Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/454/MY4iqpnsu_TefNaSg9FsT0Uxo8c.roa
File:                     MY4iqpnsu_TefNaSg9FsT0Uxo8c.roa (raw, json)
Hash identifier:          tVa5uYi6nYgaB4w//dWUNKqzEslhrxoP3rl97OFJMD8=
Subject key identifier:   31:8E:22:AA:99:EC:BB:F4:DE:7C:D6:92:83:D1:6C:4F:45:31:A3:C7
Certificate issuer:       /CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
Certificate serial:       51
Authority key identifier: AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/MY4iqpnsu_TefNaSg9FsT0Uxo8c.roa
Signing time:             Sat 31 Aug 2024 01:31:34 +0000
ROA not before:           Sat 31 Aug 2024 01:31:34 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     10000
IP address blocks:        202.169.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
        Validity
            Not Before: Aug 31 01:31:34 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=318E22AA99ECBBF4DE7CD69283D16C4F4531A3C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:83:71:b5:b6:2a:5e:e1:5b:ff:08:c0:1b:d7:
                    95:00:4b:a9:22:fa:70:64:48:b5:64:24:5b:25:2b:
                    9d:e8:44:aa:1d:97:99:5f:ee:6d:af:2e:ca:58:d4:
                    b6:30:e0:33:c9:a6:fe:a4:2d:0a:2c:a4:8e:69:fc:
                    d4:37:5b:a2:a2:fa:a3:89:ae:dc:89:62:f5:de:45:
                    25:18:71:53:6c:e9:02:a4:58:3c:9e:98:21:8a:f3:
                    27:2a:cd:be:d2:31:9d:19:e9:1e:7c:5c:ae:5a:6a:
                    82:f1:db:50:fe:46:85:3c:e2:54:47:e4:8f:7a:50:
                    3e:77:42:1c:91:dd:88:03:0a:f4:29:c5:95:4d:40:
                    fd:01:f1:32:22:4d:9b:a9:e3:01:85:78:2e:39:b2:
                    30:74:85:13:6c:b3:ea:2f:aa:34:d1:13:3d:90:f7:
                    15:69:51:43:0d:66:82:b2:7b:03:74:48:f0:a0:9a:
                    a6:2a:9b:49:c9:a9:4f:9d:a7:c2:bc:01:64:ee:57:
                    0e:c6:76:55:ba:e6:c1:97:63:28:bf:14:1d:fe:ec:
                    d3:e4:aa:51:e9:36:37:85:66:ff:d5:0b:98:f2:09:
                    fd:25:20:03:00:93:1e:3c:1a:7a:4f:91:60:03:a8:
                    14:cc:45:89:9f:a0:b6:8e:9e:db:19:50:80:f7:f4:
                    e6:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:8E:22:AA:99:EC:BB:F4:DE:7C:D6:92:83:D1:6C:4F:45:31:A3:C7
            X509v3 Authority Key Identifier:
                keyid:AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/MY4iqpnsu_TefNaSg9FsT0Uxo8c.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.169.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         c0:63:ae:17:46:25:65:91:8b:b3:11:0e:7a:5d:a3:b1:70:a9:
         38:a4:23:15:a1:7e:7e:52:ba:f0:20:e8:a3:4d:0c:44:dd:0e:
         5f:d4:5b:d6:78:aa:a6:0d:4f:af:dc:96:1f:75:8b:73:7c:11:
         42:33:66:fa:df:d3:c6:7c:6e:6d:66:c2:05:08:64:7a:0d:f9:
         47:a0:f1:61:bb:66:d7:88:0f:7c:5d:65:86:b9:55:49:b3:e3:
         de:26:f1:c9:93:cc:82:fa:e9:53:e9:2b:d8:c4:04:7f:f8:9b:
         6e:e5:2c:d9:49:28:89:0d:3d:25:7e:c9:d6:40:4c:91:66:29:
         63:f0:79:a2:c0:84:4d:af:19:1e:5c:5c:3d:4b:be:c0:b1:0b:
         0d:ac:05:f0:de:ec:aa:8d:6f:cd:29:7c:27:3e:c8:e8:2c:9d:
         19:10:69:b5:6e:23:23:19:f9:01:63:f6:1b:78:b7:ea:e7:ff:
         98:80:88:12:d0:88:78:96:3d:69:3d:3b:af:4f:fc:5a:ee:f1:
         b7:64:13:fa:51:60:a1:e7:da:b3:ca:28:df:87:d9:97:c0:d3:
         2a:0c:f5:e7:5c:08:23:0b:9d:9f:ec:ab:f1:7e:84:93:a0:9f:
         38:e0:bc:84:4c:ec:8e:45:96:92:b9:6d:ae:d2:a9:76:b1:e3:
         85:53:91:dd
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBUTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBRDQ3
NDFGMDM0OUZCQzE1QTcwOEUyOEEyQ0UzMDc5MDZDQUM1REUwMB4XDTI0MDgzMTAx
MzEzNFoXDTI1MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoMzE4RTIyQUE5OUVDQkJG
NERFN0NENjkyODNEMTZDNEY0NTMxQTNDNzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAO+DcbW2Kl7hW/8IwBvXlQBLqSL6cGRItWQkWyUrnehEqh2XmV/u
ba8uyljUtjDgM8mm/qQtCiykjmn81DdboqL6o4mu3Ili9d5FJRhxU2zpAqRYPJ6Y
IYrzJyrNvtIxnRnpHnxcrlpqgvHbUP5GhTziVEfkj3pQPndCHJHdiAMK9CnFlU1A
/QHxMiJNm6njAYV4LjmyMHSFE2yz6i+qNNETPZD3FWlRQw1mgrJ7A3RI8KCapiqb
ScmpT52nwrwBZO5XDsZ2VbrmwZdjKL8UHf7s0+SqUek2N4Vm/9ULmPIJ/SUgAwCT
Hjwaek+RYAOoFMxFiZ+gto6e2xlQgPf05sECAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBQxjiKqmey79N581pKD0WxPRTGjxzAfBgNVHSMEGDAWgBStR0HwNJ+8FacI4oos
4weQbKxd4DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDU0L3JVZEI4RFNmdkJXbkNPS0tMT01Ia0d5c1hlQS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3JVZEI4RFNmdkJXbkNPS0tMT01Ia0d5
c1hlQS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC80NTQvTVk0aXFwbnN1X1RlZk5hU2c5RnNUMFV4bzhjLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBMqpUDANBgkqhkiG9w0BAQsFAAOCAQEAwGOuF0YlZZGLsxEOel2jsXCpOKQj
FaF+flK68CDoo00MRN0OX9Rb1niqpg1Pr9yWH3WLc3wRQjNm+t/TxnxubWbCBQhk
eg35R6DxYbtm14gPfF1lhrlVSbPj3ibxyZPMgvrpU+kr2MQEf/ibbuUs2UkoiQ09
JX7J1kBMkWYpY/B5osCETa8ZHlxcPUu+wLELDawF8N7sqo1vzSl8Jz7I6CydGRBp
tW4jIxn5AWP2G3i36uf/mICIEtCIeJY9aT07r0/8Wu7xt2QT+lFgoefas8oo34fZ
l8DTKgz151wIIwudn+yr8X6Ek6CfOOC8hEzsjkWWkrltrtKpdrHjhVOR3Q==
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:27:31 2025 by rpki-client