Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1384/T-f01y1Anmdbl8glndkYSI2PqVU.roa
File:                     T-f01y1Anmdbl8glndkYSI2PqVU.roa (raw, json)
Hash identifier:          qBiafv7zu5VkPfcD5S1uKRcuQx+7ecmwTNov9Y6MiI4=
Subject key identifier:   4F:E7:F4:D7:2D:40:9E:67:5B:97:C8:25:9D:D9:18:48:8D:8F:A9:55
Certificate issuer:       /CN=87AC474F6833E4A01A86B23B51E56A661CF2E1F4
Certificate serial:       3E
Authority key identifier: 87:AC:47:4F:68:33:E4:A0:1A:86:B2:3B:51:E5:6A:66:1C:F2:E1:F4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h6xHT2gz5KAahrI7UeVqZhzy4fQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1384/T-f01y1Anmdbl8glndkYSI2PqVU.roa
Signing time:             Fri 31 May 2024 01:32:04 +0000
ROA not before:           Fri 31 May 2024 01:32:04 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     14618
IP address blocks:        150.70.218.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1384/h6xHT2gz5KAahrI7UeVqZhzy4fQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1384/h6xHT2gz5KAahrI7UeVqZhzy4fQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h6xHT2gz5KAahrI7UeVqZhzy4fQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Oct 2024 13:49:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62 (0x3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87AC474F6833E4A01A86B23B51E56A661CF2E1F4
        Validity
            Not Before: May 31 01:32:04 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=4FE7F4D72D409E675B97C8259DD918488D8FA955
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:fa:53:82:6b:8e:7e:7a:d6:ca:28:0c:af:6e:
                    41:c7:2f:19:37:cb:57:8c:d2:43:1d:01:ca:74:33:
                    b9:83:cd:bb:c0:28:2a:75:c8:37:dc:ec:32:6b:82:
                    aa:a2:55:8c:1d:94:f3:e3:e5:47:75:e5:e4:01:78:
                    43:31:c3:38:5a:25:2d:6d:32:33:8e:09:8a:03:3b:
                    38:70:6c:0c:ad:2f:12:30:e2:fa:d7:7c:23:df:98:
                    1d:8d:1a:4e:16:dc:fa:d7:b0:89:8b:ef:1b:08:a0:
                    0f:33:32:cf:22:77:7f:05:e2:02:21:48:85:e2:15:
                    07:c2:2e:cb:a0:23:6a:94:e5:db:67:62:b5:9e:4a:
                    96:bc:3e:d2:a9:6e:f8:4c:af:25:4c:2e:d2:66:c8:
                    14:70:b7:e5:7d:4d:63:84:23:97:88:84:72:57:7d:
                    ce:cc:ca:b4:5f:c5:ae:b7:8c:c7:73:2d:8d:65:1c:
                    1a:81:f4:f7:5d:cd:75:e9:7d:34:f1:79:bf:ec:88:
                    ee:09:3f:b8:40:e4:2a:9c:f8:dc:31:a1:45:c2:ef:
                    68:0b:69:99:91:c9:a3:25:b6:20:f3:4e:b0:24:77:
                    1f:64:43:9e:33:fa:be:8b:45:d3:aa:d2:6d:e7:1d:
                    3e:06:b6:63:ce:55:e3:52:42:e0:0e:26:3f:59:ab:
                    39:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:E7:F4:D7:2D:40:9E:67:5B:97:C8:25:9D:D9:18:48:8D:8F:A9:55
            X509v3 Authority Key Identifier:
