Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1091/VS6Dyh2blpj35aYjCGLrljr4Q6E.roa
File:                     VS6Dyh2blpj35aYjCGLrljr4Q6E.roa (raw, json)
Hash identifier:          Xa1wCryL5pGUz40/Q/4Yvy2AsNOlEslmigjawYuNWgs=
Subject key identifier:   55:2E:83:CA:1D:9B:96:98:F7:E5:A6:23:08:62:EB:96:3A:F8:43:A1
Certificate issuer:       /CN=8C86E32ECE9A3C850FEBEA69641F3544273D5371
Certificate serial:       06
Authority key identifier: 8C:86:E3:2E:CE:9A:3C:85:0F:EB:EA:69:64:1F:35:44:27:3D:53:71
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jIbjLs6aPIUP6-ppZB81RCc9U3E.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1091/VS6Dyh2blpj35aYjCGLrljr4Q6E.roa
Signing time:             Tue 22 Oct 2024 09:13:40 +0000
ROA not before:           Tue 22 Oct 2024 09:13:40 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     14618
IP address blocks:        138.101.22.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1091/jIbjLs6aPIUP6-ppZB81RCc9U3E.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1091/jIbjLs6aPIUP6-ppZB81RCc9U3E.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jIbjLs6aPIUP6-ppZB81RCc9U3E.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Oct 2024 22:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C86E32ECE9A3C850FEBEA69641F3544273D5371
        Validity
            Not Before: Oct 22 09:13:40 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=552E83CA1D9B9698F7E5A6230862EB963AF843A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0b:56:48:31:ab:71:8a:2f:8f:ca:28:ee:fa:
                    e6:37:19:52:f3:0d:4b:ef:b6:75:b3:08:b3:a8:08:
                    b7:89:6b:93:4b:c4:e6:2b:92:94:69:09:71:b0:f6:
                    93:2f:5a:8b:ff:27:65:d3:f5:94:d3:66:71:24:a0:
                    2a:8b:69:03:cb:aa:3c:01:25:04:6d:28:d0:fa:5f:
                    cf:7d:91:1c:a1:4b:88:31:59:a7:9d:c3:ad:5a:af:
                    55:35:50:66:4c:c0:8d:e9:93:9e:49:50:59:07:d6:
                    02:18:c5:4a:e1:5d:da:43:04:be:b4:6c:df:4b:88:
                    bd:ef:e4:3c:41:72:bb:a3:8b:f7:86:fc:ba:15:af:
                    ad:5d:c2:aa:00:f7:50:c1:86:48:92:c6:b0:c4:42:
                    13:34:cf:c2:5c:7e:02:ff:35:b5:6e:6f:6a:17:75:
                    40:98:86:75:62:a2:fd:98:39:f4:5a:24:82:6e:50:
                    3c:f1:8a:94:54:14:ab:3a:7b:8f:7b:ec:67:89:b8:
                    a1:9e:00:09:99:c6:a0:1b:7e:2a:f2:a1:87:10:b5:
                    3a:ac:85:08:25:cf:56:f2:7c:3d:9d:9a:10:e1:cb:
                    de:ba:33:43:dd:73:bb:8f:56:f8:ec:a2:6c:bb:da:
                    63:7b:a9:f1:c4:ef:35:55:f5:1a:ca:b9:bc:ef:2b:
                    d9:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:2E:83:CA:1D:9B:96:98:F7:E5:A6:23:08:62:EB:96:3A:F8:43:A1
            X509v3 Authority Key Identifier:
                keyid:8C:86:E3:2E:CE:9A:3C:85:0F:EB:EA:69:64:1F:35:44:27:3D:53:71

