWiE8hedNUwBWt18FDCrY66O772ycGZYPNneqWU
V/NTDA4fxnuCu+YoxCduoLgCyJ9RJn0lOKc/Ahj1k5NBl7U2G1BdBkCD8QzdR8oX
hViNa3i21+TPxNXvYn+g1/BxbNf1gSyOvPrTAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQUCCeaDZpHW2mGYVSwgt2xDJ5lfRswHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ
hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5
RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTMxL0NDZWFEWnBIVzJtR1lWU3dndDJ4REo1bGZScy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwDS+DANBgkqhkiG9w0BAQsFAAOCAQEAN7r+qEgrkFRXJnMy9el+r7kDygQc
JV8GgXsvH83ajdm56LKbiIfUwHois52cKH0sw9UeYQNcaFRtt/vbcYQTgnQ5sz7j
Yja0JHGlUgUKWLeR6vKAbKNzNAmmi3enuAxn1ATH3JToPuYp2mhE9L0DCdGBp0QC
UVIlxCAZYWG5JvP7B31IgZU1ZHQ+hqODJ2vsTmIyBr+pkq0wDYm8sLMwhNqMjAuY
xCJdwvmEoQmdtGDv8WsiJ65O3pnZ+anUNd/JDw5k3tlVzNiVl+qbVZINCKYpTZwg
H7WrvcmYHQZdRu9ySEu1y5kdhxbeUjZI6ZJHKgdojjqhvv/0rc9EHcZBTw==
-----END CERTIFICATE-----
Generated at Wed Jun 26 08:12:37 2024 by rpki-client on console-ams.rpki-client.org