Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/604/Q_lfps_3G87Fpw8M8CCxZHr1exY.roa
File:                     Q_lfps_3G87Fpw8M8CCxZHr1exY.roa (raw, json)
Hash identifier:          rKF0kT+vdQso7cxITd5aKlp8Fnvc6HNH30lYfY5+01o=
Subject key identifier:   43:F9:5F:A6:CF:F7:1B:CE:C5:A7:0F:0C:F0:20:B1:64:7A:F5:7B:16
Certificate issuer:       /CN=84F94F26AD23CBA93655AE34D806A8CE0A4C5907
Certificate serial:       1F
Authority key identifier: 84:F9:4F:26:AD:23:CB:A9:36:55:AE:34:D8:06:A8:CE:0A:4C:59:07
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hPlPJq0jy6k2Va402AaozgpMWQc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/Q_lfps_3G87Fpw8M8CCxZHr1exY.roa
Signing time:             Sun 04 Aug 2024 03:06:37 +0000
ROA not before:           Sun 04 Aug 2024 03:06:37 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     17682
IP address blocks:        119.47.16.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/hPlPJq0jy6k2Va402AaozgpMWQc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/hPlPJq0jy6k2Va402AaozgpMWQc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hPlPJq0jy6k2Va402AaozgpMWQc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Oct 2024 13:41:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31 (0x1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84F94F26AD23CBA93655AE34D806A8CE0A4C5907
        Validity
            Not Before: Aug  4 03:06:37 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=43F95FA6CFF71BCEC5A70F0CF020B1647AF57B16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:fa:bd:f3:94:59:aa:42:eb:72:24:6f:cd:d7:
                    46:f7:8f:60:0f:ee:69:0a:2e:67:36:f5:7f:04:aa:
                    c5:06:bf:c4:01:e7:57:68:f3:fe:1b:36:13:fb:5f:
                    d6:7f:7b:16:a3:0e:b7:3a:c6:24:e5:95:3d:71:f9:
                    3a:a5:41:5d:78:4e:f6:64:a1:5f:4f:4e:19:78:15:
                    e7:80:af:84:8a:39:15:95:bc:7d:79:50:ff:0b:df:
                    1e:d6:b9:97:ac:55:a8:3a:80:cb:cd:49:4d:57:58:
                    90:a0:41:67:d7:24:e7:cd:5f:01:8d:86:19:b0:12:
                    42:93:ff:20:c1:d7:45:cd:99:a5:8d:4b:50:ce:1d:
                    6b:3d:81:f9:aa:b7:fa:fd:f9:b6:13:f3:f0:80:fd:
                    bd:68:f0:69:db:b9:d4:e3:48:6f:09:5b:45:84:70:
                    54:5f:6f:51:85:42:13:ca:e6:6b:11:60:ce:21:7b:
                    52:27:07:eb:10:4f:09:e9:68:47:2c:a1:81:65:7f:
                    4c:cc:16:04:00:46:94:0b:fe:fc:8a:2d:4c:65:1c:
                    06:79:fd:02:9e:1c:e3:18:10:65:42:e4:bd:06:94:
                    b3:44:26:76:79:70:46:41:10:4c:fb:07:52:5b:08:
                    13:59:01:06:a7:f5:fa:0e:ae:68:41:96:fe:be:36:
                    fc:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:F9:5F:A6:CF:F7:1B:CE:C5:A7:0F:0C:F0:20:B1:64:7A:F5:7B:16
            X509v3 Authority Key Identifier:
