Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13131/QLkbruayXHzbePiN73mH7T5fhAE.roa
File:                     QLkbruayXHzbePiN73mH7T5fhAE.roa (raw, json)
Hash identifier:          Y48rA/BXwhImxK9J05ORYB+5RxGIR/4XaX3Ul/1m7sQ=
Subject key identifier:   40:B9:1B:AE:E6:B2:5C:7C:DB:78:F8:8D:EF:79:87:ED:3E:5F:84:01
Certificate issuer:       /CN=FD13D822A4DD7BA05078F9E60025F8BFF11BEF82
Certificate serial:       4D
Authority key identifier: FD:13:D8:22:A4:DD:7B:A0:50:78:F9:E6:00:25:F8:BF:F1:1B:EF:82
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_RPYIqTde6BQePnmACX4v_Eb74I.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13131/QLkbruayXHzbePiN73mH7T5fhAE.roa
Signing time:             Thu 28 Mar 2024 01:39:04 +0000
ROA not before:           Thu 28 Mar 2024 01:39:04 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     38639
IP address blocks:        220.150.192.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13131/_RPYIqTde6BQePnmACX4v_Eb74I.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13131/_RPYIqTde6BQePnmACX4v_Eb74I.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_RPYIqTde6BQePnmACX4v_Eb74I.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77 (0x4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD13D822A4DD7BA05078F9E60025F8BFF11BEF82
        Validity
            Not Before: Mar 28 01:39:04 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=40B91BAEE6B25C7CDB78F88DEF7987ED3E5F8401
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:5c:74:36:c5:f5:4a:30:30:91:35:ac:87:9b:
                    07:e1:f1:3e:8f:6e:75:03:7d:fd:6a:f2:18:88:65:
                    4f:75:ae:41:7b:f1:66:56:8a:63:37:98:2b:e7:52:
                    90:e8:95:7b:0e:74:c5:5d:2c:e4:78:ca:13:85:18:
                    b6:5e:fc:51:93:e5:9c:5b:7b:54:21:21:ed:47:57:
                    8f:a2:52:ca:11:97:ad:f7:41:c6:b0:22:61:96:84:
                    f9:f0:2b:49:6b:67:8e:bc:10:fc:6f:41:da:81:1c:
                    c4:d0:ae:40:64:8b:64:e7:a7:a2:51:b9:c2:ee:55:
                    9d:5d:e6:5b:60:35:af:b9:fa:4d:9f:ba:c7:00:47:
                    18:64:a4:f9:66:be:a9:c5:76:19:3f:16:9e:d9:78:
                    d3:3b:da:e7:ed:a6:2a:d3:24:ac:2b:cc:16:3c:25:
                    0b:24:3c:0d:59:b7:eb:91:c1:4b:79:03:f2:4f:00:
                    c1:b6:16:55:6c:a3:a6:87:62:99:d3:9d:55:38:1e:
                    79:4f:51:9d:52:75:f3:98:3e:bc:3d:46:59:c3:f3:
                    18:12:e1:26:05:dc:f7:cd:47:f9:86:48:0c:36:6f:
                    dc:0d:af:df:25:be:88:ca:54:a4:da:3f:e0:63:cb:
                    e1:33:4f:aa:4b:1f:b7:43:1d:6b:4a:33:d5:40:1f:
                    de:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:B9:1B:AE:E6:B2:5C:7C:DB:78:F8:8D:EF:79:87:ED:3E:5F:84:01
            X509v3 Authority Key Identifier:
                keyid:FD:13:D8:22:A4:DD:7B:A0:50:78:F9:E6:00:25:F8:BF:F1:1B:EF:82

