Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/lvka0X-XZaYKByEXHq3p9tsAU20.roa
File:                     lvka0X-XZaYKByEXHq3p9tsAU20.roa (raw, json)
Hash identifier:          Ux5zabMG9AuqlpSnE2Hm+XkynUjbnTp9P6ilw30txs8=
Subject key identifier:   96:F9:1A:D1:7F:97:65:A6:0A:07:21:17:1E:AD:E9:F6:DB:00:53:6D
Certificate issuer:       /CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
Certificate serial:       66
Authority key identifier: EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/lvka0X-XZaYKByEXHq3p9tsAU20.roa
Signing time:             Fri 31 May 2024 01:31:09 +0000
ROA not before:           Fri 31 May 2024 01:31:09 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     0
IP address blocks:        103.10.112.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 20:13:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102 (0x66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFC15649A8257F64FC942167E310AD38AD02CDBC
        Validity
            Not Before: May 31 01:31:09 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=96F91AD17F9765A60A0721171EADE9F6DB00536D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d9:90:ff:36:7c:d2:95:11:ca:95:12:fa:e0:
                    5c:a8:c8:d3:4b:89:d8:1b:0c:c8:6d:94:ec:14:12:
                    b9:50:9f:7d:15:18:17:57:08:52:b2:6d:99:02:a5:
                    c7:40:5d:28:66:04:49:1e:69:b1:0e:b0:06:91:d1:
                    16:16:b6:03:2b:f2:a0:7c:cc:b5:25:b3:8c:c2:cd:
                    af:cb:da:b4:50:98:45:3b:3a:c2:a7:3a:89:3d:d7:
                    93:ea:46:e7:14:ff:07:23:69:ae:c1:5e:90:7c:59:
                    08:3d:12:cc:6d:44:64:89:32:31:43:cf:c2:03:7a:
                    21:93:a4:5e:c7:74:f6:55:e2:55:a5:48:d5:cf:d0:
                    58:b9:0d:9f:71:f6:33:d6:cd:16:e0:4b:00:d0:da:
                    1a:6e:41:19:94:11:6c:b3:d0:3a:03:c3:e4:45:15:
                    2f:e3:61:1f:8b:b1:8e:4b:6e:61:01:f4:27:41:9e:
                    40:c8:76:5e:1f:97:88:88:50:33:2f:df:ba:9e:c2:
                    0c:1f:ff:79:81:8c:e1:f2:8a:03:46:90:2f:ce:f3:
                    fa:60:e1:03:e3:b6:88:56:47:99:bb:b0:4b:72:98:
                    4c:93:71:1c:5d:1c:ae:97:8e:28:62:9f:c4:22:ab:
                    b3:14:76:c6:8e:93:fd:36:56:92:10:c6:4f:0c:70:
                    d7:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:F9:1A:D1:7F:97:65:A6:0A:07:21:17:1E:AD:E9:F6:DB:00:53:6D
            X509v3 Authority Key Identifier:
                keyid:EF:C1:56:49:A8:25:7F:64:FC:94:21:67:E3:10:AD:38:AD:02:CD:BC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/78FWSaglf2T8lCFn4xCtOK0Czbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/78FWSaglf2T8lCFn4xCtOK0Czbw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/lvka0X-XZaYKByEXHq3p9tsAU20.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.10.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:d5:56:15:81:64:a6:3d:27:a3:08:3c:9d:2a:8d:cd:e7:c9:
