Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2490/fR5whITJwZS5y810geqBriD8uug.roa
File:                     fR5whITJwZS5y810geqBriD8uug.roa (raw, json)
Hash identifier:          UzU9YLBFdgEuALbiW1stjomdWQj8INClvo4EnR+GrkE=
Subject key identifier:   7D:1E:70:84:84:C9:C1:94:B9:CB:CD:74:81:EA:81:AE:20:FC:BA:E8
Certificate issuer:       /CN=B8E53C5244B7F9A76D5F9DF9FBAF61E57B2EA93B
Certificate serial:       47
Authority key identifier: B8:E5:3C:52:44:B7:F9:A7:6D:5F:9D:F9:FB:AF:61:E5:7B:2E:A9:3B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uOU8UkS3-adtX535-69h5XsuqTs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/fR5whITJwZS5y810geqBriD8uug.roa
Signing time:             Tue 14 May 2024 10:10:42 +0000
ROA not before:           Tue 14 May 2024 10:10:42 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     7687
IP address blocks:        160.246.128.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/uOU8UkS3-adtX535-69h5XsuqTs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/uOU8UkS3-adtX535-69h5XsuqTs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uOU8UkS3-adtX535-69h5XsuqTs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jul 2024 02:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 71 (0x47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8E53C5244B7F9A76D5F9DF9FBAF61E57B2EA93B
        Validity
            Not Before: May 14 10:10:42 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=7D1E708484C9C194B9CBCD7481EA81AE20FCBAE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b4:df:e5:ac:05:c2:40:43:a0:eb:1c:5b:df:
                    cb:a0:09:27:81:00:0c:7d:ea:23:1d:a8:b8:2b:f1:
                    70:23:b3:43:f9:e6:2c:c1:06:43:ce:60:9b:53:6b:
                    8f:76:6a:fb:9b:36:b9:bd:7c:52:f6:f2:6a:6d:e9:
                    76:08:65:dd:fa:58:63:b5:97:af:30:2a:71:54:58:
                    41:d4:80:2a:7e:f2:14:9b:b6:7c:ae:f5:fb:e9:e9:
                    72:85:ed:7c:ac:a4:3f:fc:3a:f5:82:bc:0e:c9:01:
                    d7:0a:b1:92:7e:9b:28:11:5b:7b:e6:1d:1c:13:06:
                    c7:47:fe:68:cc:88:5a:5c:e0:df:66:b0:b2:d9:1d:
                    5f:bd:0b:68:0e:8c:29:45:34:26:c4:4d:9f:eb:2f:
                    f7:de:9c:8f:c9:87:70:74:3f:8c:da:c6:12:7c:3a:
                    78:86:93:09:d7:d4:25:52:8f:44:13:31:df:09:30:
                    22:ea:25:3b:28:81:62:0b:c6:4b:7b:2f:f8:51:ad:
                    a5:af:22:0b:37:bd:e9:83:e2:02:fe:91:9a:4c:d4:
                    97:3d:c4:07:0d:6e:e2:61:19:6e:d1:c7:8d:b9:d7:
                    55:9f:7d:6a:dc:01:b9:bc:6d:22:c0:16:93:e4:27:
                    43:63:f9:82:e3:d2:37:0a:f9:24:0f:d9:a9:d0:fc:
                    66:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:1E:70:84:84:C9:C1:94:B9:CB:CD:74:81:EA:81:AE:20:FC:BA:E8
            X509v3 Authority Key Identifier:
                keyid:B8:E5:3C:52:44:B7:F9:A7:6D:5F:9D:F9:FB:AF:61:E5:7B:2E:A9:3B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/uOU8UkS3-adtX535-69h5XsuqTs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uOU8UkS3-adtX535-69h5XsuqTs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/fR5whITJwZS5y810geqBriD8uug.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.246.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         6e:a3:d0:2f:74:7f:83:d5:f7:2f:8a:05:a7:b4:25:a3:e1:5e:
         71:66:8b:bd:17:18:1e:97:b9:06:ad:eb:ea:04:92:94:c1:37:
         ba:90:6c:e0:67:92:84:0a:6d:b8:b2:36:5b:63:60:0d:dd:f5:
         c9:92:47:8c:43:1b:69:92:fa:ff:fa:c8:2f:7e:30:7e:c5:07:
         76:f6:a2:cb:e5:dd:17:ac:62:48:5b:a5:bf:c2:10:71:66:43:
         7e:5d:22:fb:d7:c8:3f:5b:7a:13:2a:ef:88:70:ca:86:ef:7c:
         27:8a:04:5c:53:13:e7:a3:9f:61:4a:23:79:6c:bb:5b:2e:86:
         cd:89:1c:28:d4:44:c2:f5:4a:da:a8:27:84:18:c1:0a:f8:79:
         ae:bb:e9:a6:e2:fb:f3:f5:0e:43:df:8f:6e:51:47:e3:a9:b6:
         bf:b1:4a:dd:d4:f5:4d:e4:a9:a4:2f:15:22:b4:8d:5b:53:0a:
         3e:ad:6c:f0:8c:1b:e5:54:0b:99:8f:d1:5e:78:d9:f6:a3:da:
         55:7c:36:72:9b:d1:ff:15:19:c5:e9:47:89:3b:7d:a2:b3:36:
         21:a9:01:f1:81:e8:42:a4:7a:81:32:67:5a:0a:48:17:f4:d3:
         ba:97:7f:f8:b6:87:1f:36:e5:e3:1f:4a:47:f0:4f:81:0f:12:
         1a:02:72:57
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgIBRzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCOEU1
M0M1MjQ0QjdGOUE3NkQ1RjlERjlGQkFGNjFFNTdCMkVBOTNCMB4XDTI0MDUxNDEw
MTA0MloXDTI1MDQxNTAxMzAwMlowMzExMC8GA1UEAxMoN0QxRTcwODQ4NEM5QzE5
NEI5Q0JDRDc0ODFFQTgxQUUyMEZDQkFFODCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALC03+WsBcJAQ6DrHFvfy6AJJ4EADH3qIx2ouCvxcCOzQ/nmLMEG
Q85gm1Nrj3Zq+5s2ub18Uvbyam3pdghl3fpYY7WXrzAqcVRYQdSAKn7yFJu2fK71
++npcoXtfKykP/w69YK8DskB1wqxkn6bKBFbe+YdHBMGx0f+aMyIWlzg32awstkd
X70LaA6MKUU0JsRNn+sv996cj8mHcHQ/jNrGEnw6eIaTCdfUJVKPRBMx3wkwIuol
OyiBYgvGS3sv+FGtpa8iCze96YPiAv6RmkzUlz3EBw1u4mEZbtHHjbnXVZ99atwB
ubxtIsAWk+QnQ2P5guPSNwr5JA/ZqdD8ZskCAwEAAaOCAiYwggIiMB0GA1UdDgQW
BBR9HnCEhMnBlLnLzXSB6oGuIPy66DAfBgNVHSMEGDAWgBS45TxSRLf5p21fnfn7
r2Hley6pOzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa
oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjQ5MC91T1U4VWtTMy1hZHRYNTM1LTY5aDVYc3VxVHMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91T1U4VWtTMy1hZHRYNTM1LTY5aDVY
c3VxVHMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI
KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMjQ5MC9mUjV3aElUSndaUzV5ODEwZ2VxQnJpRDh1dWcucm9h
MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv
cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA
ATAGAwQHoPaAMA0GCSqGSIb3DQEBCwUAA4IBAQBuo9AvdH+D1fcvigWntCWj4V5x
Zou9Fxgel7kGrevqBJKUwTe6kGzgZ5KECm24sjZbY2AN3fXJkkeMQxtpkvr/+sgv
fjB+xQd29qLL5d0XrGJIW6W/whBxZkN+XSL718g/W3oTKu+IcMqG73wnigRcUxPn
o59hSiN5bLtbLobNiRwo1ETC9UraqCeEGMEK+Hmuu+mm4vvz9Q5D349uUUfjqba/
sUrd1PVN5KmkLxUitI1bUwo+rWzwjBvlVAuZj9FeeNn2o9pVfDZym9H/FRnF6UeJ
O32iszYhqQHxgehCpHqBMmdaCkgX9NO6l3/4tocfNuXjH0pH8E+BDxIaAnJX
-----END CERTIFICATE-----
Generated at Wed Jun 26 09:28:36 2024 by rpki-client on console-fra.rpki-client.org