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13131/_RPYIqTde6BQePnmACX4v_Eb74I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_RPYIqTde6BQePnmACX4v_Eb74I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13131/QLkbruayXHzbePiN73mH7T5fhAE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.150.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b5:6d:4f:62:46:22:e0:0a:06:34:98:83:56:a6:7a:7c:a6:6a:
         98:01:4e:15:59:76:8d:cd:7c:71:75:85:69:6c:9a:6b:b4:f2:
         7c:ad:9c:72:62:0a:8b:f6:f2:f8:52:98:77:12:6d:79:fb:1a:
         2e:64:2e:8f:96:12:55:e7:ef:7d:f9:5a:12:d5:41:f4:02:0b:
         27:67:f5:b5:48:cc:3f:28:82:6b:0f:a0:87:b5:89:a6:0a:4f:
         93:9f:f6:de:a5:97:83:19:25:8d:ba:73:e8:e9:57:60:bf:41:
         eb:80:30:f7:bf:c5:dd:cf:12:df:9a:b2:90:5a:f3:af:02:fd:
         6c:0e:cb:5b:0a:86:04:11:64:9d:b4:1a:f7:78:c8:9a:9d:86:
         07:70:e3:9f:d9:e2:58:30:bf:bd:b3:ce:7d:57:16:20:a2:d0:
         5b:3a:97:8a:c9:30:ec:ad:7e:e2:b9:4a:26:7a:e8:78:ed:27:
         11:78:60:8e:d8:d5:fa:0a:0c:a1:25:d3:06:5c:87:e9:fa:57:
         9d:2d:ff:eb:70:b5:24:60:df:2b:9a:7e:a3:52:4a:49:8c:ee:
         23:13:c4:e5:21:4f:c2:cf:66:07:9a:1b:4c:c7:fd:1e:ee:0c:
         16:51:98:9c:53:fd:c9:5a:ca:01:1e:da:ee:b2:3b:58:ab:2c:
         fb:c8:86:36
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBTTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGRDEz
RDgyMkE0REQ3QkEwNTA3OEY5RTYwMDI1RjhCRkYxMUJFRjgyMB4XDTI0MDMyODAx
MzkwNFoXDTI1MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoNDBCOTFCQUVFNkIyNUM3
Q0RCNzhGODhERUY3OTg3RUQzRTVGODQwMTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANFcdDbF9UowMJE1rIebB+HxPo9udQN9/WryGIhlT3WuQXvxZlaK
YzeYK+dSkOiVew50xV0s5HjKE4UYtl78UZPlnFt7VCEh7UdXj6JSyhGXrfdBxrAi
YZaE+fArSWtnjrwQ/G9B2oEcxNCuQGSLZOenolG5wu5VnV3mW2A1r7n6TZ+6xwBH
GGSk+Wa+qcV2GT8Wntl40zva5+2mKtMkrCvMFjwlCyQ8DVm365HBS3kD8k8AwbYW
VWyjpodimdOdVTgeeU9RnVJ185g+vD1GWcPzGBLhJgXc981H+YZIDDZv3A2v3yW+
iMpUpNo/4GPL4TNPqksft0Mda0oz1UAf3jUCAwEAAaOCAigwggIkMB0GA1UdDgQW
BBRAuRuu5rJcfNt4+I3veYftPl+EATAfBgNVHSMEGDAWgBT9E9gipN17oFB4+eYA
Jfi/8RvvgjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTMxMzEvX1JQWUlxVGRlNkJRZVBubUFDWDR2X0ViNzRJLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvX1JQWUlxVGRlNkJRZVBubUFDWDR2
X0ViNzRJLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzEzMTMxL1FMa2JydWF5WEh6YmVQaU43M21IN1Q1ZmhBRS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAPclsAwDQYJKoZIhvcNAQELBQADggEBALVtT2JGIuAKBjSYg1amenym
apgBThVZdo3NfHF1hWlsmmu08nytnHJiCov28vhSmHcSbXn7Gi5kLo+WElXn7335
WhLVQfQCCydn9bVIzD8ogmsPoIe1iaYKT5Of9t6ll4MZJY26c+jpV2C/QeuAMPe/
xd3PEt+aspBa868C/WwOy1sKhgQRZJ20Gvd4yJqdhgdw45/Z4lgwv72zzn1XFiCi
0Fs6l4rJMOytfuK5SiZ66HjtJxF4YI7Y1foKDKEl0wZch+n6V50t/+twtSRg3yua
fqNSSkmM7iMTxOUhT8LPZgeaG0zH/R7uDBZRmJxT/claygEe2u6yO1irLPvIhjY=
-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:02 2024 by rpki-client on console-fra.rpki-client.org