Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/446/pRDHIOiPkU0AlTQbp5WmNa7bdY4.roa
File:                     pRDHIOiPkU0AlTQbp5WmNa7bdY4.roa (raw, json)
Hash identifier:          3lw1ho7z+WKFhmvrWVqnU965oJs0H1YbIihVkyFd8os=
Subject key identifier:   A5:10:C7:20:E8:8F:91:4D:00:95:34:1B:A7:95:A6:35:AE:DB:75:8E
Certificate issuer:       /CN=93E00C1B18C6955EA04130329544B1F09BFCBFCA
Certificate serial:       0B
Authority key identifier: 93:E0:0C:1B:18:C6:95:5E:A0:41:30:32:95:44:B1:F0:9B:FC:BF:CA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k-AMGxjGlV6gQTAylUSx8Jv8v8o.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/pRDHIOiPkU0AlTQbp5WmNa7bdY4.roa
Signing time:             Tue 22 Aug 2023 07:12:18 +0000
ROA not before:           Tue 22 Aug 2023 07:12:18 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     9997
IP address blocks:        202.211.80.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/k-AMGxjGlV6gQTAylUSx8Jv8v8o.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/k-AMGxjGlV6gQTAylUSx8Jv8v8o.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k-AMGxjGlV6gQTAylUSx8Jv8v8o.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 30 Jun 2024 06:27:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11 (0xb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93E00C1B18C6955EA04130329544B1F09BFCBFCA
        Validity
            Not Before: Aug 22 07:12:18 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=A510C720E88F914D0095341BA795A635AEDB758E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:07:a2:e3:7a:ad:0d:45:3e:e2:9c:0d:93:bf:
                    6d:36:8b:5d:ba:28:94:cb:24:89:4e:38:73:a6:ed:
                    75:b9:12:b5:a7:a1:ad:05:e3:80:71:05:60:d2:31:
                    be:88:34:59:d4:d5:fe:d2:65:1c:66:c6:c8:04:ce:
                    4b:e8:3e:cc:d6:e5:68:62:66:b1:bf:e7:5e:b4:3b:
                    b5:e5:08:e1:8b:58:29:ee:d6:b8:a8:1e:e0:17:7a:
                    72:51:44:7e:6a:f6:93:37:ec:e7:64:50:d1:68:2c:
                    fa:4f:89:bf:91:fc:51:54:51:57:43:ae:cb:5f:e7:
                    a8:d7:68:16:1a:b2:97:a9:df:a7:85:17:10:3b:7d:
                    12:0c:70:cb:c5:d0:bb:7f:bc:c7:4a:bf:e8:1e:a0:
                    b4:b2:fd:41:36:08:9c:07:66:e7:e7:52:72:a3:b5:
                    31:40:86:1d:d2:fc:f6:c0:5f:10:6c:a7:00:f1:85:
                    95:6c:18:f3:46:64:24:e8:de:c5:51:06:f0:07:cc:
                    c3:09:4d:f4:74:98:a3:f4:60:f2:62:10:fa:5d:5d:
                    9b:c5:8b:d7:45:b5:29:0f:f6:ea:75:28:0d:87:b9:
                    e5:35:f9:04:2c:d1:5e:55:d1:4b:47:34:24:fa:8f:
                    d3:fe:4a:ee:3e:97:d0:da:b8:87:51:6f:82:c7:fb:
                    ef:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:10:C7:20:E8:8F:91:4D:00:95:34:1B:A7:95:A6:35:AE:DB:75:8E
            X509v3 Authority Key Identifier:
