Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/Rh7vuUVw2JPY0gUCqSpSq-11Xvk.roa
File:                     Rh7vuUVw2JPY0gUCqSpSq-11Xvk.roa (raw, json)
Hash identifier:          HXneqZJqsFGqz/G7ZQgB5exgzu4rHJzLvn+1wHkfXCI=
Subject key identifier:   46:1E:EF:B9:45:70:D8:93:D8:D2:05:02:A9:2A:52:AB:ED:75:5E:F9
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       01B5
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/Rh7vuUVw2JPY0gUCqSpSq-11Xvk.roa
Signing time:             Sun 31 Mar 2024 01:29:09 +0000
ROA not before:           Sun 31 Mar 2024 01:29:09 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     4713
IP address blocks:        123.216.0.0/13 maxlen: 13

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 20 Jun 2024 16:34:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 437 (0x1b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Mar 31 01:29:09 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=461EEFB94570D893D8D20502A92A52ABED755EF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a4:51:b7:d0:21:e7:6c:de:b2:d7:d1:83:7b:
                    2b:3d:78:71:e5:35:1c:d4:dc:c0:21:92:4f:8b:e1:
                    35:8b:d4:a9:18:54:f9:10:8f:cb:17:21:bd:3b:bc:
                    9d:cf:ca:50:08:e1:0f:7d:48:99:ee:f5:ed:c6:4e:
                    bf:ea:66:8c:ec:da:f8:3f:93:f4:df:73:20:b7:92:
                    f0:c3:b5:cd:83:72:e3:ff:f4:a5:f5:94:d9:6d:3b:
                    a3:99:b9:1a:f5:04:80:7e:68:38:a3:9f:12:6a:31:
                    c4:ab:29:3b:dd:81:dd:36:e8:e8:f1:61:0b:5c:99:
                    c4:b3:c4:7a:dd:b6:47:a8:51:12:6c:28:3b:f5:8c:
                    db:c9:80:7c:e9:d0:05:38:39:f2:8c:f7:c0:54:58:
                    e5:52:86:69:70:ce:ce:71:65:d7:62:37:aa:62:3f:
                    13:c3:1b:b7:56:9e:43:76:6b:6b:b8:ca:fd:98:c2:
                    ee:6a:e6:dd:47:d8:c4:52:2c:54:6b:aa:fb:b8:ae:
                    74:bb:aa:56:47:9a:8a:fc:ac:c4:f4:86:44:34:69:
                    cb:34:5e:0e:5e:9b:e7:79:e0:11:9a:8b:fe:03:96:
                    fc:38:e0:62:3e:6f:23:88:49:ab:40:b0:dd:4a:e4:
                    16:b4:60:6c:0b:b7:b0:6e:93:24:05:c9:b5:1d:f3:
                    af:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:1E:EF:B9:45:70:D8:93:D8:D2:05:02:A9:2A:52:AB:ED:75:5E:F9
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/Rh7vuUVw2JPY0gUCqSpSq-11Xvk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.216.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         3d:2f:09:e5:9e:86:f1:7c:74:ba:c2:ee:d4:72:dd:3a:5c:ba:
         f7:9d:1d:bd:b6:e1:6b:54:ed:06:d0:12:47:87:05:93:4c:07:
         19:72:98:81:4a:93:dc:1a:6c:44:19:e1:83:06:b2:96:af:84:
         d5:10:f2:57:fb:c9:e2:e7:d5:ae:cc:2d:e3:81:b7:eb:bf:c8:
         e1:91:d7:41:1e:61:07:1b:b2:53:52:26:0b:aa:7d:a3:bd:ee:
         b4:55:a9:6b:bd:77:db:40:03:4e:1c:ca:38:66:4b:4a:ef:b6:
         0a:2e:b6:be:6b:5f:19:ec:7d:64:86:b5:ea:4f:df:bc:ab:b5:
         af:3e:69:ff:db:5b:ca:64:23:3c:69:f3:09:bb:dd:36:82:ca:
         92:3e:89:b5:80:e7:a2:bb:ba:8c:bf:f9:0e:5d:75:bb:8c:de:
         4f:93:d1:f3:3f:7a:8c:b7:64:cc:3f:e5:4c:e9:cb:b5:04:39:
         0d:f1:af:87:73:59:2c:a1:8a:2f:bd:ea:a0:e6:6b:a9:5d:0e:
         ec:ac:bd:24:bb:5f:77:f4:9d:b7:7e:c7:b8:b4:ce:cd:30:8e:
         f6:8d:96:f0:b9:d1:f5:0b:1e:fa:52:7a:71:e8:9b:2b:0f:87:
         24:0c:f4:69:42:7c:70:b1:0b:ab:78:f3:91:3c:f9:57:6d:ef:
         f1:cb:21:45
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICAbUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD
MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yNDAzMzEw
MTI5MDlaFw0yNTAzMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDQ2MUVFRkI5NDU3MEQ4
OTNEOEQyMDUwMkE5MkE1MkFCRUQ3NTVFRjkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCupFG30CHnbN6y19GDeys9eHHlNRzU3MAhkk+L4TWL1KkYVPkQ
j8sXIb07vJ3PylAI4Q99SJnu9e3GTr/qZozs2vg/k/TfcyC3kvDDtc2DcuP/9KX1
lNltO6OZuRr1BIB+aDijnxJqMcSrKTvdgd026OjxYQtcmcSzxHrdtkeoURJsKDv1
jNvJgHzp0AU4OfKM98BUWOVShmlwzs5xZddiN6piPxPDG7dWnkN2a2u4yv2Ywu5q
5t1H2MRSLFRrqvu4rnS7qlZHmor8rMT0hkQ0acs0Xg5em+d54BGai/4Dlvw44GI+
byOISatAsN1K5Ba0YGwLt7BukyQFybUd869XAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQURh7vuUVw2JPY0gUCqSpSq+11XvkwHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ
hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5
RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTMxL1JoN3Z1VVZ3MkpQWTBnVUNxU3BTcS0xMVh2ay5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwN72DANBgkqhkiG9w0BAQsFAAOCAQEAPS8J5Z6G8Xx0usLu1HLdOly6950d
vbbha1TtBtASR4cFk0wHGXKYgUqT3BpsRBnhgwaylq+E1RDyV/vJ4ufVrswt44G3
67/I4ZHXQR5hBxuyU1ImC6p9o73utFWpa71320ADThzKOGZLSu+2Ci62vmtfGex9
ZIa16k/fvKu1rz5p/9tbymQjPGnzCbvdNoLKkj6JtYDnoru6jL/5Dl11u4zeT5PR
8z96jLdkzD/lTOnLtQQ5DfGvh3NZLKGKL73qoOZrqV0O7Ky9JLtfd/Sdt37HuLTO
zTCO9o2W8LnR9Qse+lJ6ceibKw+HJAz0aUJ8cLELq3jzkTz5V23v8cshRQ==
-----END CERTIFICATE-----
Generated at Thu Jun 13 17:53:13 2024 by rpki-client on console-ams.rpki-client.org