Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/12/ULvjJlav04JZjWNvjDGKLErly3E.roa
File:                     ULvjJlav04JZjWNvjDGKLErly3E.roa (raw, json)
Hash identifier:          0g9YqjXLfRplNEDWbycZDM8b1RoYRxoLtt5cWDOvodc=
Subject key identifier:   50:BB:E3:26:56:AF:D3:82:59:8D:63:6F:8C:31:8A:2C:4A:E5:CB:71
Certificate issuer:       /CN=1589EECCC6718C652638CF4E92C60003C56FB697
Certificate serial:       4B
Authority key identifier: 15:89:EE:CC:C6:71:8C:65:26:38:CF:4E:92:C6:00:03:C5:6F:B6:97
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/ULvjJlav04JZjWNvjDGKLErly3E.roa
Signing time:             Thu 26 Sep 2024 23:58:13 +0000
ROA not before:           Thu 26 Sep 2024 23:58:13 +0000
ROA not after:            Mon 15 Sep 2025 01:30:03 +0000
asID:                     2907
IP address blocks:        202.231.0.0/18 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75 (0x4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1589EECCC6718C652638CF4E92C60003C56FB697
        Validity
            Not Before: Sep 26 23:58:13 2024 GMT
            Not After : Sep 15 01:30:03 2025 GMT
        Subject: CN=50BBE32656AFD382598D636F8C318A2C4AE5CB71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:67:4e:48:ff:f1:e1:98:66:8b:43:22:b5:58:
                    c1:07:85:57:17:f1:5b:b9:ef:7f:2c:20:95:ca:d8:
                    c3:1d:c5:36:c1:00:1a:60:87:7b:5e:a5:48:bd:a8:
                    de:69:df:29:dc:9e:67:a6:b5:88:12:f4:c7:fd:85:
                    f5:6b:42:0d:4f:d3:0b:96:74:97:9d:cd:e0:38:d7:
                    eb:d6:d0:93:f9:04:b1:b8:6a:df:2c:ec:90:fb:30:
                    a1:c9:13:7c:de:aa:69:79:b6:3c:79:38:88:19:60:
                    79:fb:40:d8:28:4e:9d:6b:19:fb:4b:43:de:5d:86:
                    d5:2a:1e:a8:b2:8f:0c:1b:50:df:be:83:96:74:fe:
                    87:70:3a:9d:8e:74:a2:a0:a0:36:10:d4:7b:f9:b4:
                    de:6d:5b:22:ce:59:98:03:c7:22:ef:9b:0a:59:df:
                    c2:21:da:ec:46:db:33:55:67:b6:f9:66:4a:2b:1b:
                    22:49:b2:d6:52:d3:29:41:1a:3e:3d:d2:0e:ac:fe:
                    35:ef:14:7b:e9:4e:ef:79:7d:be:f4:d7:74:0e:7d:
                    ce:9b:fa:fe:75:ae:07:46:33:8c:0a:92:0b:77:d4:
                    d3:a5:5a:fe:b4:05:a5:ee:fa:4e:c0:ff:b5:ab:11:
                    90:70:80:fe:9b:8c:fc:7b:5b:f1:93:c4:4e:03:97:
                    59:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:BB:E3:26:56:AF:D3:82:59:8D:63:6F:8C:31:8A:2C:4A:E5:CB:71
            X509v3 Authority Key Identifier:
                keyid:15:89:EE:CC:C6:71:8C:65:26:38:CF:4E:92:C6:00:03:C5:6F:B6:97

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/ULvjJlav04JZjWNvjDGKLErly3E.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.231.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         71:ab:9d:6b:43:20:b0:4d:a4:60:a5:c7:24:ed:22:25:ed:eb:
