Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/Z4ijK58RDo60-Zl__DpMe76f1eU.roa
File:                     Z4ijK58RDo60-Zl__DpMe76f1eU.roa (raw, json)
Hash identifier:          /MYGbRjFqNf9Z+PTJbPQFgiNolpQL4lhgNjYi2PsV7k=
Subject key identifier:   67:88:A3:2B:9F:11:0E:8E:B4:F9:99:7F:FC:3A:4C:7B:BE:9F:D5:E5
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       0201
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/Z4ijK58RDo60-Zl__DpMe76f1eU.roa
Signing time:             Mon 30 Sep 2024 01:29:57 +0000
ROA not before:           Mon 30 Sep 2024 01:29:57 +0000
ROA not after:            Mon 15 Sep 2025 01:30:03 +0000
asID:                     9371
IP address blocks:        183.181.100.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 513 (0x201)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Sep 30 01:29:57 2024 GMT
            Not After : Sep 15 01:30:03 2025 GMT
        Subject: CN=6788A32B9F110E8EB4F9997FFC3A4C7BBE9FD5E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2b:a4:e5:9e:4f:7e:3c:1f:96:92:73:15:50:
                    4c:9b:fd:a5:c2:27:fa:60:00:6d:06:7f:0c:71:c9:
                    d8:9c:7d:a7:a4:9e:97:73:19:c9:4a:71:9f:df:a6:
                    11:ce:bd:20:40:c5:c2:c0:04:a9:f1:b2:00:5d:0b:
                    53:73:da:d7:85:ad:0b:80:6a:6e:c8:19:03:91:d2:
                    80:da:d1:2f:74:42:51:1d:3e:1a:77:58:18:00:e0:
                    ae:c7:2c:fb:3f:5b:1c:d6:ad:76:1a:98:f2:53:ea:
                    2c:ef:c8:e9:0b:a4:ed:8e:ca:b2:81:78:96:d2:1b:
                    22:37:48:c1:f8:62:8f:e6:fe:ef:69:e4:af:02:7a:
                    64:de:a4:47:eb:d1:ba:e7:9b:87:13:a3:55:96:55:
                    50:56:57:a9:3a:35:27:45:bb:e6:bb:df:0a:75:eb:
                    c7:ac:a8:ac:7d:1d:d1:79:bf:cd:63:6e:91:4e:db:
                    a8:1a:9c:34:13:5b:f4:5e:e3:08:77:07:aa:de:6d:
                    40:37:07:5e:b2:56:4a:86:1e:94:d1:85:e6:09:37:
                    cf:ba:5a:23:2c:e4:d1:e0:d0:15:d9:de:9b:47:d8:
                    e2:6e:a0:db:cb:a1:6d:a1:e0:60:f8:78:74:b0:05:
                    73:7b:05:e6:c3:92:bf:ce:ac:09:18:3a:1f:80:c6:
                    4d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:88:A3:2B:9F:11:0E:8E:B4:F9:99:7F:FC:3A:4C:7B:BE:9F:D5:E5
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/Z4ijK58RDo60-Zl__DpMe76f1eU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.181.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         90:1f:26:e4:92:b1:a9:34:fb:fc:4e:1b:e0:ad:43:69:7b:84:
         b9:bf:db:fa:a4:ec:eb:01:ac:d8:35:23:fb:12:a3:5f:b8:6f:
         17:86:f4:0b:78:d9:94:c1:45:3e:32:6a:c3:07:c2:ab:5d:5a:
         27:df:6b:3f:58:5e:89:48:a4:fc:df:ce:48:f4:b1:b5:02:73:
         41:c5:67:15:b2:d4:ea:13:23:e1:88:ef:9c:98:3e:b2:c4:99:
         e6:50:04:11:01:44:2e:7f:15:58:4d:22:1f:38:fc:21:e1:4a:
         c2:5f:8b:22:5b:4e:9a:f3:62:8b:08:46:82:6b:0a:72:09:b2:
         c9:84:af:1d:69:8c:af:cf:3b:37:48:48:28:55:bc:7b:b7:2a:
         49:79:1c:5d:a5:80:0a:1c:e6:73:6a:70:56:c2:dc:9a:83:cd:
         d4:47:9a:5a:0f:eb:ac:de:4b:10:fd:5d:21:9a:b0:46:b0:a2:
         d3:de:75:37:53:ed:a0:45:5b:8e:f2:64:ee:bc:ba:06:c2:ea:
         77:64:13:62:20:20:96:c1:3c:44:65:05:3b:1a:df:be:f3:c4:
         0a:20:f4:a6:c2:25:d4:f8:08:8d:43:72:9a:25:ba:a3:01:f5:
         15:e4:10:19:39:13:89:94:60:dd:3a:a6:47:4c:c8:f7:cc:b7:
         16:cd:e9:60
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgICAgEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjAz
MjBGNkQwOURCMThDMEY3MEIzNTRBM0Q4NzQ1MEY3MEU2RDcxQTAeFw0yNDA5MzAw
MTI5NTdaFw0yNTA5MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDY3ODhBMzJCOUYxMTBF
OEVCNEY5OTk3RkZDM0E0QzdCQkU5RkQ1RTUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDIK6Tlnk9+PB+WknMVUEyb/aXCJ/pgAG0Gfwxxydicfaeknpdz
GclKcZ/fphHOvSBAxcLABKnxsgBdC1Nz2teFrQuAam7IGQOR0oDa0S90QlEdPhp3
WBgA4K7HLPs/WxzWrXYamPJT6izvyOkLpO2OyrKBeJbSGyI3SMH4Yo/m/u9p5K8C
emTepEfr0brnm4cTo1WWVVBWV6k6NSdFu+a73wp168esqKx9HdF5v81jbpFO26ga
nDQTW/Re4wh3B6rebUA3B16yVkqGHpTRheYJN8+6WiMs5NHg0BXZ3ptH2OJuoNvL
oW2h4GD4eHSwBXN7BebDkr/OrAkYOh+Axk3/AgMBAAGjggIoMIICJDAdBgNVHQ4E
FgQUZ4ijK58RDo60+Zl//DpMe76f1eUwHwYDVR0jBBgwFoAUIDIPbQnbGMD3CzVK
PYdFD3Dm1xowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEwMjQ3L0lESVBiUW5iR01EM0N6VktQWWRGRDNEbTF4by5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0lESVBiUW5iR01EM0N6VktQWWRG
RDNEbTF4by5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8xMDI0Ny9aNGlqSzU4UkRvNjAtWmxfX0RwTWU3NmYxZVUu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBt7VkMA0GCSqGSIb3DQEBCwUAA4IBAQCQHybkkrGpNPv8ThvgrUNp
e4S5v9v6pOzrAazYNSP7EqNfuG8XhvQLeNmUwUU+MmrDB8KrXVon32s/WF6JSKT8
385I9LG1AnNBxWcVstTqEyPhiO+cmD6yxJnmUAQRAUQufxVYTSIfOPwh4UrCX4si
W06a82KLCEaCawpyCbLJhK8daYyvzzs3SEgoVbx7typJeRxdpYAKHOZzanBWwtya
g83UR5paD+us3ksQ/V0hmrBGsKLT3nU3U+2gRVuO8mTuvLoGwup3ZBNiICCWwTxE
ZQU7Gt++88QKIPSmwiXU+AiNQ3KaJbqjAfUV5BAZOROJlGDdOqZHTMj3zLcWzelg
-----END CERTIFICATE-----
Generated at Fri Nov 22 15:23:54 2024 by rpki-client on console-fra.rpki-client.org