Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/HyYjKiyGDFdiwD6K1M61kh-Vo2I.roa
File:                     HyYjKiyGDFdiwD6K1M61kh-Vo2I.roa (raw, json)
Hash identifier:          Od0VU90iowAGJSQa+5EqhGEuusm0rnt7qZDjyjgT9T8=
Subject key identifier:   1F:26:23:2A:2C:86:0C:57:62:C0:3E:8A:D4:CE:B5:92:1F:95:A3:62
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       01DE
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/HyYjKiyGDFdiwD6K1M61kh-Vo2I.roa
Signing time:             Fri 31 May 2024 01:30:57 +0000
ROA not before:           Fri 31 May 2024 01:30:57 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     4713
IP address blocks:        218.44.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 478 (0x1de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: May 31 01:30:57 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=1F26232A2C860C5762C03E8AD4CEB5921F95A362
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d6:04:ba:0f:2c:1a:3b:68:29:c5:ea:fc:5b:
                    3f:08:d3:8d:79:bc:51:c0:af:cf:10:75:47:a3:3d:
                    a1:e9:14:28:10:cd:06:16:04:3c:c3:a5:a4:2f:68:
                    5c:97:cb:81:14:a4:2e:cd:8e:0b:3c:51:fc:c9:b8:
                    8d:ca:25:eb:26:a7:43:53:a9:aa:4b:c9:09:53:33:
                    df:77:51:35:14:4e:6b:8e:61:38:12:0a:5a:34:fa:
                    38:f2:2f:16:d1:e1:b4:d1:c5:b3:4f:98:2d:50:7a:
                    3f:ef:4e:b3:69:29:61:63:ff:4e:b3:64:ea:6e:32:
                    b8:12:c6:80:3d:26:65:c8:98:90:e5:7c:c2:25:4d:
                    91:b0:2e:c4:81:5b:bd:c5:8d:3c:5d:b5:31:ae:9c:
                    b1:00:45:2d:24:fd:05:5e:f6:52:87:cf:ac:00:90:
                    28:b5:0e:b1:98:c5:98:10:53:af:e8:9f:1f:6c:f4:
                    5b:6a:6a:94:9d:36:d9:fc:cc:eb:32:f5:d0:12:13:
                    6e:d2:3c:db:64:a6:08:4d:01:fa:99:aa:4f:80:02:
                    bc:3c:c5:7c:fc:e5:7c:0a:10:c4:fe:e3:2e:6c:3a:
                    79:8d:0f:0c:8c:30:52:0c:bd:ce:a1:ec:0c:b0:63:
                    af:38:e9:94:aa:ec:dd:87:3f:1a:c1:ef:b4:10:93:
                    43:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:26:23:2A:2C:86:0C:57:62:C0:3E:8A:D4:CE:B5:92:1F:95:A3:62
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/HyYjKiyGDFdiwD6K1M61kh-Vo2I.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.44.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         bb:99:a2:db:aa:2a:8b:4f:39:9f:9e:66:30:2b:31:ac:b0:e5:
         44:d0:e9:20:b9:82:99:f3:7c:b1:f0:a6:4f:f0:88:db:3b:57:
         39:dc:96:cd:01:5d:16:23:04:cf:c7:7d:e1:d2:6d:28:ef:6a:
         7b:48:fe:2f:2c:7f:80:f6:ee:4d:d1:0a:b9:cd:18:81:c7:41:
         a1:b8:dd:46:c6:9d:23:a5:99:d3:e9:5e:ed:c3:32:48:84:66:
         bb:58:28:66:c7:7a:be:49:86:71:7a:cb:92:3a:ce:8b:92:66:
         d2:80:8b:9d:27:2b:23:2c:bb:12:cd:d7:e1:4f:56:08:58:df:
         98:e4:90:8b:d6:16:e8:51:b2:0d:87:96:8b:c2:3e:d8:2b:57:
         06:b3:72:ab:67:f5:b5:bb:45:6e:ce:f4:7e:71:35:73:7b:5b:
         9f:d9:5f:34:f7:fd:9c:d9:f8:2c:37:24:f4:1d:6f:71:dd:ec:
         70:29:e7:c9:56:be:29:46:73:26:30:28:67:62:e2:4d:6b:87:
         1b:e2:e4:69:42:77:f3:25:d4:b8:d0:93:fb:0a:f2:92:66:2a:
         73:0e:e6:53:ee:23:3b:1c:fd:42:04:d7:c3:c8:15:32:d5:a8:
         9b:83:ba:38:bd:dc:06:22:84:4b:93:c0:44:6f:fe:a6:69:74:
         53:89:bb:04
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICAd4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD
MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yNDA1MzEw
MTMwNTdaFw0yNTA1MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDFGMjYyMzJBMkM4NjBD
NTc2MkMwM0U4QUQ0Q0VCNTkyMUY5NUEzNjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDY1gS6DywaO2gpxer8Wz8I0415vFHAr88QdUejPaHpFCgQzQYW
BDzDpaQvaFyXy4EUpC7Njgs8UfzJuI3KJesmp0NTqapLyQlTM993UTUUTmuOYTgS
Clo0+jjyLxbR4bTRxbNPmC1Qej/vTrNpKWFj/06zZOpuMrgSxoA9JmXImJDlfMIl
TZGwLsSBW73FjTxdtTGunLEARS0k/QVe9lKHz6wAkCi1DrGYxZgQU6/onx9s9Ftq
apSdNtn8zOsy9dASE27SPNtkpghNAfqZqk+AArw8xXz85XwKEMT+4y5sOnmNDwyM
MFIMvc6h7AywY6846ZSq7N2HPxrB77QQk0NVAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQUHyYjKiyGDFdiwD6K1M61kh+Vo2IwHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ
hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5
RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTMxL0h5WWpLaXlHREZkaXdENksxTTYxa2gtVm8ySS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwDaLDANBgkqhkiG9w0BAQsFAAOCAQEAu5mi26oqi085n55mMCsxrLDlRNDp
ILmCmfN8sfCmT/CI2ztXOdyWzQFdFiMEz8d94dJtKO9qe0j+Lyx/gPbuTdEKuc0Y
gcdBobjdRsadI6WZ0+le7cMySIRmu1goZsd6vkmGcXrLkjrOi5Jm0oCLnScrIyy7
Es3X4U9WCFjfmOSQi9YW6FGyDYeWi8I+2CtXBrNyq2f1tbtFbs70fnE1c3tbn9lf
NPf9nNn4LDck9B1vcd3scCnnyVa+KUZzJjAoZ2LiTWuHG+LkaUJ38yXUuNCT+wry
kmYqcw7mU+4jOxz9QgTXw8gVMtWom4O6OL3cBiKES5PARG/+pml0U4m7BA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:25 2024 by rpki-client on console-ams.rpki-client.org