Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1250/5cPCEe-WYKoMzJnUEDuwkBKkq1c.roa
File:                     5cPCEe-WYKoMzJnUEDuwkBKkq1c.roa (raw, json)
Hash identifier:          aNGtKwAiah14GExas1KcAqkc+CzR10twy4h3331zr50=
Subject key identifier:   E5:C3:C2:11:EF:96:60:AA:0C:CC:99:D4:10:3B:B0:90:12:A4:AB:57
Certificate issuer:       /CN=FEE7DD96E49322460E0A010EC8D983EDA2F254C5
Certificate serial:       1C
Authority key identifier: FE:E7:DD:96:E4:93:22:46:0E:0A:01:0E:C8:D9:83:ED:A2:F2:54:C5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_ufdluSTIkYOCgEOyNmD7aLyVMU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1250/5cPCEe-WYKoMzJnUEDuwkBKkq1c.roa
Signing time:             Sat 31 Aug 2024 01:33:50 +0000
ROA not before:           Sat 31 Aug 2024 01:33:50 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     0
IP address blocks:        202.242.132.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1250/_ufdluSTIkYOCgEOyNmD7aLyVMU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1250/_ufdluSTIkYOCgEOyNmD7aLyVMU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_ufdluSTIkYOCgEOyNmD7aLyVMU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Oct 2024 13:49:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28 (0x1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEE7DD96E49322460E0A010EC8D983EDA2F254C5
        Validity
            Not Before: Aug 31 01:33:50 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=E5C3C211EF9660AA0CCC99D4103BB09012A4AB57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:17:e5:69:70:ae:3e:45:cd:35:88:74:1f:30:
                    68:ac:d5:4f:de:f5:22:76:90:70:94:ae:a2:6e:a6:
                    55:1f:a6:7a:bb:7f:0c:e6:3a:c3:a3:4a:29:d4:0b:
                    9a:f6:4b:45:32:0f:fe:ef:77:3e:77:46:06:bc:4f:
                    56:b8:f1:a5:38:22:2e:dc:e8:5c:14:c3:63:41:d4:
                    ca:58:76:f9:8f:a4:b3:6b:d0:43:b1:ce:03:77:e2:
                    aa:f8:b5:bf:80:bc:71:0b:25:0d:31:b3:9a:d3:a2:
                    b3:81:6f:59:a6:22:85:d8:8a:9f:3a:56:58:cc:ea:
                    df:ee:04:72:5d:90:f4:e9:b7:00:69:7b:bb:40:4d:
                    fd:a0:cb:c5:05:0b:f8:b1:ce:0f:24:f8:ab:56:8d:
                    f8:84:54:70:1a:e3:e4:5a:e1:11:69:5d:73:59:b7:
                    b9:13:66:cb:a1:f6:e8:69:44:80:c1:ab:bf:20:26:
                    12:b3:11:5d:bc:4d:7f:d2:e1:c2:5c:2a:16:48:35:
                    b2:fe:06:2a:6c:4a:70:a8:a8:3e:c3:1a:44:fc:e0:
                    8b:0f:69:72:58:ee:49:a6:27:42:6c:ae:c1:72:f5:
                    93:b3:ad:42:ed:46:12:27:7b:1b:d5:b5:2b:c7:c3:
                    f8:ad:6a:bb:5d:d5:e7:e3:d3:48:da:aa:53:9b:80:
                    bb:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:C3:C2:11:EF:96:60:AA:0C:CC:99:D4:10:3B:B0:90:12:A4:AB:57
            X509v3 Authority Key Identifier:
                keyid:FE:E7:DD:96:E4:93:22:46:0E:0A:01:0E:C8:D9:83:ED:A2:F2:54:C5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1250/_ufdluSTIkYOCgEOyNmD7aLyVMU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_ufdluSTIkYOCgEOyNmD7aLyVMU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1250/5cPCEe-WYKoMzJnUEDuwkBKkq1c.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.242.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ba:73:ac:6a:e0:4a:65:e9:a1:d2:61:8b:db:00:36:6a:67:cd:
         42:ff:06:b3:04:50:a2:85:a4:86:c5:c4:df:b7:05:ae:fd:d0:
         3d:9f:a8:12:99:91:79:08:0e:d8:15:a8:b9:b3:8e:04:ed:2a:
         c9:47:dd:07:82:46:88:05:69:fe:f2:f4:23:28:52:cb:81:3a:
         9d:d2:87:49:63:0e:06:40:1e:dc:d7:41:1a:ab:3c:55:40:28:
         f1:48:03:11:ae:e9:30:d2:73:57:a5:72:36:2c:f5:2d:84:b4:
         e9:d9:e1:31:4a:fa:3a:4a:cc:67:0f:81:aa:62:d7:27:4b:82:
         92:46:79:21:2e:4e:86:e4:c6:54:c0:ac:a4:1d:d3:ac:ac:06:
         a6:6d:93:c3:ad:67:7a:43:ab:59:dd:7e:52:4f:c9:bb:cd:fd:
         9a:78:04:64:35:e5:2d:54:fa:90:01:64:d9:36:30:c4:a8:b5:
         06:8e:4d:c5:54:ca:ef:e0:b0:75:18:45:e6:75:8a:ac:d2:8b:
         ad:aa:f0:3c:43:39:f3:f1:53:a8:82:12:7d:c3:c8:59:23:8f:
         53:1f:b2:8f:b3:61:56:f5:6e:0e:c2:0c:c3:71:31:a8:99:2f:
         fa:55:dd:41:70:50:de:89:01:95:81:78:f2:c5:c8:fe:22:ac:
         48:5e:65:2e
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgIBHDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGRUU3
REQ5NkU0OTMyMjQ2MEUwQTAxMEVDOEQ5ODNFREEyRjI1NEM1MB4XDTI0MDgzMTAx
MzM1MFoXDTI1MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoRTVDM0MyMTFFRjk2NjBB
QTBDQ0M5OUQ0MTAzQkIwOTAxMkE0QUI1NzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANMX5Wlwrj5FzTWIdB8waKzVT971InaQcJSuom6mVR+mert/DOY6
w6NKKdQLmvZLRTIP/u93PndGBrxPVrjxpTgiLtzoXBTDY0HUylh2+Y+ks2vQQ7HO
A3fiqvi1v4C8cQslDTGzmtOis4FvWaYihdiKnzpWWMzq3+4Ecl2Q9Om3AGl7u0BN
/aDLxQUL+LHODyT4q1aN+IRUcBrj5FrhEWldc1m3uRNmy6H26GlEgMGrvyAmErMR
XbxNf9LhwlwqFkg1sv4GKmxKcKioPsMaRPzgiw9pcljuSaYnQmyuwXL1k7OtQu1G
Eid7G9W1K8fD+K1qu13V5+PTSNqqU5uAuykCAwEAAaOCAiYwggIiMB0GA1UdDgQW
BBTlw8IR75ZgqgzMmdQQO7CQEqSrVzAfBgNVHSMEGDAWgBT+592W5JMiRg4KAQ7I
2YPtovJUxTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa
oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTI1MC9fdWZkbHVTVElrWU9DZ0VPeU5tRDdhTHlWTVUuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9fdWZkbHVTVElrWU9DZ0VPeU5tRDdh
THlWTVUuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI
KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTI1MC81Y1BDRWUtV1lLb016Sm5VRUR1d2tCS2txMWMucm9h
MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv
cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA
ATAGAwQCyvKEMA0GCSqGSIb3DQEBCwUAA4IBAQC6c6xq4Epl6aHSYYvbADZqZ81C
/wazBFCihaSGxcTftwWu/dA9n6gSmZF5CA7YFai5s44E7SrJR90HgkaIBWn+8vQj
KFLLgTqd0odJYw4GQB7c10EaqzxVQCjxSAMRrukw0nNXpXI2LPUthLTp2eExSvo6
SsxnD4GqYtcnS4KSRnkhLk6G5MZUwKykHdOsrAambZPDrWd6Q6tZ3X5ST8m7zf2a
eARkNeUtVPqQAWTZNjDEqLUGjk3FVMrv4LB1GEXmdYqs0outqvA8Qznz8VOoghJ9
w8hZI49TH7KPs2FW9W4OwgzDcTGomS/6Vd1BcFDeiQGVgXjyxcj+IqxIXmUu
-----END CERTIFICATE-----
Generated at Tue Oct 22 15:30:28 2024 by rpki-client on console-ams.rpki-client.org