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1091/jIbjLs6aPIUP6-ppZB81RCc9U3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jIbjLs6aPIUP6-ppZB81RCc9U3E.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1091/VS6Dyh2blpj35aYjCGLrljr4Q6E.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.101.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0a:f8:bb:a8:ca:89:7b:77:f4:81:da:66:86:db:17:a1:88:c3:
         9a:04:ea:d0:6c:d7:7c:05:04:3d:cd:ac:b3:69:37:55:c9:ed:
         c2:95:86:ca:d1:41:db:5a:7e:43:51:75:14:57:7f:4e:d8:bf:
         0a:ee:c1:04:86:10:96:6e:ce:13:06:57:92:97:98:51:aa:36:
         f5:84:f0:a9:cc:0f:9a:02:5c:e0:bb:d2:84:d1:7c:a8:a3:af:
         04:2b:89:c1:39:a4:e3:31:20:5e:bf:e0:8c:6b:69:6c:b8:2f:
         14:9f:9a:77:0c:fc:b3:63:4d:70:43:6b:03:47:f0:06:65:4b:
         38:b4:db:1c:93:9f:9d:6a:fd:2b:ef:d9:29:f3:ae:cc:49:2d:
         ef:34:6c:1a:a4:61:01:08:11:09:80:f8:3b:d1:84:48:70:58:
         b8:32:40:ac:c3:0c:74:84:26:f9:08:8d:7b:0d:9c:ac:63:ba:
         28:1c:d0:4c:93:32:16:8d:1b:34:80:50:13:73:4e:a6:03:7f:
         5e:93:21:ba:11:f4:9b:cd:6a:0a:32:c1:7e:e6:66:84:f9:87:
         7e:da:79:cf:06:2c:98:3c:df:ea:8d:03:0b:2c:82:0a:39:1d:
         43:38:90:7c:ee:95:e5:2b:e6:88:d7:16:ff:c7:d6:3a:f5:79:
         50:46:37:03
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgIBBjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4Qzg2
RTMyRUNFOUEzQzg1MEZFQkVBNjk2NDFGMzU0NDI3M0Q1MzcxMB4XDTI0MTAyMjA5
MTM0MFoXDTI1MTAxNTAxMzAwMlowMzExMC8GA1UEAxMoNTUyRTgzQ0ExRDlCOTY5
OEY3RTVBNjIzMDg2MkVCOTYzQUY4NDNBMTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALYLVkgxq3GKL4/KKO765jcZUvMNS++2dbMIs6gIt4lrk0vE5iuS
lGkJcbD2ky9ai/8nZdP1lNNmcSSgKotpA8uqPAElBG0o0Ppfz32RHKFLiDFZp53D
rVqvVTVQZkzAjemTnklQWQfWAhjFSuFd2kMEvrRs30uIve/kPEFyu6OL94b8uhWv
rV3CqgD3UMGGSJLGsMRCEzTPwlx+Av81tW5vahd1QJiGdWKi/Zg59Fokgm5QPPGK
lFQUqzp7j3vsZ4m4oZ4ACZnGoBt+KvKhhxC1OqyFCCXPVvJ8PZ2aEOHL3rozQ91z
u49W+OyibLvaY3up8cTvNVX1Gsq5vO8r2VUCAwEAAaOCAiYwggIiMB0GA1UdDgQW
BBRVLoPKHZuWmPflpiMIYuuWOvhDoTAfBgNVHSMEGDAWgBSMhuMuzpo8hQ/r6mlk
HzVEJz1TcTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa
oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTA5MS9qSWJqTHM2YVBJVVA2LXBwWkI4MVJDYzlVM0UuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9qSWJqTHM2YVBJVVA2LXBwWkI4MVJD
YzlVM0UuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI
KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTA5MS9WUzZEeWgyYmxwajM1YVlqQ0dMcmxqcjRRNkUucm9h
MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv
cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA
ATAGAwQBimUWMA0GCSqGSIb3DQEBCwUAA4IBAQAK+Luoyol7d/SB2maG2xehiMOa
BOrQbNd8BQQ9zayzaTdVye3ClYbK0UHbWn5DUXUUV39O2L8K7sEEhhCWbs4TBleS
l5hRqjb1hPCpzA+aAlzgu9KE0Xyoo68EK4nBOaTjMSBev+CMa2lsuC8Un5p3DPyz
Y01wQ2sDR/AGZUs4tNsck5+dav0r79kp867MSS3vNGwapGEBCBEJgPg70YRIcFi4
MkCswwx0hCb5CI17DZysY7ooHNBMkzIWjRs0gFATc06mA39ekyG6EfSbzWoKMsF+
5maE+Yd+2nnPBiyYPN/qjQMLLIIKOR1DOJB87pXlK+aI1xb/x9Y69XlQRjcD
-----END CERTIFICATE-----
Generated at Tue Oct 22 10:17:59 2024 by rpki-client on console-ams.rpki-client.org