Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/-9iu1ELQ4Vj7TAMAhrKoGg3FrUk.roa
File:                     -9iu1ELQ4Vj7TAMAhrKoGg3FrUk.roa (raw, json)
Hash identifier:          0pQA9gjYq6mFEv3/CRHPDIY9+Z7H77Sr8zCgX8g/jvQ=
Subject key identifier:   FB:D8:AE:D4:42:D0:E1:58:FB:4C:03:00:86:B2:A8:1A:0D:C5:AD:49
Certificate issuer:       /CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
Certificate serial:       4A
Authority key identifier: EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/-9iu1ELQ4Vj7TAMAhrKoGg3FrUk.roa
Signing time:             Sat 01 Jul 2023 01:31:02 +0000
ROA not before:           Sat 01 Jul 2023 01:31:02 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     7684
IP address blocks:        153.127.0.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 01:32:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74 (0x4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
        Validity
            Not Before: Jul  1 01:31:02 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=FBD8AED442D0E158FB4C030086B2A81A0DC5AD49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8e:32:76:a7:b4:3c:91:1c:f9:82:81:7e:90:
                    b6:4e:8d:8d:af:0e:12:d4:a9:83:69:46:87:24:91:
                    a7:12:a9:dc:36:76:46:c6:72:7f:97:71:3c:b7:2f:
                    5f:2e:18:43:f2:d9:3b:a3:4e:e3:36:46:1a:a1:52:
                    3d:92:ae:ac:61:7a:d7:a4:fa:0b:64:a1:99:ae:e0:
                    91:59:28:fb:7c:4f:37:d8:45:36:81:1e:b2:d2:06:
                    d1:a8:0e:73:cf:f0:68:5a:21:e7:9b:4a:4d:56:d5:
                    f0:71:b1:0f:cb:e8:fd:ca:75:53:73:f8:e7:8e:bf:
                    81:8b:ad:b5:a3:27:76:e5:29:28:69:e8:5c:f1:a5:
                    11:1e:1e:a4:a9:92:86:2a:f6:ae:20:62:ca:06:5d:
                    8d:20:fa:75:99:d7:d7:32:5a:14:b6:d8:af:6c:4c:
                    9a:76:2a:bf:06:66:da:3b:a2:c1:37:0f:71:9f:ae:
                    59:5b:a4:f2:21:e9:29:f1:37:98:56:63:f9:9d:58:
                    91:2d:e2:5f:6a:97:14:cc:37:61:53:e8:b5:0a:b7:
                    31:ef:c7:7a:95:45:10:92:1a:87:81:63:1f:c9:22:
                    66:2a:54:47:0a:36:54:23:75:90:c6:bb:08:3f:c3:
                    9a:bb:5c:cb:10:c0:de:84:0c:3a:ea:4c:97:80:2a:
                    b4:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:D8:AE:D4:42:D0:E1:58:FB:4C:03:00:86:B2:A8:1A:0D:C5:AD:49
            X509v3 Authority Key Identifier:
                keyid:EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/-9iu1ELQ4Vj7TAMAhrKoGg3FrUk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.127.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         5b:1b:b6:d7:76:69:3f:0c:9c:07:11:9a:b7:a2:64:59:95:39:
         5c:e0:ab:ff:36:e9:7f:3a:0e:66:c5:49:02:16:ce:3c:59:9d:
         91:f6:de:63:7b:e6:86:a1:5b:40:da:37:fb:df:de:13:3a:a7:
         4f:2e:d3:01:00:81:ca:a6:5e:93:8d:93:22:34:35:2f:2a:5f:
         da:f3:5b:1f:c4:52:a2:4b:e4:2b:c4:08:9c:72:28:8d:34:bf:
         b9:c4:d9:d3:83:ee:3f:b4:1a:2d:33:d5:92:5b:ef:69:a6:8a:
         b4:17:4c:46:7a:94:89:a8:1a:93:8a:9d:62:83:42:ad:ca:6d:
         be:1e:8e:60:86:fb:23:1f:88:1c:36:9f:ac:41:36:b2:92:d8:
         cd:98:0e:0f:62:3c:f8:d2:7c:dc:18:c3:06:40:8f:3f:9e:0d:
         3c:39:85:32:bc:69:0a:31:f9:a3:6e:be:3f:8e:52:7d:91:78:
         c9:21:a1:01:44:89:e2:22:a9:7a:05:f2:8d:7e:5a:ba:5f:63:
         62:17:4e:1c:a2:cb:3d:30:f2:99:7a:41:d4:00:5e:56:b9:5c:
         48:64:d6:c9:54:23:79:0c:9b:4c:7e:d6:20:e9:85:2d:3d:d7:
         78:ee:39:be:ae:ad:c6:5c:87:0e:e0:c0:5e:fe:d7:86:dc:6a:
         6f:43:74:d0
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBSjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFRkMx
NTY0OUE4MjU3RjY0RkM5NDIxNjdFMzEwQUQzOEFEMDJDREJDMB4XDTIzMDcwMTAx
MzEwMloXDTI0MDYxNDAxMzAwMlowMzExMC8GA1UEAxMoRkJEOEFFRDQ0MkQwRTE1
OEZCNEMwMzAwODZCMkE4MUEwREM1QUQ0OTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALWOMnantDyRHPmCgX6Qtk6Nja8OEtSpg2lGhySRpxKp3DZ2RsZy
f5dxPLcvXy4YQ/LZO6NO4zZGGqFSPZKurGF616T6C2Shma7gkVko+3xPN9hFNoEe
stIG0agOc8/waFoh55tKTVbV8HGxD8vo/cp1U3P4546/gYuttaMnduUpKGnoXPGl
ER4epKmShir2riBiygZdjSD6dZnX1zJaFLbYr2xMmnYqvwZm2juiwTcPcZ+uWVuk
8iHpKfE3mFZj+Z1YkS3iX2qXFMw3YVPotQq3Me/HepVFEJIah4FjH8kiZipURwo2
VCN1kMa7CD/DmrtcyxDA3oQMOupMl4AqtGMCAwEAAaOCAigwggIkMB0GA1UdDgQW
BBT72K7UQtDhWPtMAwCGsqgaDcWtSTAfBgNVHSMEGDAWgBTvwVZJqCV/ZPyUIWfj
EK04rQLNvDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTEyNDcvNzhGV1NhZ2xmMlQ4bENGbjR4Q3RPSzBDemJ3LmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvNzhGV1NhZ2xmMlQ4bENGbjR4Q3RP
SzBDemJ3LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzExMjQ3Ly05aXUxRUxRNFZqN1RBTUFocktvR2czRnJVay5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAeZfwAwDQYJKoZIhvcNAQELBQADggEBAFsbttd2aT8MnAcRmreiZFmV
OVzgq/826X86DmbFSQIWzjxZnZH23mN75oahW0DaN/vf3hM6p08u0wEAgcqmXpON
kyI0NS8qX9rzWx/EUqJL5CvECJxyKI00v7nE2dOD7j+0Gi0z1ZJb72mmirQXTEZ6
lImoGpOKnWKDQq3Kbb4ejmCG+yMfiBw2n6xBNrKS2M2YDg9iPPjSfNwYwwZAjz+e
DTw5hTK8aQox+aNuvj+OUn2ReMkhoQFEieIiqXoF8o1+WrpfY2IXThyiyz0w8pl6
QdQAXla5XEhk1slUI3kMm0x+1iDphS0913juOb6urcZchw7gwF7+14bcam9DdNA=
-----END CERTIFICATE-----
Generated at Mon May 20 02:36:25 2024 by rpki-client on console-ams.rpki-client.org