Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/Qn01n4dkgEu_CpSPD3f_qexayVM.roa
File:                     Qn01n4dkgEu_CpSPD3f_qexayVM.roa (raw, json)
Hash identifier:          biyWNuL9peYPjOB78UsbQMQ8IpOH4n+ijTD6ZJYP6Pg=
Subject key identifier:   42:7D:35:9F:87:64:80:4B:BF:0A:94:8F:0F:77:FF:A9:EC:5A:C9:53
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       0103
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/Qn01n4dkgEu_CpSPD3f_qexayVM.roa
Signing time:             Fri 01 Sep 2023 01:28:58 +0000
ROA not before:           Fri 01 Sep 2023 01:28:58 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     2497
IP address blocks:        202.238.192.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jul 2024 07:52:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 259 (0x103)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Sep  1 01:28:58 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=427D359F8764804BBF0A948F0F77FFA9EC5AC953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d4:4d:79:6a:10:80:55:bb:9e:58:94:15:e3:
                    b8:b7:57:f1:c4:81:bb:31:29:f0:31:8c:a8:d7:9a:
                    fd:b5:53:21:52:bb:65:c9:a4:cf:5a:19:c1:30:f5:
                    d1:0b:7c:39:78:eb:b8:f4:ac:e1:ce:00:38:d5:83:
                    96:24:38:ac:4c:6d:c9:7e:93:3e:04:b6:12:e2:75:
                    56:3c:3d:c4:d5:56:68:7d:b6:57:79:48:2c:a9:21:
                    f0:a7:c7:d9:c8:43:dc:fe:c9:70:23:d6:a4:e2:08:
                    37:f0:2e:01:44:2b:36:bf:30:22:75:32:ce:b6:62:
                    08:f9:6f:85:06:09:fe:2e:bd:d5:f0:f2:01:a9:f5:
                    ec:82:fb:37:fe:de:c9:9a:12:97:96:2b:36:02:59:
                    b3:b8:82:fb:54:d8:f9:0b:e7:91:d5:70:f8:35:90:
                    eb:05:c0:5b:d8:4c:7f:cf:a5:3f:40:3e:16:1c:50:
                    5c:d2:35:76:d8:02:a9:8b:03:cf:e6:c5:d1:92:80:
                    f2:86:2b:00:e6:c0:4f:cb:36:d0:9a:57:19:0c:b3:
                    fb:c1:f4:68:2f:b1:60:b0:3f:7b:d9:ab:18:8a:99:
                    20:5d:1c:68:46:bb:c7:d9:89:83:da:b8:a6:eb:7e:
                    04:f8:29:17:6e:15:b2:9e:29:1b:fc:75:75:ae:fc:
                    27:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:7D:35:9F:87:64:80:4B:BF:0A:94:8F:0F:77:FF:A9:EC:5A:C9:53
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/Qn01n4dkgEu_CpSPD3f_qexayVM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.238.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         78:a0:db:7b:e4:63:24:69:da:79:fa:c9:ac:0e:fa:7a:dd:b1:
         71:61:e9:80:e5:1d:f2:13:2c:19:e0:42:13:45:2f:dc:86:39:
         a1:c9:44:17:0d:51:85:0f:62:91:1f:dc:cb:ac:e5:b7:f6:6b:
         33:d0:fd:37:cc:67:2b:6f:1a:88:aa:62:44:54:2c:87:f6:10:
         8e:82:f0:6a:a7:8d:da:29:01:b0:e1:f1:ab:f8:59:4e:ed:eb:
         36:7e:f8:ad:14:94:13:dc:dd:48:93:be:f9:43:48:1f:58:2e:
         05:88:c6:e9:e9:5d:98:b3:51:dd:c2:d7:4f:b8:63:4c:3b:4f:
         4b:45:0b:79:c3:c0:77:ea:d1:09:9d:87:5b:60:22:13:ce:cf:
         e2:5e:a4:b1:f3:56:bc:ac:61:5e:21:7d:89:ee:b2:4b:90:ea:
         d5:51:47:d2:00:e4:49:09:56:2b:96:d9:92:8e:19:e6:d3:24:
         ea:50:3b:39:8b:3b:47:72:28:5c:56:dc:33:66:d5:17:71:28:
         15:58:8e:bb:6c:26:f3:2f:16:2f:8d:9a:a8:27:6f:19:16:b6:
         83:17:40:0f:96:cf:80:c7:83:2a:ee:45:fa:33:43:91:e5:16:
         55:4e:f2:04:e7:5f:33:39:fb:b3:9c:c8:9e:01:74:05:5f:63:
         9b:ea:a0:e7
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgICAQMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjk4
M0NGRDVGOENBRkEwMDY4RDJFQkEyNUVEMEY3MDEyNDRCMTJGOTAeFw0yMzA5MDEw
MTI4NThaFw0yNDA4MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDQyN0QzNTlGODc2NDgw
NEJCRjBBOTQ4RjBGNzdGRkE5RUM1QUM5NTMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCc1E15ahCAVbueWJQV47i3V/HEgbsxKfAxjKjXmv21UyFSu2XJ
pM9aGcEw9dELfDl467j0rOHOADjVg5YkOKxMbcl+kz4EthLidVY8PcTVVmh9tld5
SCypIfCnx9nIQ9z+yXAj1qTiCDfwLgFEKza/MCJ1Ms62Ygj5b4UGCf4uvdXw8gGp
9eyC+zf+3smaEpeWKzYCWbO4gvtU2PkL55HVcPg1kOsFwFvYTH/PpT9APhYcUFzS
NXbYAqmLA8/mxdGSgPKGKwDmwE/LNtCaVxkMs/vB9GgvsWCwP3vZqxiKmSBdHGhG
u8fZiYPauKbrfgT4KRduFbKeKRv8dXWu/CdvAgMBAAGjggIgMIICHDAdBgNVHQ4E
FgQUQn01n4dkgEu/CpSPD3f/qexayVMwHwYDVR0jBBgwFoAUKYPP1fjK+gBo0uui
XtD3ASRLEvkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBkBgNVHR8EXTBbMFmg
V6BVhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzYvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JMRXZrLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JM
RXZrLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgbkGCCsGAQUFBwELBIGsMIGpMF8GCCsG
AQUFBzALhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzYvUW4wMW40ZGtnRXVfQ3BTUEQzZl9xZXhheVZNLnJvYTBGBggr
BgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3JyZHAv
YXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
BsruwDANBgkqhkiG9w0BAQsFAAOCAQEAeKDbe+RjJGnaefrJrA76et2xcWHpgOUd
8hMsGeBCE0Uv3IY5oclEFw1RhQ9ikR/cy6zlt/ZrM9D9N8xnK28aiKpiRFQsh/YQ
joLwaqeN2ikBsOHxq/hZTu3rNn74rRSUE9zdSJO++UNIH1guBYjG6eldmLNR3cLX
T7hjTDtPS0ULecPAd+rRCZ2HW2AiE87P4l6ksfNWvKxhXiF9ie6yS5Dq1VFH0gDk
SQlWK5bZko4Z5tMk6lA7OYs7R3IoXFbcM2bVF3EoFViOu2wm8y8WL42aqCdvGRa2
gxdAD5bPgMeDKu5F+jNDkeUWVU7yBOdfMzn7s5zIngF0BV9jm+qg5w==
-----END CERTIFICATE-----
Generated at Wed Jun 26 09:28:47 2024 by rpki-client on console-fra.rpki-client.org