Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/nOKggoP91udGG1ASDLUv3ty2ZmA.roa
File:                     nOKggoP91udGG1ASDLUv3ty2ZmA.roa (raw, json)
Hash identifier:          ug00e2KP4iDLel1ZLQqxoHXZ/s9lwyiCsqKte7gTf1U=
Subject key identifier:   9C:E2:A0:82:83:FD:D6:E7:46:1B:50:12:0C:B5:2F:DE:DC:B6:66:60
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       8B
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/nOKggoP91udGG1ASDLUv3ty2ZmA.roa
Signing time:             Sat 30 Nov 2024 01:29:25 +0000
ROA not before:           Sat 30 Nov 2024 01:29:25 +0000
ROA not after:            Sat 15 Nov 2025 01:30:03 +0000
asID:                     4685
IP address blocks:        202.213.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Apr 2025 14:26:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 139 (0x8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Nov 30 01:29:25 2024 GMT
            Not After : Nov 15 01:30:03 2025 GMT
        Subject: CN=9CE2A08283FDD6E7461B50120CB52FDEDCB66660
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9f:a3:9e:a5:88:dd:a0:3e:4b:3a:b4:ea:79:
                    b3:7b:99:55:68:b8:4a:13:c3:1f:ef:a7:60:3f:8c:
                    71:44:a4:9f:8e:0e:2a:5e:a5:67:00:d2:60:1b:8b:
                    fa:fc:74:fc:53:b0:71:09:20:a8:76:61:ab:44:90:
                    98:f0:7c:a9:f3:6c:da:cb:51:33:94:72:a8:4d:f9:
                    32:b1:42:a9:cc:81:05:78:fd:b3:ad:0b:65:d6:b9:
                    ac:eb:19:9a:98:fe:a9:f1:6d:66:80:4b:f5:ce:1d:
                    b9:9a:7d:40:18:b3:17:15:f2:d2:5b:7d:20:2c:8f:
                    57:28:7c:4b:d5:c5:3e:78:68:6a:19:49:58:ea:15:
                    26:1e:63:1d:79:e7:0d:a6:e5:05:1d:32:cb:38:ba:
                    0e:1a:5b:90:cf:f4:38:f3:df:34:94:90:a4:79:f7:
                    de:4e:e0:f5:43:4d:3d:96:a7:4c:7c:a4:d1:e1:1a:
                    5c:6f:27:13:c2:2a:2e:19:53:c5:d0:a2:50:f4:47:
                    13:ab:ae:61:43:1b:ca:54:22:7d:e9:45:a6:e2:64:
                    ea:a8:7b:a0:7e:38:b7:48:3b:e2:1e:af:4d:d7:c8:
                    1c:e7:99:a2:4b:03:12:5c:e4:7d:60:c7:8d:96:37:
                    22:f3:3d:c5:b6:e5:41:74:7b:ce:c8:20:ed:59:d5:
                    a3:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:E2:A0:82:83:FD:D6:E7:46:1B:50:12:0C:B5:2F:DE:DC:B6:66:60
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/nOKggoP91udGG1ASDLUv3ty2ZmA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.213.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         19:a0:ba:ae:60:f8:46:a3:9a:a4:5c:0a:3a:46:57:78:d5:22:
         17:03:48:1d:08:26:c7:1d:0b:4e:de:c9:07:ba:12:ca:25:65:
         72:c0:92:96:fd:b7:75:01:64:b8:5d:5e:26:36:15:d2:d2:6b:
         d9:71:61:7d:18:30:a4:8d:db:ba:23:c6:ef:8e:11:b9:74:2d:
         6c:43:53:ed:39:9d:1f:57:e3:c6:71:0a:0d:eb:a0:d1:f1:fe:
         dc:54:fe:ad:ca:72:8d:00:1f:1c:c0:4c:68:2f:44:b8:78:93:
         c4:6c:b8:49:45:d6:8c:ac:96:c2:cb:3b:95:1e:64:ff:4a:e4:
         b5:b7:b1:84:c5:06:04:db:b0:13:9a:6e:eb:54:a5:86:a0:a1:
         92:b5:19:b6:d4:80:62:af:50:71:8c:de:06:86:94:22:f8:dd:
         ed:c1:95:d3:6c:e9:28:a2:be:35:cc:0b:f3:e2:00:d2:16:aa:
         92:f0:8d:79:27:97:7b:6d:e6:17:d9:91:88:c1:cb:ca:7c:3f:
         bb:db:78:ac:ee:1f:7f:37:30:c4:cc:d8:91:aa:9d:c5:bf:32:
         db:cb:a3:fb:e3:48:c6:9b:47:c4:79:3d:49:f3:03:af:5a:84:
         a5:2a:ad:b1:86:45:ac:36:15:67:15:2a:2c:e4:33:8d:3c:6a:
         26:04:de:7f
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgICAIswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMUJF
M0FCMEY4REIyNjVBQkIyMjg3RTc1MTUxRTdGNUE5M0IyQzczNjAeFw0yNDExMzAw
MTI5MjVaFw0yNTExMTUwMTMwMDNaMDMxMTAvBgNVBAMTKDlDRTJBMDgyODNGREQ2
RTc0NjFCNTAxMjBDQjUyRkRFRENCNjY2NjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDIn6OepYjdoD5LOrTqebN7mVVouEoTwx/vp2A/jHFEpJ+ODipe
pWcA0mAbi/r8dPxTsHEJIKh2YatEkJjwfKnzbNrLUTOUcqhN+TKxQqnMgQV4/bOt
C2XWuazrGZqY/qnxbWaAS/XOHbmafUAYsxcV8tJbfSAsj1cofEvVxT54aGoZSVjq
FSYeYx155w2m5QUdMss4ug4aW5DP9Djz3zSUkKR5995O4PVDTT2Wp0x8pNHhGlxv
JxPCKi4ZU8XQolD0RxOrrmFDG8pUIn3pRabiZOqoe6B+OLdIO+Ier03XyBznmaJL
AxJc5H1gx42WNyLzPcW25UF0e87IIO1Z1aOfAgMBAAGjggIiMIICHjAdBgNVHQ4E
FgQUnOKggoP91udGG1ASDLUv3ty2ZmAwHwYDVR0jBBgwFoAUG+OrD42yZauyKH51
FR5/WpOyxzYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg
WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzUwL0ctT3JENDJ5WmF1eUtINTFGUjVfV3BPeXh6WS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ctT3JENDJ5WmF1eUtINTFGUjVfV3BP
eXh6WS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG6BggrBgEFBQcBCwSBrTCBqjBgBggr
BgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC81MC9uT0tnZ29QOTF1ZEdHMUFTRExVdjN0eTJabUEucm9hMEYG
CCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJk
cC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQFytWAMA0GCSqGSIb3DQEBCwUAA4IBAQAZoLquYPhGo5qkXAo6Rld41SIXA0gd
CCbHHQtO3skHuhLKJWVywJKW/bd1AWS4XV4mNhXS0mvZcWF9GDCkjdu6I8bvjhG5
dC1sQ1PtOZ0fV+PGcQoN66DR8f7cVP6tynKNAB8cwExoL0S4eJPEbLhJRdaMrJbC
yzuVHmT/SuS1t7GExQYE27ATmm7rVKWGoKGStRm21IBir1BxjN4GhpQi+N3twZXT
bOkoor41zAvz4gDSFqqS8I15J5d7beYX2ZGIwcvKfD+723is7h9/NzDEzNiRqp3F
vzLby6P740jGm0fEeT1J8wOvWoSlKq2xhkWsNhVnFSos5DONPGomBN5/
-----END CERTIFICATE-----
Generated at Fri Apr 11 20:23:33 2025 by rpki-client