Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/826/Sl_2VNRD3AeZK98ZANHfT911zQc.roa
File:                     Sl_2VNRD3AeZK98ZANHfT911zQc.roa (raw, json)
Hash identifier:          JFZzqfcjMDInQ9nuwiw992bGvdEF7yHyQIZigQnna0Q=
Subject key identifier:   4A:5F:F6:54:D4:43:DC:07:99:2B:DF:19:00:D1:DF:4F:DD:75:CD:07
Certificate issuer:       /CN=5E708E85B10AC603C06D785B42153DCFE1663AEA
Certificate serial:       3A
Authority key identifier: 5E:70:8E:85:B1:0A:C6:03:C0:6D:78:5B:42:15:3D:CF:E1:66:3A:EA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XnCOhbEKxgPAbXhbQhU9z-FmOuo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/826/Sl_2VNRD3AeZK98ZANHfT911zQc.roa
Signing time:             Fri 31 Jan 2025 01:29:15 +0000
ROA not before:           Fri 31 Jan 2025 01:29:15 +0000
ROA not after:            Thu 15 Jan 2026 01:30:03 +0000
asID:                     23618
IP address blocks:        210.157.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/826/XnCOhbEKxgPAbXhbQhU9z-FmOuo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/826/XnCOhbEKxgPAbXhbQhU9z-FmOuo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XnCOhbEKxgPAbXhbQhU9z-FmOuo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58 (0x3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E708E85B10AC603C06D785B42153DCFE1663AEA
        Validity
            Not Before: Jan 31 01:29:15 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=4A5FF654D443DC07992BDF1900D1DF4FDD75CD07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:89:fa:b6:8e:4b:8d:c7:8c:9d:79:04:47:2d:
                    78:a0:a0:5d:3d:42:04:82:25:b7:b7:7c:cf:3b:58:
                    1f:92:3c:7b:1f:42:99:9c:cc:33:0e:43:a7:f7:a2:
                    0e:a1:7e:92:03:f3:14:3e:20:84:ad:71:ff:9c:34:
                    6e:c3:ff:98:7f:ba:57:d3:d7:b9:b7:01:91:e4:b9:
                    86:bb:49:2e:55:a1:5c:26:ec:22:05:bc:1f:50:9a:
                    f5:0c:76:ff:63:c1:72:cc:cf:76:a6:f3:63:91:48:
                    50:aa:8b:12:32:a7:6b:f3:38:c7:ad:ce:2a:f6:e4:
                    41:91:a9:04:8a:73:6f:d7:43:2f:ce:fe:a6:0b:1b:
                    c8:a7:61:35:0b:c4:e9:60:91:50:53:2d:c8:a7:9d:
                    ee:ee:47:ea:0d:db:83:80:f1:4c:f1:51:8d:9a:70:
                    70:95:1c:06:62:62:06:5e:a6:a5:79:76:8f:a6:1c:
                    35:d9:42:d2:6c:56:a2:c7:24:5d:63:d7:ed:8a:f9:
                    90:3f:02:a5:2d:c4:21:2e:42:be:51:d1:c8:b3:17:
                    6f:4b:6e:e6:d7:88:d5:e5:aa:18:d2:45:05:b3:ba:
                    ea:4b:1b:20:9d:a9:b7:78:44:36:a2:6e:73:35:59:
                    e4:9c:d1:aa:3f:e4:05:f4:49:cd:83:36:54:ab:4c:
                    55:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:5F:F6:54:D4:43:DC:07:99:2B:DF:19:00:D1:DF:4F:DD:75:CD:07
            X509v3 Authority Key Identifier:
                keyid:5E:70:8E:85:B1:0A:C6:03:C0:6D:78:5B:42:15:3D:CF:E1:66:3A:EA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/826/XnCOhbEKxgPAbXhbQhU9z-FmOuo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XnCOhbEKxgPAbXhbQhU9z-FmOuo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/826/Sl_2VNRD3AeZK98ZANHfT911zQc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.157.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         11:12:ee:e4:92:5b:29:5e:03:b3:77:fc:89:bf:5b:5b:6a:83:
         ce:ef:96:27:63:56:19:5b:30:2e:ae:d4:69:59:b4:47:be:cb:
         f6:48:29:6c:7e:20:e9:55:ce:5b:d1:d7:62:b1:83:88:8c:a1:
         27:3c:ef:06:49:59:13:6a:60:f7:3f:4f:be:23:82:6a:3a:3e:
         45:fc:41:bf:f8:a0:8a:0e:c6:9d:20:0b:8e:07:39:2a:81:f0:
         56:ab:c4:ad:65:71:b7:45:99:1d:ef:44:f4:0f:b4:69:1c:89:
         9e:57:97:06:cc:d4:17:f1:f8:9d:8f:36:e1:24:b1:9b:44:a4:
         a2:48:53:40:49:f3:ed:fc:b7:eb:0f:b6:7a:f7:99:55:50:3e:
         c1:f9:7f:3f:71:8a:eb:d0:b1:38:27:6d:b6:91:27:ae:90:40:
         2b:31:7c:ef:60:02:cc:17:d4:9a:62:e2:1d:0f:34:1e:f6:65:
         ce:a2:b7:4d:25:e1:48:d7:8d:58:b8:92:b3:81:a4:6f:9f:2c:
         b2:40:5b:7f:bd:dd:a8:25:a4:db:4d:2a:c3:05:f4:a6:54:b2:
         a1:8d:a8:79:b9:fb:78:42:21:4f:fd:e5:1c:06:7c:d8:98:14:
         8f:88:0a:84:e7:6d:5a:5b:a0:bd:6f:cb:b4:ba:c0:93:f1:31:
         0e:c5:34:33
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBOjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1RTcw
OEU4NUIxMEFDNjAzQzA2RDc4NUI0MjE1M0RDRkUxNjYzQUVBMB4XDTI1MDEzMTAx
MjkxNVoXDTI2MDExNTAxMzAwM1owMzExMC8GA1UEAxMoNEE1RkY2NTRENDQzREMw
Nzk5MkJERjE5MDBEMURGNEZERDc1Q0QwNzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAPCJ+raOS43HjJ15BEcteKCgXT1CBIIlt7d8zztYH5I8ex9CmZzM
Mw5Dp/eiDqF+kgPzFD4ghK1x/5w0bsP/mH+6V9PXubcBkeS5hrtJLlWhXCbsIgW8
H1Ca9Qx2/2PBcszPdqbzY5FIUKqLEjKna/M4x63OKvbkQZGpBIpzb9dDL87+pgsb
yKdhNQvE6WCRUFMtyKed7u5H6g3bg4DxTPFRjZpwcJUcBmJiBl6mpXl2j6YcNdlC
0mxWosckXWPX7Yr5kD8CpS3EIS5CvlHRyLMXb0tu5teI1eWqGNJFBbO66ksbIJ2p
t3hENqJuczVZ5JzRqj/kBfRJzYM2VKtMVTMCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBRKX/ZU1EPcB5kr3xkA0d9P3XXNBzAfBgNVHSMEGDAWgBRecI6FsQrGA8BteFtC
FT3P4WY66jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvODI2L1huQ09oYkVLeGdQQWJYaGJRaFU5ei1GbU91by5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1huQ09oYkVLeGdQQWJYaGJRaFU5ei1G
bU91by5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC84MjYvU2xfMlZOUkQzQWVaSzk4WkFOSGZUOTExelFjLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBNKdUDANBgkqhkiG9w0BAQsFAAOCAQEAERLu5JJbKV4Ds3f8ib9bW2qDzu+W
J2NWGVswLq7UaVm0R77L9kgpbH4g6VXOW9HXYrGDiIyhJzzvBklZE2pg9z9PviOC
ajo+RfxBv/igig7GnSALjgc5KoHwVqvErWVxt0WZHe9E9A+0aRyJnleXBszUF/H4
nY824SSxm0SkokhTQEnz7fy36w+2eveZVVA+wfl/P3GK69CxOCdttpEnrpBAKzF8
72ACzBfUmmLiHQ80HvZlzqK3TSXhSNeNWLiSs4Gkb58sskBbf73dqCWk200qwwX0
plSyoY2oebn7eEIhT/3lHAZ82JgUj4gKhOdtWlugvW/LtLrAk/ExDsU0Mw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:25:32 2025 by rpki-client