Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/530/LpmReinF0zRPnJAHFiQyJ515qn0.roa
File:                     LpmReinF0zRPnJAHFiQyJ515qn0.roa (raw, json)
Hash identifier:          5aTenP6HdVnlue7WvPwjvhxdmJ4IETgHDU/u7oCAlF0=
Subject key identifier:   2E:99:91:7A:29:C5:D3:34:4F:9C:90:07:16:24:32:27:9D:79:AA:7D
Certificate issuer:       /CN=1B20A06A21205820B28FD06CE0A84F03FCDAEBC5
Certificate serial:       43
Authority key identifier: 1B:20:A0:6A:21:20:58:20:B2:8F:D0:6C:E0:A8:4F:03:FC:DA:EB:C5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GyCgaiEgWCCyj9Bs4KhPA_za68U.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/LpmReinF0zRPnJAHFiQyJ515qn0.roa
Signing time:             Fri 01 Dec 2023 08:43:48 +0000
ROA not before:           Fri 01 Dec 2023 08:43:48 +0000
ROA not after:            Thu 14 Nov 2024 01:30:03 +0000
asID:                     131925
IP address blocks:        219.100.76.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/GyCgaiEgWCCyj9Bs4KhPA_za68U.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/GyCgaiEgWCCyj9Bs4KhPA_za68U.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GyCgaiEgWCCyj9Bs4KhPA_za68U.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 30 Jun 2024 06:27:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67 (0x43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B20A06A21205820B28FD06CE0A84F03FCDAEBC5
        Validity
            Not Before: Dec  1 08:43:48 2023 GMT
            Not After : Nov 14 01:30:03 2024 GMT
        Subject: CN=2E99917A29C5D3344F9C9007162432279D79AA7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:cf:e1:44:04:9d:58:a8:da:75:2f:e1:2b:91:
                    e5:57:25:05:06:2e:5c:00:20:86:d7:73:7f:75:63:
                    74:ec:1d:55:b2:a6:11:8c:6c:d5:a7:16:87:b3:a8:
                    6a:b6:d4:06:24:97:c9:81:7f:88:43:66:bb:51:3a:
                    e5:61:de:1e:06:c9:13:e3:b1:0e:2e:b2:16:e8:ca:
                    d8:bb:25:65:79:4d:40:64:c5:57:60:9b:42:98:1c:
                    c2:a9:78:ef:f7:89:c5:ce:f1:b5:e8:2e:0b:d2:f1:
                    04:70:78:00:a9:b6:13:66:3b:60:d3:42:49:fa:88:
                    86:3a:66:59:92:ee:9c:1b:e6:a2:16:88:36:33:c9:
                    23:04:84:6e:9e:3f:01:cb:e6:ac:4f:2e:81:13:c5:
                    c7:16:51:ef:30:86:c1:32:1d:6a:c4:f9:e6:9a:ce:
                    40:36:b2:a9:59:89:20:47:d0:e5:7a:02:b9:ac:44:
                    7c:9b:c1:7c:02:bd:da:0c:25:2c:26:df:98:41:7e:
                    8e:b2:97:68:a0:7f:ae:0e:60:60:ff:65:11:8c:36:
                    e2:b4:07:e1:a3:12:b4:fa:15:68:d4:f4:fe:85:01:
                    6b:42:e1:27:81:fc:12:29:52:47:bd:60:ed:2f:eb:
                    27:61:62:5f:32:ac:63:18:62:69:4f:4e:37:d3:86:
                    11:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:99:91:7A:29:C5:D3:34:4F:9C:90:07:16:24:32:27:9D:79:AA:7D
            X509v3 Authority Key Identifier:
                keyid:1B:20:A0:6A:21:20:58:20:B2:8F:D0:6C:E0:A8:4F:03:FC:DA:EB:C5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/GyCgaiEgWCCyj9Bs4KhPA_za68U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GyCgaiEgWCCyj9Bs4KhPA_za68U.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/LpmReinF0zRPnJAHFiQyJ515qn0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.100.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         af:73:92:f2:da:ff:2c:65:01:62:ac:72:23:9c:4c:43:01:91:
         7f:17:80:4e:7c:56:d8:d2:10:96:27:dc:cf:b6:81:2e:38:c3:
         12:fc:d9:0b:ea:9b:c8:6a:59:d9:c1:31:a9:4c:43:c6:ce:d7:
         54:41:f3:7d:ef:a9:ce:f8:8b:48:8e:2f:c6:9f:06:f5:99:2a:
         9f:81:3b:ac:41:20:dd:16:81:e0:63:05:20:9c:c1:ba:74:d9:
         c4:70:cf:99:b6:5c:9d:74:8c:85:35:46:6c:b1:29:6c:29:e1:
         de:f3:e4:46:f5:66:2b:39:68:a7:83:da:6b:19:25:c4:8d:a8:
         e3:3b:bf:a6:f1:d6:88:be:67:bc:95:20:24:e4:a4:c1:4c:3d:
         aa:0f:bc:36:cb:71:3f:4b:47:f0:bb:9c:9b:37:59:2d:77:1c:
         e4:b7:4a:59:ed:7a:cb:62:90:2b:85:0e:e7:29:9b:8f:21:12:
         5b:b4:9b:37:86:ba:d1:7b:91:5f:17:4c:8f:14:e2:4f:e0:f0:
         2f:6c:b4:52:6d:e9:99:e9:ce:23:43:af:5b:e4:cd:0e:7b:53:
         dd:f1:97:34:55:a2:38:93:9b:1d:2d:4a:f1:69:ef:b5:26:0d:
         2e:f5:b0:73:82:29:07:4b:1b:f0:43:91:5b:fd:3e:8f:d7:78:
         1b:d6:4b:dc
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBQzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxQjIw
QTA2QTIxMjA1ODIwQjI4RkQwNkNFMEE4NEYwM0ZDREFFQkM1MB4XDTIzMTIwMTA4
NDM0OFoXDTI0MTExNDAxMzAwM1owMzExMC8GA1UEAxMoMkU5OTkxN0EyOUM1RDMz
NDRGOUM5MDA3MTYyNDMyMjc5RDc5QUE3RDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAL/P4UQEnVio2nUv4SuR5VclBQYuXAAghtdzf3VjdOwdVbKmEYxs
1acWh7OoarbUBiSXyYF/iENmu1E65WHeHgbJE+OxDi6yFujK2LslZXlNQGTFV2Cb
Qpgcwql47/eJxc7xteguC9LxBHB4AKm2E2Y7YNNCSfqIhjpmWZLunBvmohaINjPJ
IwSEbp4/AcvmrE8ugRPFxxZR7zCGwTIdasT55prOQDayqVmJIEfQ5XoCuaxEfJvB
fAK92gwlLCbfmEF+jrKXaKB/rg5gYP9lEYw24rQH4aMStPoVaNT0/oUBa0LhJ4H8
EilSR71g7S/rJ2FiXzKsYxhiaU9ON9OGETsCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBQumZF6KcXTNE+ckAcWJDInnXmqfTAfBgNVHSMEGDAWgBQbIKBqISBYILKP0Gzg
qE8D/NrrxTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNTMwL0d5Q2dhaUVnV0NDeWo5QnM0S2hQQV96YTY4VS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0d5Q2dhaUVnV0NDeWo5QnM0S2hQQV96
YTY4VS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC81MzAvTHBtUmVpbkYwelJQbkpBSEZpUXlKNTE1cW4wLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAttkTDANBgkqhkiG9w0BAQsFAAOCAQEAr3OS8tr/LGUBYqxyI5xMQwGRfxeA
TnxW2NIQlifcz7aBLjjDEvzZC+qbyGpZ2cExqUxDxs7XVEHzfe+pzviLSI4vxp8G
9Zkqn4E7rEEg3RaB4GMFIJzBunTZxHDPmbZcnXSMhTVGbLEpbCnh3vPkRvVmKzlo
p4PaaxklxI2o4zu/pvHWiL5nvJUgJOSkwUw9qg+8NstxP0tH8LucmzdZLXcc5LdK
We16y2KQK4UO5ymbjyESW7SbN4a60XuRXxdMjxTiT+DwL2y0Um3pmenOI0OvW+TN
DntT3fGXNFWiOJObHS1K8WnvtSYNLvWwc4IpB0sb8EORW/0+j9d4G9ZL3A==
-----END CERTIFICATE-----
Generated at Mon Jun 24 23:50:30 2024 by rpki-client on console-fra.rpki-client.org