Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/783/pvHuTe96eBYDK1nMJ9t7o7wVdXs.roa
File:                     pvHuTe96eBYDK1nMJ9t7o7wVdXs.roa (raw, json)
Hash identifier:          WX/p8vu6I3WrLdpxbCY+0kYKSVM5y92Aaz+Tyj+QjAU=
Subject key identifier:   A6:F1:EE:4D:EF:7A:78:16:03:2B:59:CC:27:DB:7B:A3:BC:15:75:7B
Certificate issuer:       /CN=CB8300B20659BB951060F60B1F4BC6091AF27639
Certificate serial:       55
Authority key identifier: CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/pvHuTe96eBYDK1nMJ9t7o7wVdXs.roa
Signing time:             Sat 31 Aug 2024 01:30:28 +0000
ROA not before:           Sat 31 Aug 2024 01:30:28 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     18144
IP address blocks:        116.81.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Oct 2024 13:37:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85 (0x55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB8300B20659BB951060F60B1F4BC6091AF27639
        Validity
            Not Before: Aug 31 01:30:28 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=A6F1EE4DEF7A7816032B59CC27DB7BA3BC15757B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:0e:57:eb:67:9a:b0:73:84:a2:69:c4:3a:c9:
                    30:a2:94:eb:ef:e5:bf:8c:65:a9:f2:1b:36:6b:75:
                    0d:21:8d:f5:83:29:69:ab:1a:87:ee:cc:84:40:a8:
                    50:72:1d:18:3f:b9:81:f1:bb:fa:6e:a1:60:d8:dc:
                    25:74:e4:d3:b4:db:a2:29:53:72:2d:89:a6:ae:ab:
                    27:04:c0:57:4b:ec:59:60:27:bc:09:c0:61:28:8b:
                    6b:dc:94:b6:db:3d:c3:8a:05:c3:bb:3c:64:8a:a9:
                    e4:8f:1e:61:bf:4e:0c:6f:46:53:e8:7c:9f:88:6b:
                    d0:7c:aa:cc:d6:2f:69:fb:00:1d:45:7b:d7:5d:aa:
                    2d:ac:d6:37:1e:53:dc:f6:6a:5c:9a:8c:02:84:bf:
                    f1:31:f0:cd:ac:b2:d8:81:91:84:7a:cb:2d:5f:61:
                    5e:47:97:85:c4:b4:3e:97:75:da:98:d8:33:57:23:
                    41:79:96:c3:01:6e:6d:fe:86:8c:17:0e:34:60:ad:
                    79:63:a8:8b:f4:2e:d4:86:e1:34:7b:6a:c0:3f:67:
                    c4:8d:ba:97:07:f5:c8:3a:18:7f:56:e9:c0:73:6b:
                    5a:de:15:66:72:ec:7b:53:8b:c0:6a:be:fd:e2:1e:
                    39:f4:96:1f:5c:78:92:7f:6b:45:80:e0:5c:37:3d:
                    97:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:F1:EE:4D:EF:7A:78:16:03:2B:59:CC:27:DB:7B:A3:BC:15:75:7B
            X509v3 Authority Key Identifier:
                keyid:CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/pvHuTe96eBYDK1nMJ9t7o7wVdXs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.81.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         97:43:8d:b1:49:cc:85:13:24:f2:37:61:11:f3:ec:a1:2e:6d:
         43:ab:a0:30:97:85:8f:14:0f:f3:56:11:14:47:66:18:fb:c7:
         38:f4:32:27:3e:ce:2c:c4:12:fb:08:7d:e2:d5:38:02:bd:59:
         f8:f4:28:7e:28:86:63:2b:f1:20:9b:26:6b:d4:3a:fa:6f:03:
         68:33:a5:64:4f:ac:e9:78:33:35:d0:d5:f8:a9:e2:e6:d1:f6:
         7d:2b:eb:41:51:a6:71:79:aa:1c:23:2c:c0:19:35:3b:c5:a3:
         ca:e5:11:59:75:c7:83:13:2d:38:fd:46:ed:b8:00:f1:e5:15:
         e0:21:94:e0:f2:50:0e:d8:e3:8a:61:89:76:69:64:d2:40:3a:
         a0:c3:fd:a5:17:68:23:0d:fa:6c:91:4a:bb:56:26:53:ff:d9:
         c8:3a:40:71:e0:5a:20:72:30:b5:2e:83:cc:be:76:55:84:60:
         ff:77:38:27:c0:d4:42:b4:95:cf:58:c7:f9:3e:c1:65:3b:cc:
         cd:24:4f:5b:70:6e:9a:95:b1:f5:72:9e:38:ea:76:ec:da:66:
         54:d7:9d:56:05:1e:30:d2:fe:1b:9f:b0:e5:82:cd:7f:c7:05:
         47:0e:8c:80:26:3f:5b:d6:e4:06:35:96:6e:c6:cf:f5:63:d9:
         2e:6c:da:3d
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIBVTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDQjgz
MDBCMjA2NTlCQjk1MTA2MEY2MEIxRjRCQzYwOTFBRjI3NjM5MB4XDTI0MDgzMTAx
MzAyOFoXDTI1MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoQTZGMUVFNERFRjdBNzgx
NjAzMkI1OUNDMjdEQjdCQTNCQzE1NzU3QjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJcOV+tnmrBzhKJpxDrJMKKU6+/lv4xlqfIbNmt1DSGN9YMpaasa
h+7MhECoUHIdGD+5gfG7+m6hYNjcJXTk07TboilTci2Jpq6rJwTAV0vsWWAnvAnA
YSiLa9yUtts9w4oFw7s8ZIqp5I8eYb9ODG9GU+h8n4hr0HyqzNYvafsAHUV7112q
LazWNx5T3PZqXJqMAoS/8THwzayy2IGRhHrLLV9hXkeXhcS0Ppd12pjYM1cjQXmW
wwFubf6GjBcONGCteWOoi/Qu1IbhNHtqwD9nxI26lwf1yDoYf1bpwHNrWt4VZnLs
e1OLwGq+/eIeOfSWH1x4kn9rRYDgXDc9l5ECAwEAAaOCAiMwggIfMB0GA1UdDgQW
BBSm8e5N73p4FgMrWcwn23ujvBV1ezAfBgNVHSMEGDAWgBTLgwCyBlm7lRBg9gsf
S8YJGvJ2OTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNzgzL3k0TUFzZ1padTVVUVlQWUxIMHZHQ1JyeWRqay5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3k0TUFzZ1padTVVUVlQWUxIMHZHQ1Jy
eWRqay5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC83ODMvcHZIdVRlOTZlQllESzFuTUo5dDdvN3dWZFhzLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEw
BQMDAHRRMA0GCSqGSIb3DQEBCwUAA4IBAQCXQ42xScyFEyTyN2ER8+yhLm1Dq6Aw
l4WPFA/zVhEUR2YY+8c49DInPs4sxBL7CH3i1TgCvVn49Ch+KIZjK/EgmyZr1Dr6
bwNoM6VkT6zpeDM10NX4qeLm0fZ9K+tBUaZxeaocIyzAGTU7xaPK5RFZdceDEy04
/UbtuADx5RXgIZTg8lAO2OOKYYl2aWTSQDqgw/2lF2gjDfpskUq7ViZT/9nIOkBx
4FogcjC1LoPMvnZVhGD/dzgnwNRCtJXPWMf5PsFlO8zNJE9bcG6albH1cp446nbs
2mZU151WBR4w0v4bn7Dlgs1/xwVHDoyAJj9b1uQGNZZuxs/1Y9kubNo9
-----END CERTIFICATE-----
Generated at Fri Sep 27 06:22:13 2024 by rpki-client on console-ams.rpki-client.org