Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/393/n3KUw_zggpveLdPMh0bFocdy3RE.roa
File:                     n3KUw_zggpveLdPMh0bFocdy3RE.roa (raw, json)
Hash identifier:          ZjOVji4bXmGLlTwOL9smm6q7y/hmfJwqQ5pCWNKA1Yo=
Subject key identifier:   9F:72:94:C3:FC:E0:82:9B:DE:2D:D3:CC:87:46:C5:A1:C7:72:DD:11
Certificate issuer:       /CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
Certificate serial:       5F
Authority key identifier: 5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/n3KUw_zggpveLdPMh0bFocdy3RE.roa
Signing time:             Thu 29 Feb 2024 01:31:42 +0000
ROA not before:           Thu 29 Feb 2024 01:31:42 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     9622
IP address blocks:        203.140.240.0/20 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 14:09:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 95 (0x5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
        Validity
            Not Before: Feb 29 01:31:42 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=9F7294C3FCE0829BDE2DD3CC8746C5A1C772DD11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c9:7b:81:be:77:4b:38:8f:ba:35:c5:e9:f0:
                    03:2e:4b:a8:2c:64:6c:4b:cc:ca:d1:6f:47:0a:d9:
                    9d:61:96:c7:2f:5f:43:ee:e1:3c:f3:73:ce:ce:3a:
                    9c:5c:65:66:77:07:1c:f1:db:f7:6f:bb:cb:49:c4:
                    77:3b:04:7a:b3:c1:65:a5:61:3b:20:27:c0:b0:c0:
                    56:4a:a6:c7:2f:fe:1c:49:4c:29:43:91:82:ef:32:
                    09:39:b1:5c:92:14:8d:50:3a:8d:c4:85:88:1c:e5:
                    b5:f9:75:eb:07:a3:ff:00:d6:0a:de:98:ce:7b:ee:
                    01:63:a1:ce:64:b0:8e:75:f3:3e:be:a4:cc:8e:bb:
                    33:13:1e:4b:5c:36:91:df:4c:5b:9e:5e:0b:b4:2f:
                    79:29:c3:eb:4d:50:ac:01:a2:12:3e:90:af:8b:23:
                    05:64:1a:72:4a:cb:e8:e8:ef:c0:ff:81:54:77:7d:
                    8c:97:a1:c9:96:2d:61:7f:c9:35:d9:c2:98:b9:35:
                    b8:90:8e:3e:96:f1:db:95:ce:24:5f:77:71:7d:27:
                    b5:d9:13:23:61:96:c6:a7:44:02:a6:21:fb:53:3d:
                    20:18:58:a8:b0:7d:62:05:49:af:cb:89:bc:94:59:
                    bf:b0:2b:95:86:3b:17:5b:c6:7e:45:85:9b:9c:2a:
                    88:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:72:94:C3:FC:E0:82:9B:DE:2D:D3:CC:87:46:C5:A1:C7:72:DD:11
            X509v3 Authority Key Identifier:
                keyid:5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/n3KUw_zggpveLdPMh0bFocdy3RE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.140.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6e:23:33:68:95:47:c5:ec:e1:e1:82:da:bf:50:c6:7a:d2:22:
         79:c1:6c:7b:ab:bc:6f:27:49:0d:e2:e1:98:94:00:00:3b:9d:
         91:59:84:e0:38:5d:33:fa:bd:14:19:1c:5e:a9:af:f6:2c:12:
         fc:21:2d:5f:ea:38:2c:ea:2d:eb:30:be:96:2e:0a:75:e5:ce:
         49:b5:69:05:22:67:8c:9e:94:4e:07:bf:32:a2:03:2a:d2:25:
         be:16:97:64:e0:aa:0a:0d:09:e8:77:23:9c:f1:8b:a3:04:5b:
         be:74:8e:9e:44:0d:28:51:3a:da:9e:9a:63:69:c4:2f:9a:13:
         0b:78:88:93:8a:b7:31:c9:21:fa:2d:19:ea:df:fd:c4:9a:67:
         1c:22:f5:28:c6:cb:f6:48:37:18:56:63:7c:fb:ff:93:10:ee:
         1c:66:40:e9:84:21:80:9a:95:1d:b7:11:fe:16:ef:df:66:22:
         1f:31:f8:b5:78:86:81:4f:1c:42:14:c6:3f:86:e7:6c:a2:af:
         4e:4b:85:43:92:3b:0b:dd:ce:10:d9:7f:a1:0a:0c:be:32:eb:
         e6:77:ac:a0:97:3f:f9:39:e3:1a:02:ec:e1:9f:be:3c:5b:1c:
         df:27:da:63:24:99:75:42:72:b5:e6:81:72:2b:ad:b2:8a:ff:
         d2:73:4d:d5
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBXzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1RDA1
NUIyREFBQzQ4ODc4Q0M5QjExMjdBMjlDRjExNjY2OTIwQTIzMB4XDTI0MDIyOTAx
MzE0MloXDTI1MDIxNDAxMzAwM1owMzExMC8GA1UEAxMoOUY3Mjk0QzNGQ0UwODI5
QkRFMkREM0NDODc0NkM1QTFDNzcyREQxMTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKzJe4G+d0s4j7o1xenwAy5LqCxkbEvMytFvRwrZnWGWxy9fQ+7h
PPNzzs46nFxlZncHHPHb92+7y0nEdzsEerPBZaVhOyAnwLDAVkqmxy/+HElMKUOR
gu8yCTmxXJIUjVA6jcSFiBzltfl16wej/wDWCt6YznvuAWOhzmSwjnXzPr6kzI67
MxMeS1w2kd9MW55eC7QveSnD601QrAGiEj6Qr4sjBWQackrL6OjvwP+BVHd9jJeh
yZYtYX/JNdnCmLk1uJCOPpbx25XOJF93cX0ntdkTI2GWxqdEAqYh+1M9IBhYqLB9
YgVJr8uJvJRZv7ArlYY7F1vGfkWFm5wqiJ8CAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBSfcpTD/OCCm94t08yHRsWhx3LdETAfBgNVHSMEGDAWgBRdBVstqsSIeMybESei
nPEWZpIKIzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzkzL1hRVmJMYXJFaUhqTW14RW5vcHp4Rm1hU0NpTS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1hRVmJMYXJFaUhqTW14RW5vcHp4Rm1h
U0NpTS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zOTMvbjNLVXdfemdncHZlTGRQTWgwYkZvY2R5M1JFLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBMuM8DANBgkqhkiG9w0BAQsFAAOCAQEAbiMzaJVHxezh4YLav1DGetIiecFs
e6u8bydJDeLhmJQAADudkVmE4DhdM/q9FBkcXqmv9iwS/CEtX+o4LOot6zC+li4K
deXOSbVpBSJnjJ6UTge/MqIDKtIlvhaXZOCqCg0J6HcjnPGLowRbvnSOnkQNKFE6
2p6aY2nEL5oTC3iIk4q3Mckh+i0Z6t/9xJpnHCL1KMbL9kg3GFZjfPv/kxDuHGZA
6YQhgJqVHbcR/hbv32YiHzH4tXiGgU8cQhTGP4bnbKKvTkuFQ5I7C93OENl/oQoM
vjLr5nesoJc/+TnjGgLs4Z++PFsc3yfaYySZdUJyteaBciutsor/0nNN1Q==
-----END CERTIFICATE-----
Generated at Mon Jun 17 11:39:14 2024 by rpki-client on console-fra.rpki-client.org