                keyid:93:E0:0C:1B:18:C6:95:5E:A0:41:30:32:95:44:B1:F0:9B:FC:BF:CA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/k-AMGxjGlV6gQTAylUSx8Jv8v8o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k-AMGxjGlV6gQTAylUSx8Jv8v8o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/pRDHIOiPkU0AlTQbp5WmNa7bdY4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.211.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         10:66:f7:97:03:ac:4e:3a:b7:5f:97:2f:7c:df:bc:bc:43:d7:
         f7:a6:24:b2:e7:d6:34:13:9e:ba:98:9b:f1:27:14:2a:ea:a7:
         79:04:46:00:97:c1:0c:57:09:e9:46:76:c6:38:00:82:e1:bc:
         7e:af:34:bf:b5:81:6c:87:ee:59:d9:9c:1c:5d:ec:79:fd:85:
         93:8d:27:dc:5c:c3:2e:71:0f:86:d5:4b:df:76:1a:e3:45:10:
         84:90:43:07:b8:01:e2:5b:3b:d4:21:81:a5:c8:93:37:f0:79:
         30:d2:af:99:e1:f4:07:4b:64:9a:97:31:da:3a:f4:89:6f:be:
         65:77:dc:3f:7d:8a:5f:5e:36:e3:23:a9:3d:ce:0c:25:a9:40:
         35:8b:54:ad:22:e3:af:e8:30:b0:ff:7c:ee:f8:f5:f7:10:5c:
         e1:da:49:32:f3:68:86:24:da:6c:99:88:fc:c6:5d:9c:e5:22:
         2f:30:04:23:71:a9:da:30:ce:5f:4f:cb:74:c7:c7:4c:69:3a:
         23:70:6a:48:33:25:34:49:6a:dc:3f:ad:e3:5d:fb:c3:21:37:
         a0:86:79:ba:ce:57:cc:23:78:ba:88:c1:97:8e:b1:dc:14:85:
         5d:c2:68:5d:03:2d:fb:a6:e8:35:78:0a:59:b8:06:1b:fd:fc:
         d5:8c:5d:4c
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBCzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5M0Uw
MEMxQjE4QzY5NTVFQTA0MTMwMzI5NTQ0QjFGMDlCRkNCRkNBMB4XDTIzMDgyMjA3
MTIxOFoXDTI0MDgxNDAxMzAwMlowMzExMC8GA1UEAxMoQTUxMEM3MjBFODhGOTE0
RDAwOTUzNDFCQTc5NUE2MzVBRURCNzU4RTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAO0HouN6rQ1FPuKcDZO/bTaLXboolMskiU44c6btdbkStaehrQXj
gHEFYNIxvog0WdTV/tJlHGbGyATOS+g+zNblaGJmsb/nXrQ7teUI4YtYKe7WuKge
4Bd6clFEfmr2kzfs52RQ0Wgs+k+Jv5H8UVRRV0Ouy1/nqNdoFhqyl6nfp4UXEDt9
Egxwy8XQu3+8x0q/6B6gtLL9QTYInAdm5+dScqO1MUCGHdL89sBfEGynAPGFlWwY
80ZkJOjexVEG8AfMwwlN9HSYo/Rg8mIQ+l1dm8WL10W1KQ/26nUoDYe55TX5BCzR
XlXRS0c0JPqP0/5K7j6X0Nq4h1Fvgsf779UCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBSlEMcg6I+RTQCVNBunlaY1rtt1jjAfBgNVHSMEGDAWgBST4AwbGMaVXqBBMDKV
RLHwm/y/yjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDQ2L2stQU1HeGpHbFY2Z1FUQXlsVVN4OEp2OHY4by5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2stQU1HeGpHbFY2Z1FUQXlsVVN4OEp2
OHY4by5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC80NDYvcFJESElPaVBrVTBBbFRRYnA1V21OYTdiZFk0LnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBMrTUDANBgkqhkiG9w0BAQsFAAOCAQEAEGb3lwOsTjq3X5cvfN+8vEPX96Yk
sufWNBOeupib8ScUKuqneQRGAJfBDFcJ6UZ2xjgAguG8fq80v7WBbIfuWdmcHF3s
ef2Fk40n3FzDLnEPhtVL33Ya40UQhJBDB7gB4ls71CGBpciTN/B5MNKvmeH0B0tk
mpcx2jr0iW++ZXfcP32KX1424yOpPc4MJalANYtUrSLjr+gwsP987vj19xBc4dpJ
MvNohiTabJmI/MZdnOUiLzAEI3Gp2jDOX0/LdMfHTGk6I3BqSDMlNElq3D+t4137
wyE3oIZ5us5XzCN4uojBl46x3BSFXcJoXQMt+6boNXgKWbgGG/381YxdTA==
-----END CERTIFICATE-----
Generated at Mon Jun 24 11:27:10 2024 by rpki-client on console-fra.rpki-client.org