                keyid:87:AC:47:4F:68:33:E4:A0:1A:86:B2:3B:51:E5:6A:66:1C:F2:E1:F4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1384/h6xHT2gz5KAahrI7UeVqZhzy4fQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h6xHT2gz5KAahrI7UeVqZhzy4fQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1384/T-f01y1Anmdbl8glndkYSI2PqVU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.70.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:7d:24:54:c5:ae:7f:07:cf:0f:ad:3b:bc:df:f0:6a:2d:3a:
         12:73:72:4a:d2:d6:a8:ea:f3:cc:13:2e:13:b2:ea:ec:ae:6c:
         57:15:c6:54:c5:41:04:7b:76:fb:7a:00:c8:52:5c:c7:98:5d:
         40:3b:53:7d:4d:b4:50:5d:09:16:b6:bf:9a:fd:05:b8:99:fc:
         15:9d:b7:c2:2e:4a:0b:44:38:8a:ae:86:3e:b5:32:24:27:49:
         29:cd:94:c4:f2:0a:6a:b0:ea:a5:71:12:81:a6:0b:9a:31:cb:
         f4:7b:8a:0a:79:32:b1:0e:c9:14:96:6c:a1:c0:a9:5f:55:2a:
         1f:76:8c:f5:37:cc:3d:a3:c2:b1:e6:b6:fe:0f:fb:6d:51:90:
         ff:cb:72:8f:55:b8:d5:86:e0:e0:1a:4e:d2:41:61:95:09:39:
         b2:c5:ce:a8:c1:9c:7f:48:51:2f:b9:e2:12:d6:48:6d:17:3b:
         01:9f:61:e9:0e:23:3b:1c:9d:9b:96:88:b0:7e:d7:94:ac:ae:
         67:39:9d:0e:6d:c9:b1:6b:4d:8c:6b:6f:18:85:c1:15:94:bb:
         d2:fc:31:a2:70:7f:8e:82:4e:d3:ed:86:d4:ab:a4:8e:52:8a:
         1f:d0:ec:da:07:f7:d7:45:ef:84:09:17:3b:32:a2:d9:e8:b1:
         9c:30:7f:c7
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgIBPjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4N0FD
NDc0RjY4MzNFNEEwMUE4NkIyM0I1MUU1NkE2NjFDRjJFMUY0MB4XDTI0MDUzMTAx
MzIwNFoXDTI1MDUxNTAxMzAwM1owMzExMC8GA1UEAxMoNEZFN0Y0RDcyRDQwOUU2
NzVCOTdDODI1OUREOTE4NDg4RDhGQTk1NTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOH6U4Jrjn561sooDK9uQccvGTfLV4zSQx0BynQzuYPNu8AoKnXI
N9zsMmuCqqJVjB2U8+PlR3Xl5AF4QzHDOFolLW0yM44JigM7OHBsDK0vEjDi+td8
I9+YHY0aThbc+tewiYvvGwigDzMyzyJ3fwXiAiFIheIVB8Iuy6AjapTl22ditZ5K
lrw+0qlu+EyvJUwu0mbIFHC35X1NY4Qjl4iEcld9zszKtF/FrreMx3MtjWUcGoH0
913Ndel9NPF5v+yI7gk/uEDkKpz43DGhRcLvaAtpmZHJoyW2IPNOsCR3H2RDnjP6
votF06rSbecdPga2Y85V41JC4A4mP1mrOUMCAwEAAaOCAiYwggIiMB0GA1UdDgQW
BBRP5/TXLUCeZ1uXyCWd2RhIjY+pVTAfBgNVHSMEGDAWgBSHrEdPaDPkoBqGsjtR
5WpmHPLh9DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa
oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTM4NC9oNnhIVDJnejVLQWFockk3VWVWcVpoenk0ZlEuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9oNnhIVDJnejVLQWFockk3VWVWcVpo
enk0ZlEuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI
KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTM4NC9ULWYwMXkxQW5tZGJsOGdsbmRrWVNJMlBxVlUucm9h
MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv
cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA
ATAGAwQAlkbaMA0GCSqGSIb3DQEBCwUAA4IBAQAOfSRUxa5/B88PrTu83/BqLToS
c3JK0tao6vPMEy4TsursrmxXFcZUxUEEe3b7egDIUlzHmF1AO1N9TbRQXQkWtr+a
/QW4mfwVnbfCLkoLRDiKroY+tTIkJ0kpzZTE8gpqsOqlcRKBpguaMcv0e4oKeTKx
DskUlmyhwKlfVSofdoz1N8w9o8Kx5rb+D/ttUZD/y3KPVbjVhuDgGk7SQWGVCTmy
xc6owZx/SFEvueIS1khtFzsBn2HpDiM7HJ2bloiwfteUrK5nOZ0Obcmxa02Ma28Y
hcEVlLvS/DGicH+Ogk7T7YbUq6SOUoof0OzaB/fXRe+ECRc7MqLZ6LGcMH/H
-----END CERTIFICATE-----
Generated at Tue Oct 22 14:59:59 2024 by rpki-client on console-fra.rpki-client.org