Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/yco2GZ6Y9Mt_14S5V5jX4lnA_oU.roa
File:                     yco2GZ6Y9Mt_14S5V5jX4lnA_oU.roa (raw, json)
Hash identifier:          4aVNxIksj7Y5qgRuXnrGuUehlW+6WDhzM9dnYIvQJuw=
Subject key identifier:   C9:CA:36:19:9E:98:F4:CB:7F:D7:84:B9:57:98:D7:E2:59:C0:FE:85
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       01CE
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/yco2GZ6Y9Mt_14S5V5jX4lnA_oU.roa
Signing time:             Fri 31 May 2024 01:30:51 +0000
ROA not before:           Fri 31 May 2024 01:30:51 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     4713
IP address blocks:        210.170.64.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jul 2024 07:52:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 462 (0x1ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: May 31 01:30:51 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=C9CA36199E98F4CB7FD784B95798D7E259C0FE85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:14:ae:20:5b:ba:ee:a8:bd:50:4f:63:93:f9:
                    d7:0d:d2:1a:24:c0:75:46:18:33:81:3f:ba:9c:3e:
                    34:85:0e:a4:24:41:c9:7c:66:c9:03:30:22:fd:6f:
                    f9:ce:43:0d:f9:28:45:c0:ac:92:8c:e7:1a:8a:d9:
                    bf:25:ab:0b:16:1e:f3:cb:b5:d5:8c:e7:5c:85:f6:
                    f7:80:0d:b7:67:f4:6d:51:86:d2:0b:5e:88:7b:c4:
                    7c:fa:f8:cc:c3:07:87:42:91:f3:f2:52:00:75:65:
                    48:34:48:11:55:8a:69:9b:43:8a:4d:dd:12:f5:16:
                    f0:06:9a:91:06:92:10:98:bc:02:af:d8:2a:44:e7:
                    77:b2:e9:ba:04:18:e2:99:1a:e9:92:0a:b5:00:39:
                    25:ba:63:26:b4:07:db:eb:90:19:3b:23:34:03:3d:
                    55:2a:99:f6:4e:01:90:ee:f4:75:ad:7b:fc:9a:8b:
                    90:ec:71:55:f6:34:31:a4:6c:c0:48:d1:da:db:57:
                    4e:9f:3f:b8:99:fb:d7:94:10:ad:3f:40:be:7b:b9:
                    d3:7d:ed:35:4b:e2:c0:46:a2:78:b6:dc:48:66:e5:
                    c3:cf:70:c7:a2:eb:bc:a8:ec:86:f5:59:98:ea:a8:
                    02:24:45:8e:34:d8:62:07:26:71:c9:0e:0e:17:47:
                    19:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:CA:36:19:9E:98:F4:CB:7F:D7:84:B9:57:98:D7:E2:59:C0:FE:85
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/yco2GZ6Y9Mt_14S5V5jX4lnA_oU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.170.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         a0:22:53:e6:2f:40:66:0b:87:b5:3b:94:5d:37:e7:c7:a7:5e:
         4c:5a:de:bf:e2:0d:a4:03:ca:5e:fd:d2:e3:9c:0c:bd:70:2f:
         e6:22:00:23:41:6b:e1:28:d3:de:b6:79:b8:e6:a1:8d:1b:09:
         d0:d6:c9:30:a4:36:c5:43:65:b1:71:a6:0d:6d:7b:f6:df:6f:
         78:c2:77:d0:23:e0:48:c1:68:e1:15:07:6b:b7:ad:6a:82:70:
         94:38:de:a4:d7:dc:bf:1e:5b:06:91:99:ee:84:c2:7a:aa:db:
         50:7d:17:41:b2:0d:0a:7a:35:21:f6:d8:f0:f6:49:6d:21:83:
         bb:57:dc:4a:67:56:82:bd:46:4d:80:f5:4a:81:52:77:47:97:
         ad:db:6f:17:72:ba:26:6e:61:80:28:be:6f:bb:8d:ea:d4:26:
         39:9e:fb:bf:02:a7:98:78:27:dd:8e:ad:41:e6:dd:63:06:72:
         0c:be:73:97:77:26:38:72:07:3d:04:4c:82:9b:a5:db:ee:8f:
         05:9d:17:cd:05:59:ca:88:a1:2e:9b:62:a0:b8:ec:2e:e9:db:
         74:d8:69:9c:d9:f2:2d:97:72:4a:2f:38:78:24:25:6a:dc:a8:
         0c:1a:35:fe:aa:ed:96:8c:1c:af:f8:75:69:48:d8:4a:0c:17:
         b1:48:b5:41
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAc4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD
MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yNDA1MzEw
MTMwNTFaFw0yNTA1MTUwMTMwMDNaMDMxMTAvBgNVBAMTKEM5Q0EzNjE5OUU5OEY0
Q0I3RkQ3ODRCOTU3OThEN0UyNTlDMEZFODUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCvFK4gW7ruqL1QT2OT+dcN0hokwHVGGDOBP7qcPjSFDqQkQcl8
ZskDMCL9b/nOQw35KEXArJKM5xqK2b8lqwsWHvPLtdWM51yF9veADbdn9G1RhtIL
Xoh7xHz6+MzDB4dCkfPyUgB1ZUg0SBFVimmbQ4pN3RL1FvAGmpEGkhCYvAKv2CpE
53ey6boEGOKZGumSCrUAOSW6Yya0B9vrkBk7IzQDPVUqmfZOAZDu9HWte/yai5Ds
cVX2NDGkbMBI0drbV06fP7iZ+9eUEK0/QL57udN97TVL4sBGoni23Ehm5cPPcMei
67yo7Ib1WZjqqAIkRY402GIHJnHJDg4XRxkNAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUyco2GZ6Y9Mt/14S5V5jX4lnA/oUwHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ
hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5
RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTMxL3ljbzJHWjZZOU10XzE0UzVWNWpYNGxuQV9vVS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAbSqkAwDQYJKoZIhvcNAQELBQADggEBAKAiU+YvQGYLh7U7lF0358enXkxa
3r/iDaQDyl790uOcDL1wL+YiACNBa+Eo0962ebjmoY0bCdDWyTCkNsVDZbFxpg1t
e/bfb3jCd9Aj4EjBaOEVB2u3rWqCcJQ43qTX3L8eWwaRme6Ewnqq21B9F0GyDQp6
NSH22PD2SW0hg7tX3EpnVoK9Rk2A9UqBUndHl63bbxdyuiZuYYAovm+7jerUJjme
+78Cp5h4J92OrUHm3WMGcgy+c5d3JjhyBz0ETIKbpdvujwWdF80FWcqIoS6bYqC4
7C7p23TYaZzZ8i2XckovOHgkJWrcqAwaNf6q7ZaMHK/4dWlI2EoMF7FItUE=
-----END CERTIFICATE-----
Generated at Wed Jun 26 09:28:33 2024 by rpki-client on console-fra.rpki-client.org