Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10173/qsf60ryjM5NJdzgSY1iQuQ4iiT4.roa
File:                     qsf60ryjM5NJdzgSY1iQuQ4iiT4.roa (raw, json)
Hash identifier:          wQgOEjtIc+cGRyu1g20szRBQNBpPd9UYbKAAAjpysdk=
Subject key identifier:   AA:C7:FA:D2:BC:A3:33:93:49:77:38:12:63:58:90:B9:0E:22:89:3E
Certificate issuer:       /CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7
Certificate serial:       A9
Authority key identifier: 10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/qsf60ryjM5NJdzgSY1iQuQ4iiT4.roa
Signing time:             Thu 29 Feb 2024 01:30:14 +0000
ROA not before:           Thu 29 Feb 2024 01:30:14 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     18126
IP address blocks:        118.106.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 169 (0xa9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7
        Validity
            Not Before: Feb 29 01:30:14 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=AAC7FAD2BCA3339349773812635890B90E22893E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:01:f4:19:c9:be:52:40:95:b8:16:59:a2:c5:
                    f4:0e:ea:0b:ec:4f:d7:1c:cf:c5:1a:98:af:be:0e:
                    46:cc:64:d2:f9:e4:a1:6f:1e:3d:d3:f0:fb:e3:2e:
                    0f:35:25:3d:9e:99:52:f3:bd:74:e3:7f:0d:f6:f3:
                    22:34:c5:15:03:73:73:12:42:b7:84:26:ee:3b:d1:
                    67:d5:ef:65:e1:ae:32:09:50:85:9e:c2:69:40:54:
                    b3:68:9e:b9:e8:59:a2:d5:eb:ef:71:14:a2:43:5f:
                    5f:29:4f:e5:01:81:25:05:6e:68:3c:9b:85:37:51:
                    af:c3:bd:8e:0b:b2:3e:df:bb:26:bb:f7:3a:8b:d6:
                    96:35:e8:9c:88:71:d6:6e:85:88:0c:03:6d:6d:b0:
                    87:94:22:17:11:f1:0b:ce:5a:c0:2c:71:40:53:3b:
                    b7:11:05:b3:e8:b2:05:52:db:00:c5:84:73:87:b1:
                    e6:7a:c6:bb:a7:45:8e:ad:2b:15:02:ab:77:8f:c3:
                    90:9c:41:76:a2:79:34:2c:57:10:3b:ec:65:e7:04:
                    33:0e:42:66:65:38:c5:e1:6e:05:0b:46:c4:9f:dd:
                    3f:a7:13:ea:14:31:ad:e1:61:1d:b9:63:d8:38:2e:
                    01:fc:f7:e9:00:b8:97:13:4c:d0:7e:5b:cf:9b:0e:
                    5f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:C7:FA:D2:BC:A3:33:93:49:77:38:12:63:58:90:B9:0E:22:89:3E
            X509v3 Authority Key Identifier:
                keyid:10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/qsf60ryjM5NJdzgSY1iQuQ4iiT4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.106.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         53:5f:e7:cb:85:9c:18:57:52:66:c4:66:0d:47:03:f2:f0:35:
         ba:69:c6:1c:74:87:f7:ec:56:2c:f4:fd:ed:8f:e7:1f:9f:5a:
         0d:23:fe:0f:46:9b:92:6f:ef:4e:2d:e7:b8:0d:a1:66:68:f3:
         32:5c:a7:84:50:5a:11:8a:f1:79:75:75:cd:e8:1b:b8:72:53:
         7c:61:bf:c5:ad:26:34:65:53:e1:8c:20:25:52:8d:59:18:43:
         a7:a6:70:fe:ff:ff:77:df:6d:5a:9b:ec:9b:cc:ab:a0:9e:5f:
         cf:cc:40:f1:e4:31:d1:6e:6c:c1:07:cb:92:1e:ef:47:df:37:
         c0:a2:76:e4:62:5b:5d:88:42:57:a0:a9:d1:c6:96:2c:e4:e4:
         60:50:53:ac:fa:dd:7b:20:a2:59:a5:80:6d:0d:6d:b1:36:29:
         3a:7a:02:1f:7c:57:fe:69:b2:16:e4:7f:0c:fd:94:0e:e5:1a:
         78:94:4b:f8:e1:96:89:29:74:1a:04:1c:5e:4b:df:1e:df:c0:
         46:13:c0:ee:05:33:13:57:19:5e:f1:cc:64:de:15:ff:7b:74:
         db:a8:13:7a:ad:a7:5e:23:5e:fc:78:f7:3a:1e:79:f2:d2:1e:
         ca:22:dd:af:4b:09:a8:e6:01:05:b2:58:96:a1:f6:1c:0c:ee:
         2c:7b:53:8f
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgICAKkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTAx
QTkwRTRFNzRDNDAzQUJFOEU1RTBBMUZFOEU0MTU3QUJEMkFFNzAeFw0yNDAyMjkw
MTMwMTRaFw0yNTAyMTQwMTMwMDNaMDMxMTAvBgNVBAMTKEFBQzdGQUQyQkNBMzMz
OTM0OTc3MzgxMjYzNTg5MEI5MEUyMjg5M0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDGAfQZyb5SQJW4FlmixfQO6gvsT9ccz8UamK++DkbMZNL55KFv
Hj3T8PvjLg81JT2emVLzvXTjfw328yI0xRUDc3MSQreEJu470WfV72XhrjIJUIWe
wmlAVLNonrnoWaLV6+9xFKJDX18pT+UBgSUFbmg8m4U3Ua/DvY4Lsj7fuya79zqL
1pY16JyIcdZuhYgMA21tsIeUIhcR8QvOWsAscUBTO7cRBbPosgVS2wDFhHOHseZ6
xrunRY6tKxUCq3ePw5CcQXaieTQsVxA77GXnBDMOQmZlOMXhbgULRsSf3T+nE+oU
Ma3hYR25Y9g4LgH89+kAuJcTTNB+W8+bDl83AgMBAAGjggInMIICIzAdBgNVHQ4E
FgQUqsf60ryjM5NJdzgSY1iQuQ4iiT4wHwYDVR0jBBgwFoAUEBqQ5OdMQDq+jl4K
H+jkFXq9KucwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEwMTczL0VCcVE1T2RNUURxLWpsNEtILWprRlhxOUt1Yy5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0VCcVE1T2RNUURxLWpsNEtILWpr
RlhxOUt1Yy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8xMDE3My9xc2Y2MHJ5ak01TkpkemdTWTFpUXVRNGlpVDQu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTAL
BAIAATAFAwMAdmowDQYJKoZIhvcNAQELBQADggEBAFNf58uFnBhXUmbEZg1HA/Lw
Nbppxhx0h/fsViz0/e2P5x+fWg0j/g9Gm5Jv704t57gNoWZo8zJcp4RQWhGK8Xl1
dc3oG7hyU3xhv8WtJjRlU+GMICVSjVkYQ6emcP7//3ffbVqb7JvMq6CeX8/MQPHk
MdFubMEHy5Ie70ffN8CiduRiW12IQlegqdHGlizk5GBQU6z63XsgolmlgG0NbbE2
KTp6Ah98V/5pshbkfwz9lA7lGniUS/jhlokpdBoEHF5L3x7fwEYTwO4FMxNXGV7x
zGTeFf97dNuoE3qtp14jXvx49zoeefLSHsoi3a9LCajmAQWyWJah9hwM7ix7U48=
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:41 2024 by rpki-client on console-fra.rpki-client.org