         ca:56:60:a0:09:f6:07:9b:c3:d9:81:a5:fb:68:d2:6c:34:7e:
         d8:b0:e2:0d:e8:58:38:c3:88:a2:af:37:95:82:4f:4f:47:1f:
         1e:11:53:d6:f7:c8:0d:2b:a1:25:09:2a:47:26:35:90:df:8a:
         4a:ae:dc:92:ab:34:61:f0:0b:27:0a:ee:28:7b:e2:59:83:08:
         8a:5d:1b:3a:8d:0d:0c:dd:33:67:e9:fa:2a:05:bc:ed:85:d8:
         f7:da:74:39:d3:b4:98:83:f2:8f:33:66:45:f3:c7:d6:f1:8b:
         35:3a:df:b9:ef:53:0f:4b:f2:cd:7e:e6:81:d0:df:bc:ce:79:
         b2:fd:b6:5a:e9:c7:bd:9f:b3:82:1e:be:5f:24:19:d7:71:6e:
         f1:48:dd:e7:67:9e:68:b1:33:c5:c2:f7:3c:08:f8:8c:de:6c:
         7d:89:b4:c2:a2:f2:e6:65:4b:f1:34:6f:9a:31:68:7f:81:95:
         8f:eb:76:b8:5c:5e:3d:63:64:d0:34:ed:94:f9:d0:d9:90:48:
         1d:e5:a2:ee:95:c0:cf:d7:02:b9:38:81:0a:85:34:5d:51:54:
         a7:ae:62:15:c5:82:c8:b7:63:ed:db:1a:52:43:91:d0:37:6a:
         39:c5:ad:6d
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIBSzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxNTg5
RUVDQ0M2NzE4QzY1MjYzOENGNEU5MkM2MDAwM0M1NkZCNjk3MB4XDTI0MDkyNjIz
NTgxM1oXDTI1MDkxNTAxMzAwM1owMzExMC8GA1UEAxMoNTBCQkUzMjY1NkFGRDM4
MjU5OEQ2MzZGOEMzMThBMkM0QUU1Q0I3MTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALJnTkj/8eGYZotDIrVYwQeFVxfxW7nvfywglcrYwx3FNsEAGmCH
e16lSL2o3mnfKdyeZ6a1iBL0x/2F9WtCDU/TC5Z0l53N4DjX69bQk/kEsbhq3yzs
kPswockTfN6qaXm2PHk4iBlgeftA2ChOnWsZ+0tD3l2G1SoeqLKPDBtQ376DlnT+
h3A6nY50oqCgNhDUe/m03m1bIs5ZmAPHIu+bClnfwiHa7EbbM1VntvlmSisbIkmy
1lLTKUEaPj3SDqz+Ne8Ue+lO73l9vvTXdA59zpv6/nWuB0YzjAqSC3fU06Va/rQF
pe76TsD/tasRkHCA/puM/Htb8ZPETgOXWcUCAwEAAaOCAiIwggIeMB0GA1UdDgQW
BBRQu+MmVq/TglmNY2+MMYosSuXLcTAfBgNVHSMEGDAWgBQVie7MxnGMZSY4z06S
xgADxW+2lzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY
oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTIvRlludXpNWnhqR1VtT005T2tzWUFBOFZ2dHBjLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvRlludXpNWnhqR1VtT005T2tzWUFBOFZ2
dHBjLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgboGCCsGAQUFBwELBIGtMIGqMGAGCCsG
AQUFBzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzEyL1VMdmpKbGF2MDRKWmpXTnZqREdLTEVybHkzRS5yb2EwRgYI
KwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRw
L2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAbK5wAwDQYJKoZIhvcNAQELBQADggEBAHGrnWtDILBNpGClxyTtIiXt68pWYKAJ
9gebw9mBpfto0mw0ftiw4g3oWDjDiKKvN5WCT09HHx4RU9b3yA0roSUJKkcmNZDf
ikqu3JKrNGHwCycK7ih74lmDCIpdGzqNDQzdM2fp+ioFvO2F2PfadDnTtJiD8o8z
ZkXzx9bxizU637nvUw9L8s1+5oHQ37zOebL9tlrpx72fs4Ievl8kGddxbvFI3edn
nmixM8XC9zwI+IzebH2JtMKi8uZlS/E0b5oxaH+BlY/rdrhcXj1jZNA07ZT50NmQ
SB3lou6VwM/XArk4gQqFNF1RVKeuYhXFgsi3Y+3bGlJDkdA3ajnFrW0=
-----END CERTIFICATE-----
Generated at Fri Nov 22 15:23:55 2024 by rpki-client on console-fra.rpki-client.org