Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/W-StA7wk6A61Dcm_qCpsa5fFFQU.roa
File:                     W-StA7wk6A61Dcm_qCpsa5fFFQU.roa (raw, json)
Hash identifier:          9TPwrtjlXGFH2byT0iJGxBEczINldd6WJmR4/Uo/D6Y=
Subject key identifier:   5B:E4:AD:03:BC:24:E8:0E:B5:0D:C9:BF:A8:2A:6C:6B:97:C5:15:05
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       01B7
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/W-StA7wk6A61Dcm_qCpsa5fFFQU.roa
Signing time:             Sun 31 Mar 2024 01:29:09 +0000
ROA not before:           Sun 31 Mar 2024 01:29:09 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     4713
IP address blocks:        124.84.0.0/14 maxlen: 14

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jul 2024 06:55:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 439 (0x1b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Mar 31 01:29:09 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=5BE4AD03BC24E80EB50DC9BFA82A6C6B97C51505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b2:1f:44:0e:b0:79:24:71:8b:58:f5:d9:70:
                    a0:8e:13:1c:75:87:f8:fd:60:e7:75:a5:25:9e:46:
                    a5:59:a0:07:23:25:a0:e9:66:3e:3e:f3:f9:3e:2f:
                    36:3f:b5:5d:a3:a1:cb:71:7b:f9:15:b5:c2:10:2a:
                    cb:60:e9:8b:33:b8:9a:16:a8:9d:ee:a3:01:c0:77:
                    db:0e:e2:0d:15:b5:fe:79:3f:7d:7e:13:be:35:0c:
                    61:fa:a0:73:f7:72:ff:97:b2:84:d7:14:45:d5:71:
                    a6:6b:59:3a:b6:2e:05:f1:72:ae:5d:fe:87:6c:27:
                    b4:bd:5c:64:25:36:9a:17:76:76:36:47:06:ad:67:
                    f5:21:e3:16:37:d1:09:87:9c:de:55:65:48:95:c1:
                    a0:3e:e2:22:89:ec:08:59:2e:58:9f:09:00:fc:39:
                    40:b0:5f:1c:a1:0c:61:99:31:58:50:1c:9c:57:81:
                    5b:77:e6:d5:dd:9a:bf:ac:58:59:4e:36:5b:dd:ca:
                    9b:9a:fe:4c:fd:2f:c2:96:a5:96:72:80:fb:aa:25:
                    98:40:b9:07:bf:cd:29:8a:1a:d2:b0:9a:21:ca:73:
                    cd:52:40:31:f1:8d:91:4b:68:5e:1d:84:f2:53:94:
                    9e:d5:80:32:46:e8:69:9c:c3:f3:cd:7d:e3:db:ff:
                    d2:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:E4:AD:03:BC:24:E8:0E:B5:0D:C9:BF:A8:2A:6C:6B:97:C5:15:05
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/W-StA7wk6A61Dcm_qCpsa5fFFQU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.84.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         63:4f:18:c8:29:76:05:76:f0:e7:f6:d8:3d:3d:3f:21:bc:34:
         94:55:29:35:eb:97:3a:ce:fb:a4:37:0e:87:8b:0b:f2:47:e2:
         5a:91:ff:e0:5b:c8:be:10:79:b0:fc:34:f7:90:26:b0:21:64:
         44:cd:c0:26:0c:10:e4:14:50:db:45:81:3d:3b:68:b2:e4:c2:
         d0:a1:d0:6f:dc:ed:6b:b7:ad:33:f8:8b:89:51:9a:3c:64:b1:
         c7:aa:71:2c:38:c1:8f:07:bc:fa:11:7f:b7:fc:7f:be:26:e9:
         e9:e0:a3:4a:a4:3b:c3:dd:de:46:70:aa:ac:7a:8c:ec:5e:d8:
         4d:47:4f:5e:27:da:02:f7:57:c4:24:42:f5:7f:f7:63:22:dc:
         50:e2:71:d7:43:fb:aa:35:0b:1e:73:d2:1e:22:89:14:e0:3c:
         f0:7c:8e:34:b5:35:b8:d9:e0:de:80:3d:45:83:71:c3:2c:40:
         25:01:42:46:bf:6d:99:de:ea:37:5f:0c:01:30:3b:51:e8:7f:
         61:13:8c:b9:41:9a:8e:90:0d:3e:ff:ae:6c:da:92:b4:e8:06:
         c9:8a:d4:2e:af:8b:26:04:0c:d4:8b:8b:bb:77:d5:fe:af:9e:
         cb:15:0e:89:7f:13:29:e2:e5:cc:f4:bc:4d:6c:d7:73:88:a6:
         c3:20:67:7d
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICAbcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD
MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yNDAzMzEw
MTI5MDlaFw0yNTAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDVCRTRBRDAzQkMyNEU4
MEVCNTBEQzlCRkE4MkE2QzZCOTdDNTE1MDUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCfsh9EDrB5JHGLWPXZcKCOExx1h/j9YOd1pSWeRqVZoAcjJaDp
Zj4+8/k+LzY/tV2joctxe/kVtcIQKstg6YszuJoWqJ3uowHAd9sO4g0Vtf55P31+
E741DGH6oHP3cv+XsoTXFEXVcaZrWTq2LgXxcq5d/odsJ7S9XGQlNpoXdnY2Rwat
Z/Uh4xY30QmHnN5VZUiVwaA+4iKJ7AhZLlifCQD8OUCwXxyhDGGZMVhQHJxXgVt3
5tXdmr+sWFlONlvdypua/kz9L8KWpZZygPuqJZhAuQe/zSmKGtKwmiHKc81SQDHx
jZFLaF4dhPJTlJ7VgDJG6Gmcw/PNfePb/9JFAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQUW+StA7wk6A61Dcm/qCpsa5fFFQUwHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ
hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5
RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTMxL1ctU3RBN3drNkE2MURjbV9xQ3BzYTVmRkZRVS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwJ8VDANBgkqhkiG9w0BAQsFAAOCAQEAY08YyCl2BXbw5/bYPT0/Ibw0lFUp
NeuXOs77pDcOh4sL8kfiWpH/4FvIvhB5sPw095AmsCFkRM3AJgwQ5BRQ20WBPTto
suTC0KHQb9zta7etM/iLiVGaPGSxx6pxLDjBjwe8+hF/t/x/vibp6eCjSqQ7w93e
RnCqrHqM7F7YTUdPXifaAvdXxCRC9X/3YyLcUOJx10P7qjULHnPSHiKJFOA88HyO
NLU1uNng3oA9RYNxwyxAJQFCRr9tmd7qN18MATA7Ueh/YROMuUGajpANPv+ubNqS
tOgGyYrULq+LJgQM1IuLu3fV/q+eyxUOiX8TKeLlzPS8TWzXc4imwyBnfQ==
-----END CERTIFICATE-----
Generated at Wed Jun 26 08:12:37 2024 by rpki-client on console-ams.rpki-client.org