Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/446/zqn20m6KhS56bju25CD8uGdJrNQ.roa
File:                     zqn20m6KhS56bju25CD8uGdJrNQ.roa (raw, json)
Hash identifier:          Csk9LhUy/+qnjEk+tphUk54yrgYmOdfSGc7P1KUvnCY=
Subject key identifier:   CE:A9:F6:D2:6E:8A:85:2E:7A:6E:3B:B6:E4:20:FC:B8:67:49:AC:D4
Certificate issuer:       /CN=93E00C1B18C6955EA04130329544B1F09BFCBFCA
Certificate serial:       06
Authority key identifier: 93:E0:0C:1B:18:C6:95:5E:A0:41:30:32:95:44:B1:F0:9B:FC:BF:CA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k-AMGxjGlV6gQTAylUSx8Jv8v8o.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/zqn20m6KhS56bju25CD8uGdJrNQ.roa
Signing time:             Tue 22 Aug 2023 02:03:56 +0000
ROA not before:           Tue 22 Aug 2023 02:03:56 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     9997
IP address blocks:        133.226.96.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/k-AMGxjGlV6gQTAylUSx8Jv8v8o.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/k-AMGxjGlV6gQTAylUSx8Jv8v8o.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k-AMGxjGlV6gQTAylUSx8Jv8v8o.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 30 Jun 2024 06:27:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93E00C1B18C6955EA04130329544B1F09BFCBFCA
        Validity
            Not Before: Aug 22 02:03:56 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=CEA9F6D26E8A852E7A6E3BB6E420FCB86749ACD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:cc:eb:5b:91:ca:79:13:4b:0d:fa:f7:30:d7:
                    9e:73:0c:30:af:c0:45:a5:07:70:80:6f:03:c2:37:
                    75:a4:7a:07:60:6c:9b:4d:39:d5:dd:f0:23:22:7d:
                    05:49:5e:ea:4d:6f:14:5f:bd:66:2d:d1:d9:99:33:
                    88:7b:fd:58:e9:85:92:8a:59:5c:66:50:32:bc:fc:
                    28:cb:68:41:12:cf:5c:71:fb:d8:80:11:25:bb:f7:
                    97:60:fe:a3:8e:d8:bf:3e:a5:66:77:a5:b5:83:07:
                    38:f3:55:dd:39:d4:76:17:e3:ab:b5:28:53:9e:4d:
                    ac:1a:28:a9:48:eb:55:1d:27:38:e4:d5:d8:dc:56:
                    b4:aa:07:d4:82:d5:10:2f:9c:69:da:e1:bf:32:5c:
                    ca:10:ac:8e:db:77:35:b6:1f:c7:33:8f:45:de:8f:
                    31:c1:9f:d4:35:0e:5d:3a:5a:1e:1c:c7:ef:b7:69:
                    63:3b:e4:ca:c3:6d:86:64:1f:c5:33:1f:9c:ce:7a:
                    20:7a:4b:92:70:2c:6c:21:38:26:b0:10:08:a3:1b:
                    53:5f:e9:53:d0:b7:00:5d:20:be:89:0d:9d:70:9a:
                    b1:07:cd:2e:f6:54:ca:06:41:96:9a:e8:b1:60:e8:
                    8d:ae:b5:13:66:95:4b:65:d2:00:e9:f3:cf:2d:67:
                    3a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:A9:F6:D2:6E:8A:85:2E:7A:6E:3B:B6:E4:20:FC:B8:67:49:AC:D4
            X509v3 Authority Key Identifier:
