Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10822/vk9UtpUiCcSvDb0B1aj_xX3AtCY.roa
File:                     vk9UtpUiCcSvDb0B1aj_xX3AtCY.roa (raw, json)
Hash identifier:          MVtZTLJZ58W3WUa4CE2a97Jb7Ju+gssNHhI3az4humA=
Subject key identifier:   BE:4F:54:B6:95:22:09:C4:AF:0D:BD:01:D5:A8:FF:C5:7D:C0:B4:26
Certificate issuer:       /CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
Certificate serial:       06
Authority key identifier: 33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/vk9UtpUiCcSvDb0B1aj_xX3AtCY.roa
Signing time:             Thu 07 Mar 2024 06:58:01 +0000
ROA not before:           Thu 07 Mar 2024 06:58:01 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     17698
IP address blocks:        49.242.128.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
        Validity
            Not Before: Mar  7 06:58:01 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=BE4F54B6952209C4AF0DBD01D5A8FFC57DC0B426
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e1:be:3b:51:50:9c:36:5f:11:7a:6b:19:29:
                    29:a9:a0:bf:69:f7:ca:6d:0b:e0:0e:d9:cc:e2:23:
                    14:f2:ef:57:d3:55:e0:3e:73:40:29:e8:f8:b6:2b:
                    d9:64:7a:a9:4f:80:f2:29:3e:4c:ab:3a:26:06:40:
                    d9:ea:f5:1e:f8:70:9b:07:92:f5:a5:f7:55:8d:c6:
                    de:f6:cf:93:9b:8b:89:11:8b:a8:41:9b:aa:00:d4:
                    97:88:59:ce:2a:26:5e:59:a9:a3:de:90:4a:37:db:
                    e5:a3:7a:57:2b:3b:3b:0f:f7:dc:81:68:e2:65:3c:
                    1c:da:5e:6e:8b:78:f4:ab:ba:c6:58:00:52:25:76:
                    b7:5d:e7:e9:6b:38:08:e2:91:05:b0:12:d6:b7:29:
                    eb:26:48:9f:ff:a6:27:ba:09:fb:75:8f:bf:14:4d:
                    33:bf:f3:92:a7:97:7c:71:fc:6e:46:19:13:2e:ac:
                    fb:f4:a8:89:73:1a:0d:cc:c4:61:83:56:96:f5:7d:
                    90:36:df:90:a3:d1:e3:a0:21:ee:60:26:1e:3b:3f:
                    e8:1e:3c:92:d9:5c:d1:1e:fb:90:f3:dc:03:5c:58:
                    d4:11:c7:c1:e4:51:b6:77:43:d9:98:7a:57:a7:99:
                    4a:c7:f6:34:99:61:10:87:15:75:d4:d1:cf:e9:e1:
                    92:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:4F:54:B6:95:22:09:C4:AF:0D:BD:01:D5:A8:FF:C5:7D:C0:B4:26
            X509v3 Authority Key Identifier:
                keyid:33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/vk9UtpUiCcSvDb0B1aj_xX3AtCY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.242.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         63:91:24:d4:04:24:6c:3e:f0:fd:35:df:86:b8:54:c0:ac:68:
         9a:9b:9d:b1:1a:4f:cc:7c:5d:1a:a9:a4:90:f5:7d:92:7f:41:
         6f:6e:75:e2:59:fe:1b:d4:5b:e2:c2:c4:ae:27:f5:97:0a:43:
         42:e8:bb:7f:26:5d:71:4d:39:f0:7e:5d:0e:75:b7:37:e5:ec:
         b5:ed:82:f5:09:41:34:02:14:f6:e8:3f:e2:8b:f4:29:c8:3d:
         b4:01:0e:e0:f2:17:e2:fa:0c:3e:b2:34:09:b7:98:4d:d0:38:
         aa:50:74:5b:f8:06:0c:08:50:a9:da:f5:cb:8f:07:4b:b3:37:
         02:45:41:70:d6:15:ed:7c:08:28:bf:03:3c:95:59:4d:d0:6d:
         a2:fc:f5:84:8e:7d:93:7a:4a:1a:91:1a:51:59:d9:f6:4f:87:
         43:74:50:61:0b:ac:5e:07:97:89:d6:4f:80:a0:ca:0d:53:1a:
         55:a4:04:6c:73:0b:72:e6:fe:e7:db:c4:4c:15:e3:04:4e:13:
         b2:c6:23:32:cf:3e:c2:4c:bc:f6:5f:c6:a2:a4:c7:f7:4a:c1:
         09:5d:2c:98:ce:ac:1e:88:61:b4:01:85:f6:6a:e5:d9:6a:61:
         52:c7:50:18:2f:9c:b1:45:c7:58:b5:0d:c4:b7:46:dd:a7:b2:
         28:23:61:04
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBBjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzM0RG
OUIyNEY1M0JCQ0FDMzQ3QkE1QjVBOEM0OUJGRjQxNjY2QTI2MB4XDTI0MDMwNzA2
NTgwMVoXDTI1MDIxNDAxMzAwM1owMzExMC8GA1UEAxMoQkU0RjU0QjY5NTIyMDlD
NEFGMERCRDAxRDVBOEZGQzU3REMwQjQyNjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAM7hvjtRUJw2XxF6axkpKamgv2n3ym0L4A7ZzOIjFPLvV9NV4D5z
QCno+LYr2WR6qU+A8ik+TKs6JgZA2er1HvhwmweS9aX3VY3G3vbPk5uLiRGLqEGb
qgDUl4hZziomXlmpo96QSjfb5aN6Vys7Ow/33IFo4mU8HNpebot49Ku6xlgAUiV2
t13n6Ws4COKRBbAS1rcp6yZIn/+mJ7oJ+3WPvxRNM7/zkqeXfHH8bkYZEy6s+/So
iXMaDczEYYNWlvV9kDbfkKPR46Ah7mAmHjs/6B48ktlc0R77kPPcA1xY1BHHweRR
tndD2Zh6V6eZSsf2NJlhEIcVddTRz+nhknECAwEAAaOCAigwggIkMB0GA1UdDgQW
BBS+T1S2lSIJxK8NvQHVqP/FfcC0JjAfBgNVHSMEGDAWgBQz35sk9Tu8rDR7pbWo
xJv/QWZqJjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTA4MjIvTTktYkpQVTd2S3cwZTZXMXFNU2JfMEZtYWlZLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvTTktYkpQVTd2S3cwZTZXMXFNU2Jf
MEZtYWlZLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzEwODIyL3ZrOVV0cFVpQ2NTdkRiMEIxYWpfeFgzQXRDWS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAUx8oAwDQYJKoZIhvcNAQELBQADggEBAGORJNQEJGw+8P0134a4VMCs
aJqbnbEaT8x8XRqppJD1fZJ/QW9udeJZ/hvUW+LCxK4n9ZcKQ0Lou38mXXFNOfB+
XQ51tzfl7LXtgvUJQTQCFPboP+KL9CnIPbQBDuDyF+L6DD6yNAm3mE3QOKpQdFv4
BgwIUKna9cuPB0uzNwJFQXDWFe18CCi/AzyVWU3QbaL89YSOfZN6ShqRGlFZ2fZP
h0N0UGELrF4Hl4nWT4Cgyg1TGlWkBGxzC3Lm/ufbxEwV4wROE7LGIzLPPsJMvPZf
xqKkx/dKwQldLJjOrB6IYbQBhfZq5dlqYVLHUBgvnLFFx1i1DcS3Rt2nsigjYQQ=
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:25 2024 by rpki-client on console-ams.rpki-client.org