Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/393/e6Opd4kwdZZtOrXVxdf0pI_zcU8.roa
File:                     e6Opd4kwdZZtOrXVxdf0pI_zcU8.roa (raw, json)
Hash identifier:          Y+1wCVPNXxCsn+C54G8d5Wep2KsLb0t2zeyQBF48wcQ=
Subject key identifier:   7B:A3:A9:77:89:30:75:96:6D:3A:B5:D5:C5:D7:F4:A4:8F:F3:71:4F
Certificate issuer:       /CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
Certificate serial:       5B
Authority key identifier: 5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/e6Opd4kwdZZtOrXVxdf0pI_zcU8.roa
Signing time:             Thu 29 Feb 2024 01:31:39 +0000
ROA not before:           Thu 29 Feb 2024 01:31:39 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     9622
IP address blocks:        202.122.224.0/19 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 14:09:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91 (0x5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
        Validity
            Not Before: Feb 29 01:31:39 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=7BA3A977893075966D3AB5D5C5D7F4A48FF3714F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:1e:6b:ff:18:16:b8:b3:3a:98:c3:ce:70:4d:
                    cf:eb:e3:34:f9:e9:53:4d:87:b9:84:7a:f7:71:f6:
                    09:71:24:82:ff:20:a0:cb:19:01:fa:97:68:38:9f:
                    f2:98:ab:83:d8:8f:67:ab:0e:fd:6e:6e:f2:00:94:
                    e1:39:5b:91:94:69:58:57:c8:49:03:d9:c3:92:da:
                    d2:50:0d:ed:dd:30:a0:01:72:b8:f6:d9:e6:3c:8e:
                    cd:1e:a5:67:c2:f5:c1:38:03:73:55:a9:0d:83:8f:
                    44:d5:11:97:b2:9c:54:60:d6:58:a1:e1:a6:49:11:
                    8a:aa:40:48:97:96:c8:5d:6f:f2:5b:8c:53:65:ef:
                    66:4b:7f:8d:8e:43:47:e8:4e:55:4d:2b:ab:4f:a5:
                    01:d0:ea:1c:9d:06:69:9c:31:2b:31:84:a4:f1:57:
                    ba:d0:6a:38:0d:f8:22:5e:be:6f:48:f2:f5:d2:d5:
                    9d:68:d2:e1:07:a3:b8:1f:7e:ee:e6:c8:b8:64:40:
                    be:cb:c6:fc:9b:de:97:34:5c:1c:f6:7a:4c:b7:ec:
                    66:35:e9:f3:d4:02:2c:43:57:38:83:7f:e2:c8:1f:
                    ae:ca:8d:e1:ac:62:ce:c2:17:a9:47:63:7c:61:4e:
                    5d:b3:35:c3:42:35:53:27:ea:84:bf:f8:7d:f9:38:
                    df:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:A3:A9:77:89:30:75:96:6D:3A:B5:D5:C5:D7:F4:A4:8F:F3:71:4F
            X509v3 Authority Key Identifier:
                keyid:5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/e6Opd4kwdZZtOrXVxdf0pI_zcU8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.122.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         7b:b5:3f:5c:da:12:bb:4a:cc:d6:bb:ed:3d:8a:de:40:16:a5:
         57:89:2d:b5:52:01:f9:b1:60:59:dc:87:a7:55:2c:c8:7e:02:
         27:07:e7:02:81:04:10:b0:fd:aa:95:27:23:7a:18:cd:6c:c2:
         20:04:df:84:48:e6:54:c8:59:94:66:04:98:ab:de:9f:b8:a6:
         82:c0:70:34:b7:a6:0e:5c:e7:ee:e4:a4:2d:6c:48:b4:95:bb:
         e6:63:30:c4:d5:a6:4e:50:5b:ca:c2:be:38:ec:f1:ba:ad:66:
         0b:26:63:19:3d:66:d9:d6:26:57:af:70:48:41:f8:b9:26:b9:
         02:e7:24:d0:32:27:6f:14:63:fb:61:c1:2d:f9:42:57:c0:d9:
         e8:70:66:79:8f:22:d6:8b:6a:0f:ee:da:a2:2f:1a:b4:6d:3e:
         4c:55:c5:ce:d8:5d:9e:51:0a:15:72:fb:e5:36:1c:d4:d1:d9:
         8d:53:45:4f:d4:2b:d1:7e:1c:c9:77:45:e8:5b:22:76:63:6f:
         b3:5d:a7:f4:df:c5:ba:de:98:c8:53:ba:8d:c9:53:f9:08:e0:
         a0:b6:ff:92:fe:3a:9f:fd:68:e6:cc:04:78:4f:d3:90:a7:99:
         42:77:d4:7c:f4:f3:ae:5f:de:ba:89:12:51:7c:a8:00:e9:9e:
         40:64:57:eb
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBWzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1RDA1
NUIyREFBQzQ4ODc4Q0M5QjExMjdBMjlDRjExNjY2OTIwQTIzMB4XDTI0MDIyOTAx
MzEzOVoXDTI1MDIxNDAxMzAwM1owMzExMC8GA1UEAxMoN0JBM0E5Nzc4OTMwNzU5
NjZEM0FCNUQ1QzVEN0Y0QTQ4RkYzNzE0RjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAN0ea/8YFrizOpjDznBNz+vjNPnpU02HuYR693H2CXEkgv8goMsZ
AfqXaDif8pirg9iPZ6sO/W5u8gCU4TlbkZRpWFfISQPZw5La0lAN7d0woAFyuPbZ
5jyOzR6lZ8L1wTgDc1WpDYOPRNURl7KcVGDWWKHhpkkRiqpASJeWyF1v8luMU2Xv
Zkt/jY5DR+hOVU0rq0+lAdDqHJ0GaZwxKzGEpPFXutBqOA34Il6+b0jy9dLVnWjS
4QejuB9+7ubIuGRAvsvG/JvelzRcHPZ6TLfsZjXp89QCLENXOIN/4sgfrsqN4axi
zsIXqUdjfGFOXbM1w0I1UyfqhL/4ffk43y8CAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBR7o6l3iTB1lm06tdXF1/Skj/NxTzAfBgNVHSMEGDAWgBRdBVstqsSIeMybESei
nPEWZpIKIzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzkzL1hRVmJMYXJFaUhqTW14RW5vcHp4Rm1hU0NpTS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1hRVmJMYXJFaUhqTW14RW5vcHp4Rm1h
U0NpTS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zOTMvZTZPcGQ0a3dkWlp0T3JYVnhkZjBwSV96Y1U4LnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBcp64DANBgkqhkiG9w0BAQsFAAOCAQEAe7U/XNoSu0rM1rvtPYreQBalV4kt
tVIB+bFgWdyHp1UsyH4CJwfnAoEEELD9qpUnI3oYzWzCIATfhEjmVMhZlGYEmKve
n7imgsBwNLemDlzn7uSkLWxItJW75mMwxNWmTlBbysK+OOzxuq1mCyZjGT1m2dYm
V69wSEH4uSa5Auck0DInbxRj+2HBLflCV8DZ6HBmeY8i1otqD+7aoi8atG0+TFXF
zthdnlEKFXL75TYc1NHZjVNFT9Qr0X4cyXdF6FsidmNvs12n9N/Fut6YyFO6jclT
+QjgoLb/kv46n/1o5swEeE/TkKeZQnfUfPTzrl/euokSUXyoAOmeQGRX6w==
-----END CERTIFICATE-----
Generated at Mon Jun 17 14:52:16 2024 by rpki-client on console-ams.rpki-client.org