         2e:a1:15:42:3a:86:26:3f:69:6b:37:c4:a3:53:29:a2:af:4f:
         08:56:e4:3b:d8:62:3e:5c:f4:ca:95:62:cd:f3:ec:50:ce:8b:
         e0:9a:9b:39:37:ad:a1:32:13:6d:43:fb:92:f5:23:ca:ed:f2:
         c9:33:54:cb:cb:b1:76:a9:5c:61:a9:93:05:85:f7:9a:a7:04:
         1c:38:6d:51:2c:c8:e0:19:96:74:41:77:83:38:2d:4a:06:69:
         9a:4c:cb:3f:eb:76:4a:85:09:0b:74:d5:7a:ee:a0:59:85:83:
         3d:67:3d:2f:97:de:ee:60:e7:32:91:3c:f2:e2:ca:9a:20:07:
         51:70:1a:f0:e4:73:11:4c:8d:6c:03:9b:9f:86:79:cd:f1:a0:
         c6:7f:6b:33:85:b4:d5:58:b2:3a:c5:92:21:e9:a4:dc:ab:bd:
         59:7a:7b:eb:b9:0b:77:21:30:c5:a7:38:3c:69:77:f9:72:ab:
         b5:a7:23:63:95:38:5d:a2:e7:23:af:72:c2:84:52:79:3d:48:
         a3:ba:86:1e:2c:54:f0:6e:51:36:35:37:3f:39:f3:3d:9b:bc:
         68:7d:f1:bf:d4:8d:54:2e:6c:bd:79:59:9d:67:ed:d4:d7:fc:
         e6:de:68:a7
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBZjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFRkMx
NTY0OUE4MjU3RjY0RkM5NDIxNjdFMzEwQUQzOEFEMDJDREJDMB4XDTI0MDUzMTAx
MzEwOVoXDTI1MDUxNTAxMzAwM1owMzExMC8GA1UEAxMoOTZGOTFBRDE3Rjk3NjVB
NjBBMDcyMTE3MUVBREU5RjZEQjAwNTM2RDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALfZkP82fNKVEcqVEvrgXKjI00uJ2BsMyG2U7BQSuVCffRUYF1cI
UrJtmQKlx0BdKGYESR5psQ6wBpHRFha2AyvyoHzMtSWzjMLNr8vatFCYRTs6wqc6
iT3Xk+pG5xT/ByNprsFekHxZCD0SzG1EZIkyMUPPwgN6IZOkXsd09lXiVaVI1c/Q
WLkNn3H2M9bNFuBLANDaGm5BGZQRbLPQOgPD5EUVL+NhH4uxjktuYQH0J0GeQMh2
Xh+XiIhQMy/fup7CDB//eYGM4fKKA0aQL87z+mDhA+O2iFZHmbuwS3KYTJNxHF0c
rpeOKGKfxCKrsxR2xo6T/TZWkhDGTwxw10MCAwEAAaOCAigwggIkMB0GA1UdDgQW
BBSW+RrRf5dlpgoHIRceren22wBTbTAfBgNVHSMEGDAWgBTvwVZJqCV/ZPyUIWfj
EK04rQLNvDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTEyNDcvNzhGV1NhZ2xmMlQ4bENGbjR4Q3RPSzBDemJ3LmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvNzhGV1NhZ2xmMlQ4bENGbjR4Q3RP
SzBDemJ3LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzExMjQ3L2x2a2EwWC1YWmFZS0J5RVhIcTNwOXRzQVUyMC5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAJnCnAwDQYJKoZIhvcNAQELBQADggEBAErVVhWBZKY9J6MIPJ0qjc3n
yS6hFUI6hiY/aWs3xKNTKaKvTwhW5DvYYj5c9MqVYs3z7FDOi+Camzk3raEyE21D
+5L1I8rt8skzVMvLsXapXGGpkwWF95qnBBw4bVEsyOAZlnRBd4M4LUoGaZpMyz/r
dkqFCQt01XruoFmFgz1nPS+X3u5g5zKRPPLiypogB1FwGvDkcxFMjWwDm5+Gec3x
oMZ/azOFtNVYsjrFkiHppNyrvVl6e+u5C3chMMWnODxpd/lyq7WnI2OVOF2i5yOv
csKEUnk9SKO6hh4sVPBuUTY1Nz858z2bvGh98b/UjVQubL15WZ1n7dTX/ObeaKc=
-----END CERTIFICATE-----
Generated at Fri Nov 22 00:23:09 2024 by rpki-client on console-fra.rpki-client.org