                keyid:93:E0:0C:1B:18:C6:95:5E:A0:41:30:32:95:44:B1:F0:9B:FC:BF:CA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/k-AMGxjGlV6gQTAylUSx8Jv8v8o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k-AMGxjGlV6gQTAylUSx8Jv8v8o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/zqn20m6KhS56bju25CD8uGdJrNQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.226.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         26:9a:f3:16:f7:df:31:00:19:21:f1:e3:6a:9e:30:5a:03:ad:
         e7:f3:a1:e7:41:76:cb:3f:b9:e7:85:a0:1d:3f:98:c4:66:ca:
         83:63:1d:89:ad:e5:ed:20:9e:b5:db:80:e2:b4:35:de:b7:f3:
         74:a4:ba:1a:fc:62:98:58:41:72:3c:3e:e5:33:bf:d0:0b:06:
         40:c0:7d:7d:f5:c3:1b:1c:1e:3e:8b:75:43:e4:00:03:e6:cf:
         5c:67:23:dc:bf:06:de:8f:f7:6c:c9:95:93:c0:26:89:6e:f9:
         30:dd:eb:ec:88:11:ce:e0:5a:a1:d6:1c:29:f6:c1:43:c2:93:
         55:25:60:0f:1f:e1:59:f0:92:75:e9:61:f1:48:55:c4:39:27:
         e6:d8:17:b9:8c:18:10:84:e0:1a:86:82:2a:2d:eb:78:05:47:
         ef:59:65:dd:ee:ef:49:61:1b:9d:ff:71:2d:1a:95:32:eb:d0:
         bf:c8:7b:ee:00:54:18:25:9a:68:1f:b9:31:c1:d1:81:d5:79:
         dc:aa:f5:58:92:4d:19:ee:6c:ce:30:99:9a:3e:06:eb:c1:54:
         e2:7e:be:f6:6f:48:a0:88:43:cc:89:2d:ae:98:20:4a:03:5c:
         0f:d5:79:b0:07:6f:e9:68:80:94:a5:e2:af:1e:d9:d7:21:1a:
         c1:17:ab:56
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBBjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5M0Uw
MEMxQjE4QzY5NTVFQTA0MTMwMzI5NTQ0QjFGMDlCRkNCRkNBMB4XDTIzMDgyMjAy
MDM1NloXDTI0MDgxNDAxMzAwMlowMzExMC8GA1UEAxMoQ0VBOUY2RDI2RThBODUy
RTdBNkUzQkI2RTQyMEZDQjg2NzQ5QUNENDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOvM61uRynkTSw369zDXnnMMMK/ARaUHcIBvA8I3daR6B2Bsm005
1d3wIyJ9BUle6k1vFF+9Zi3R2ZkziHv9WOmFkopZXGZQMrz8KMtoQRLPXHH72IAR
Jbv3l2D+o47Yvz6lZneltYMHOPNV3TnUdhfjq7UoU55NrBooqUjrVR0nOOTV2NxW
tKoH1ILVEC+cadrhvzJcyhCsjtt3NbYfxzOPRd6PMcGf1DUOXTpaHhzH77dpYzvk
ysNthmQfxTMfnM56IHpLknAsbCE4JrAQCKMbU1/pU9C3AF0gvokNnXCasQfNLvZU
ygZBlprosWDoja61E2aVS2XSAOnzzy1nOu0CAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBTOqfbSboqFLnpuO7bkIPy4Z0ms1DAfBgNVHSMEGDAWgBST4AwbGMaVXqBBMDKV
RLHwm/y/yjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDQ2L2stQU1HeGpHbFY2Z1FUQXlsVVN4OEp2OHY4by5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2stQU1HeGpHbFY2Z1FUQXlsVVN4OEp2
OHY4by5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC80NDYvenFuMjBtNktoUzU2Ymp1MjVDRDh1R2RKck5RLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBYXiYDANBgkqhkiG9w0BAQsFAAOCAQEAJprzFvffMQAZIfHjap4wWgOt5/Oh
50F2yz+554WgHT+YxGbKg2Mdia3l7SCetduA4rQ13rfzdKS6GvximFhBcjw+5TO/
0AsGQMB9ffXDGxwePot1Q+QAA+bPXGcj3L8G3o/3bMmVk8AmiW75MN3r7IgRzuBa
odYcKfbBQ8KTVSVgDx/hWfCSdelh8UhVxDkn5tgXuYwYEITgGoaCKi3reAVH71ll
3e7vSWEbnf9xLRqVMuvQv8h77gBUGCWaaB+5McHRgdV53Kr1WJJNGe5szjCZmj4G
68FU4n6+9m9IoIhDzIktrpggSgNcD9V5sAdv6WiAlKXirx7Z1yEawRerVg==
-----END CERTIFICATE-----
Generated at Mon Jun 24 05:54:40 2024 by rpki-client on console-ams.rpki-client.org