Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1639/n6N9fDIIiC3YHZqG7mskVmqdK8w.roa
File:                     n6N9fDIIiC3YHZqG7mskVmqdK8w.roa (raw, json)
Hash identifier:          aJiD/RQwLJORnkT1Xs32nehwNiBxq/kTpuO4crMKNLk=
Subject key identifier:   9F:A3:7D:7C:32:08:88:2D:D8:1D:9A:86:EE:6B:24:56:6A:9D:2B:CC
Certificate issuer:       /CN=24505A86B00DCD05BA360BCA66ADFF602BD95AA8
Certificate serial:       60
Authority key identifier: 24:50:5A:86:B0:0D:CD:05:BA:36:0B:CA:66:AD:FF:60:2B:D9:5A:A8
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JFBahrANzQW6NgvKZq3_YCvZWqg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/n6N9fDIIiC3YHZqG7mskVmqdK8w.roa
Signing time:             Thu 29 Feb 2024 01:29:14 +0000
ROA not before:           Thu 29 Feb 2024 01:29:14 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     7667
IP address blocks:        202.255.44.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/JFBahrANzQW6NgvKZq3_YCvZWqg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/JFBahrANzQW6NgvKZq3_YCvZWqg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JFBahrANzQW6NgvKZq3_YCvZWqg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 22 Jun 2024 01:30:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96 (0x60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24505A86B00DCD05BA360BCA66ADFF602BD95AA8
        Validity
            Not Before: Feb 29 01:29:14 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=9FA37D7C3208882DD81D9A86EE6B24566A9D2BCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:71:09:d3:5b:d6:2d:f9:15:da:33:03:77:b9:
                    00:a0:53:30:43:8b:ec:a2:60:ee:02:66:c4:25:d4:
                    d8:9a:cd:1e:82:2e:47:77:00:25:b6:73:4e:e2:2f:
                    b2:95:99:9a:c7:c5:f3:e5:ac:b4:c2:87:da:d9:2d:
                    29:cd:d8:d8:97:59:cc:fc:c2:5d:e5:ec:cf:31:03:
                    04:38:c3:0d:1e:9d:e1:de:4f:f6:9f:5a:3d:3d:36:
                    1d:30:70:65:24:cf:38:92:c3:3d:87:d6:94:d7:bb:
                    8b:43:cc:e1:94:e8:dd:aa:d3:e7:9c:a5:3e:77:39:
                    be:e7:a7:43:49:0c:be:ff:03:b6:b5:14:8b:08:e0:
                    78:48:37:84:ec:a7:2a:f2:76:6c:4b:0f:f6:b2:98:
                    54:6f:3d:ce:3d:28:87:96:1e:8c:83:b8:41:b5:c0:
                    09:ec:c2:6f:96:37:be:21:51:b7:f6:55:a6:7f:78:
                    01:24:d6:62:ae:fa:3e:66:bb:97:f8:29:71:b8:61:
                    1f:44:a8:a5:e9:97:03:65:d2:64:bc:18:7f:a9:b2:
                    c3:89:b5:84:f0:f2:95:5e:1e:57:c1:c6:56:7b:27:
                    30:d4:7d:1e:7c:e1:92:db:57:c2:e3:fb:0a:6b:77:
                    a5:8b:2a:61:d8:87:5e:1c:de:19:f9:a9:8e:91:73:
                    e7:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:A3:7D:7C:32:08:88:2D:D8:1D:9A:86:EE:6B:24:56:6A:9D:2B:CC
            X509v3 Authority Key Identifier:
                keyid:24:50:5A:86:B0:0D:CD:05:BA:36:0B:CA:66:AD:FF:60:2B:D9:5A:A8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/JFBahrANzQW6NgvKZq3_YCvZWqg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JFBahrANzQW6NgvKZq3_YCvZWqg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/n6N9fDIIiC3YHZqG7mskVmqdK8w.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.255.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:95:90:a6:fe:10:ee:41:67:f9:47:82:6a:c4:05:c4:2c:21:
         cc:67:00:81:5e:6b:24:00:5c:f2:7d:d9:4a:91:38:f5:b4:c9:
         17:21:81:7f:ba:5f:c5:84:cb:16:2c:53:82:19:ba:0b:c2:dd:
         2a:87:05:6d:2b:ab:37:f0:0b:13:a2:f9:ef:85:b8:06:d3:00:
         c2:ac:8f:d1:ae:48:d7:37:39:cf:53:8f:d2:4f:6e:51:fa:1c:
         1c:6b:c7:1b:d1:41:19:ef:e1:35:a8:bf:9a:e8:b7:a9:8d:4b:
         c0:67:4f:d9:b9:35:91:1c:f3:96:a1:46:d2:01:eb:46:9b:37:
         21:7e:1d:89:8e:fb:e3:c8:49:e9:05:e8:7d:83:50:01:80:18:
         19:7f:3d:57:2b:40:41:71:91:14:df:15:bb:0e:7d:d1:af:75:
         8f:0a:b3:61:8a:d9:c7:11:b9:83:f7:7e:13:ae:e7:70:ec:5c:
         75:c4:9f:3b:08:29:ce:6f:35:e7:9d:20:b2:5f:0d:c5:f2:7c:
         8c:c5:3b:54:a9:e6:a6:14:63:a8:b4:78:30:14:4b:3e:2b:fe:
         0a:d1:0f:55:45:20:3c:5d:d4:1e:66:43:3e:a3:aa:39:7d:bf:
         fe:05:e9:71:a7:8c:93:1b:09:5f:bd:8b:a0:a0:6c:3c:f3:6d:
         76:2c:7a:12
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgIBYDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyNDUw
NUE4NkIwMERDRDA1QkEzNjBCQ0E2NkFERkY2MDJCRDk1QUE4MB4XDTI0MDIyOTAx
MjkxNFoXDTI1MDIxNDAxMzAwM1owMzExMC8GA1UEAxMoOUZBMzdEN0MzMjA4ODgy
REQ4MUQ5QTg2RUU2QjI0NTY2QTlEMkJDQzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOJxCdNb1i35FdozA3e5AKBTMEOL7KJg7gJmxCXU2JrNHoIuR3cA
JbZzTuIvspWZmsfF8+WstMKH2tktKc3Y2JdZzPzCXeXszzEDBDjDDR6d4d5P9p9a
PT02HTBwZSTPOJLDPYfWlNe7i0PM4ZTo3arT55ylPnc5vuenQ0kMvv8DtrUUiwjg
eEg3hOynKvJ2bEsP9rKYVG89zj0oh5YejIO4QbXACezCb5Y3viFRt/ZVpn94ASTW
Yq76Pma7l/gpcbhhH0SopemXA2XSZLwYf6myw4m1hPDylV4eV8HGVnsnMNR9Hnzh
kttXwuP7Cmt3pYsqYdiHXhzeGfmpjpFz5yMCAwEAAaOCAiYwggIiMB0GA1UdDgQW
BBSfo318MgiILdgdmobuayRWap0rzDAfBgNVHSMEGDAWgBQkUFqGsA3NBbo2C8pm
rf9gK9laqDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa
oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTYzOS9KRkJhaHJBTnpRVzZOZ3ZLWnEzX1lDdlpXcWcuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9KRkJhaHJBTnpRVzZOZ3ZLWnEzX1lD
dlpXcWcuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI
KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYzOS9uNk45ZkRJSWlDM1lIWnFHN21za1ZtcWRLOHcucm9h
MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv
cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA
ATAGAwQAyv8sMA0GCSqGSIb3DQEBCwUAA4IBAQBtlZCm/hDuQWf5R4JqxAXELCHM
ZwCBXmskAFzyfdlKkTj1tMkXIYF/ul/FhMsWLFOCGboLwt0qhwVtK6s38AsTovnv
hbgG0wDCrI/RrkjXNznPU4/ST25R+hwca8cb0UEZ7+E1qL+a6LepjUvAZ0/ZuTWR
HPOWoUbSAetGmzchfh2JjvvjyEnpBeh9g1ABgBgZfz1XK0BBcZEU3xW7Dn3Rr3WP
CrNhitnHEbmD934Trudw7Fx1xJ87CCnObzXnnSCyXw3F8nyMxTtUqeamFGOotHgw
FEs+K/4K0Q9VRSA8XdQeZkM+o6o5fb/+Belxp4yTGwlfvYugoGw88212LHoS
-----END CERTIFICATE-----
Generated at Sat Jun 15 02:01:37 2024 by rpki-client on console-fra.rpki-client.org