Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/v94AeX_MBcx9LFH2UGyTpYVSnpI.roa
File:                     v94AeX_MBcx9LFH2UGyTpYVSnpI.roa (raw, json)
Hash identifier:          KwUla+A6xiYVGnbsUxCc9fVg9Iwo4jTAnRbw5PQZhO8=
Subject key identifier:   BF:DE:00:79:7F:CC:05:CC:7D:2C:51:F6:50:6C:93:A5:85:52:9E:92
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       01FC
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/v94AeX_MBcx9LFH2UGyTpYVSnpI.roa
Signing time:             Mon 30 Sep 2024 01:29:54 +0000
ROA not before:           Mon 30 Sep 2024 01:29:54 +0000
ROA not after:            Mon 15 Sep 2025 01:30:03 +0000
asID:                     9371
IP address blocks:        103.15.0.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 508 (0x1fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Sep 30 01:29:54 2024 GMT
            Not After : Sep 15 01:30:03 2025 GMT
        Subject: CN=BFDE00797FCC05CC7D2C51F6506C93A585529E92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:13:8d:b9:57:1b:dc:88:96:d9:cc:47:7e:a4:
                    3b:f4:74:1f:c7:7e:bb:66:d8:ee:8c:a4:f9:fa:dc:
                    66:99:87:ff:92:c8:7d:68:f8:99:f1:c1:dd:02:95:
                    61:e2:13:92:56:4f:7b:34:0a:f8:da:2a:c3:e8:ff:
                    20:f8:7a:e9:52:39:f8:b5:ba:d1:3c:9b:0a:32:2b:
                    2a:4e:87:11:fe:7b:c1:f1:6f:3a:df:b7:10:52:d8:
                    6e:4a:42:95:8d:74:3f:6f:1b:29:e6:32:27:64:43:
                    4d:f6:3b:44:2a:48:ef:7c:bc:ee:95:4c:e3:c0:31:
                    5c:2e:95:96:ab:9b:cc:74:fa:43:ae:98:e8:7c:97:
                    c4:ca:36:17:d4:5f:cc:32:e9:bc:1f:f5:0b:92:81:
                    84:8a:4a:78:39:5c:c6:4b:9f:c0:68:94:8e:d4:71:
                    db:75:fe:cc:45:9f:84:81:2b:e6:bf:86:c6:3c:ac:
                    19:e3:b9:07:2a:97:bb:59:ff:fd:3d:ac:a7:7a:c3:
                    81:77:35:42:f4:57:0e:4a:c3:95:b9:cc:4b:a3:8f:
                    47:dc:50:1f:04:45:50:0a:1d:12:4c:06:ee:00:c3:
                    0d:82:a4:a9:e7:2b:f6:f9:18:54:c8:1b:d6:3b:d1:
                    dd:97:7b:d4:6f:e1:7c:39:38:25:f3:90:cf:bc:53:
                    12:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:DE:00:79:7F:CC:05:CC:7D:2C:51:F6:50:6C:93:A5:85:52:9E:92
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/v94AeX_MBcx9LFH2UGyTpYVSnpI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.15.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:8a:b2:a8:ce:4f:58:93:2c:69:62:db:31:cc:dd:68:ab:13:
         44:87:93:af:9e:91:f1:d0:07:9b:36:8a:b6:f1:05:e3:a0:0e:
         30:c2:15:e5:05:95:00:51:9d:dd:d0:14:25:14:b7:48:8d:bf:
         fe:b9:d2:d2:73:49:92:1e:84:e8:5f:c2:1b:92:7a:b6:59:38:
         39:ee:75:fb:c4:80:b9:c0:81:6d:fa:8d:bf:e1:f2:2d:c8:b2:
         76:1f:a3:7e:8e:94:8e:d9:9e:6d:f7:e2:be:7d:bb:d4:4e:0d:
         d1:f4:25:70:52:da:1c:9c:fc:c5:0f:dc:7c:65:6d:50:c0:8b:
         9f:3a:30:8b:2c:6b:b4:47:5b:2a:ca:c6:7e:c3:c2:46:99:aa:
         d1:9a:24:aa:d4:ac:16:06:0a:ef:de:13:c6:e1:57:e1:2d:9c:
         2b:fe:82:45:2e:ae:9d:67:dd:d8:f6:7c:ba:79:d1:d3:8a:d7:
         7a:70:33:e0:9b:71:ae:65:68:36:37:f7:39:1f:13:0c:21:78:
         92:d2:77:8d:b9:2b:a2:4e:43:47:25:48:54:7d:c4:31:c2:2c:
         92:fe:57:6a:3b:e6:0f:d8:7c:e8:86:8d:2b:ce:36:c4:ee:99:
         38:22:3e:6b:ed:9a:33:ac:85:11:13:6e:15:71:3c:92:fc:1b:
         f4:ae:2e:bd
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgICAfwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjAz
MjBGNkQwOURCMThDMEY3MEIzNTRBM0Q4NzQ1MEY3MEU2RDcxQTAeFw0yNDA5MzAw
MTI5NTRaFw0yNTA5MTUwMTMwMDNaMDMxMTAvBgNVBAMTKEJGREUwMDc5N0ZDQzA1
Q0M3RDJDNTFGNjUwNkM5M0E1ODU1MjlFOTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCnE425VxvciJbZzEd+pDv0dB/Hfrtm2O6MpPn63GaZh/+SyH1o
+Jnxwd0ClWHiE5JWT3s0CvjaKsPo/yD4eulSOfi1utE8mwoyKypOhxH+e8Hxbzrf
txBS2G5KQpWNdD9vGynmMidkQ032O0QqSO98vO6VTOPAMVwulZarm8x0+kOumOh8
l8TKNhfUX8wy6bwf9QuSgYSKSng5XMZLn8BolI7Ucdt1/sxFn4SBK+a/hsY8rBnj
uQcql7tZ//09rKd6w4F3NUL0Vw5Kw5W5zEujj0fcUB8ERVAKHRJMBu4Aww2CpKnn
K/b5GFTIG9Y70d2Xe9Rv4Xw5OCXzkM+8UxKlAgMBAAGjggIoMIICJDAdBgNVHQ4E
FgQUv94AeX/MBcx9LFH2UGyTpYVSnpIwHwYDVR0jBBgwFoAUIDIPbQnbGMD3CzVK
PYdFD3Dm1xowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEwMjQ3L0lESVBiUW5iR01EM0N6VktQWWRGRDNEbTF4by5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0lESVBiUW5iR01EM0N6VktQWWRG
RDNEbTF4by5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8xMDI0Ny92OTRBZVhfTUJjeDlMRkgyVUd5VHBZVlNucEku
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQCZw8AMA0GCSqGSIb3DQEBCwUAA4IBAQB8irKozk9YkyxpYtsxzN1o
qxNEh5OvnpHx0AebNoq28QXjoA4wwhXlBZUAUZ3d0BQlFLdIjb/+udLSc0mSHoTo
X8Ibknq2WTg57nX7xIC5wIFt+o2/4fItyLJ2H6N+jpSO2Z5t9+K+fbvUTg3R9CVw
UtocnPzFD9x8ZW1QwIufOjCLLGu0R1sqysZ+w8JGmarRmiSq1KwWBgrv3hPG4Vfh
LZwr/oJFLq6dZ93Y9ny6edHTitd6cDPgm3GuZWg2N/c5HxMMIXiS0neNuSuiTkNH
JUhUfcQxwiyS/ldqO+YP2Hzoho0rzjbE7pk4Ij5r7ZozrIURE24VcTyS/Bv0ri69
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:10:31 2025 by rpki-client