                keyid:84:F9:4F:26:AD:23:CB:A9:36:55:AE:34:D8:06:A8:CE:0A:4C:59:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/hPlPJq0jy6k2Va402AaozgpMWQc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hPlPJq0jy6k2Va402AaozgpMWQc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/Q_lfps_3G87Fpw8M8CCxZHr1exY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.47.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         26:a9:b0:c7:c2:4d:76:66:51:0e:1c:87:b1:20:c6:1b:ca:1a:
         92:f0:31:32:2b:7a:ea:fe:c7:d4:9a:6e:3f:23:35:51:dd:3a:
         a3:05:48:7c:22:3e:12:b8:a6:1b:91:5b:27:78:2c:e1:e9:ca:
         19:75:8f:df:b6:c9:6d:d7:3c:bc:1e:ba:90:5c:e9:e2:cf:e5:
         0b:80:c5:c7:b2:ec:d9:d3:e0:be:9d:83:29:db:1c:6a:c3:1d:
         19:2e:94:40:ae:c2:f1:5f:04:2b:85:d1:74:d0:99:35:c8:0a:
         af:e7:0d:06:f9:c8:98:95:0f:c7:b0:94:30:d6:0c:0a:5a:25:
         f1:ad:d6:12:99:ea:de:81:13:ad:18:fa:df:48:fc:53:17:9a:
         6d:87:38:ad:a6:fa:77:39:38:fc:a2:5e:c0:8b:41:98:69:ff:
         5a:ca:e6:44:6d:a1:c1:74:69:99:71:c5:89:3f:d5:bf:c3:3e:
         f3:60:f6:d1:9b:f6:02:13:39:e6:47:9d:35:17:1d:e1:c4:bf:
         d0:e4:e8:4e:2d:76:b1:6e:bf:56:f7:c3:97:c4:75:fb:9e:18:
         bd:ac:66:4b:7b:a2:d4:88:96:6d:a5:7f:2a:eb:9f:0d:6d:3c:
         9c:6f:0d:60:a5:53:a2:2b:f5:78:f2:25:e1:97:31:70:81:d3:
         c9:39:c0:29
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBHzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4NEY5
NEYyNkFEMjNDQkE5MzY1NUFFMzREODA2QThDRTBBNEM1OTA3MB4XDTI0MDgwNDAz
MDYzN1oXDTI1MDcxNTAxMzAwMlowMzExMC8GA1UEAxMoNDNGOTVGQTZDRkY3MUJD
RUM1QTcwRjBDRjAyMEIxNjQ3QUY1N0IxNjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMT6vfOUWapC63Ikb83XRvePYA/uaQouZzb1fwSqxQa/xAHnV2jz
/hs2E/tf1n97FqMOtzrGJOWVPXH5OqVBXXhO9mShX09OGXgV54CvhIo5FZW8fXlQ
/wvfHta5l6xVqDqAy81JTVdYkKBBZ9ck581fAY2GGbASQpP/IMHXRc2ZpY1LUM4d
az2B+aq3+v35thPz8ID9vWjwadu51ONIbwlbRYRwVF9vUYVCE8rmaxFgziF7UicH
6xBPCeloRyyhgWV/TMwWBABGlAv+/IotTGUcBnn9Ap4c4xgQZULkvQaUs0Qmdnlw
RkEQTPsHUlsIE1kBBqf1+g6uaEGW/r42/NMCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBRD+V+mz/cbzsWnDwzwILFkevV7FjAfBgNVHSMEGDAWgBSE+U8mrSPLqTZVrjTY
BqjOCkxZBzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNjA0L2hQbFBKcTBqeTZrMlZhNDAyQWFvemdwTVdRYy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2hQbFBKcTBqeTZrMlZhNDAyQWFvemdw
TVdRYy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC82MDQvUV9sZnBzXzNHODdGcHc4TThDQ3haSHIxZXhZLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBHcvEDANBgkqhkiG9w0BAQsFAAOCAQEAJqmwx8JNdmZRDhyHsSDGG8oakvAx
Mit66v7H1JpuPyM1Ud06owVIfCI+ErimG5FbJ3gs4enKGXWP37bJbdc8vB66kFzp
4s/lC4DFx7Ls2dPgvp2DKdscasMdGS6UQK7C8V8EK4XRdNCZNcgKr+cNBvnImJUP
x7CUMNYMClol8a3WEpnq3oETrRj630j8UxeabYc4rab6dzk4/KJewItBmGn/Wsrm
RG2hwXRpmXHFiT/Vv8M+82D20Zv2AhM55kedNRcd4cS/0OToTi12sW6/VvfDl8R1
+54YvaxmS3ui1IiWbaV/KuufDW08nG8NYKVToiv1ePIl4ZcxcIHTyTnAKQ==
-----END CERTIFICATE-----
Generated at Fri Sep 27 06:22:12 2024 by rpki-client on console-ams.rpki-client.org