Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20042/-kA8jYnSHtGpDFYuRuheqKRydhI.roa
File:                     -kA8jYnSHtGpDFYuRuheqKRydhI.roa (raw, json)
Hash identifier:          zFf4Ezt/4zeS90sLTAOQ8WimRLQ4zZ0xKwPvBTzW1nU=
Subject key identifier:   FA:40:3C:8D:89:D2:1E:D1:A9:0C:56:2E:46:E8:5E:A8:A4:72:76:12
Certificate issuer:       /CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
Certificate serial:       35
Authority key identifier: 96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/-kA8jYnSHtGpDFYuRuheqKRydhI.roa
Signing time:             Tue 26 Sep 2023 06:57:16 +0000
ROA not before:           Tue 26 Sep 2023 06:57:16 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     17941
IP address blocks:        219.122.0.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 11:53:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53 (0x35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
        Validity
            Not Before: Sep 26 06:57:16 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=FA403C8D89D21ED1A90C562E46E85EA8A4727612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:c4:0f:b2:85:df:68:a4:5e:b6:5f:b6:13:b2:
                    9d:b2:96:d6:37:bc:0f:cb:2a:cd:77:d8:6c:24:58:
                    24:a1:d5:b3:63:16:03:eb:8d:17:de:9c:32:c4:fb:
                    05:80:ac:5b:4b:8e:d6:98:63:ff:49:c7:dd:e2:f2:
                    53:93:8e:a2:09:e7:01:13:5a:66:dc:db:55:95:f2:
                    16:24:02:66:fb:9d:d4:50:09:ea:24:cf:3a:af:19:
                    38:bb:0a:6a:54:99:e9:e0:dd:e6:88:af:c8:79:df:
                    31:c7:6c:d0:d3:0c:cd:f2:d9:12:05:97:f9:9f:dc:
                    ab:cb:fa:ee:7c:8f:7c:27:92:c6:ad:83:be:f1:1c:
                    34:f9:5b:2a:dd:d3:80:76:3e:8b:05:ca:c7:28:9a:
                    0c:b3:7e:16:a4:f3:b5:2c:56:36:fe:8d:1b:54:09:
                    0d:08:03:5f:6b:64:d9:4e:51:bf:69:ec:dd:ff:bf:
                    5a:e4:a4:22:54:87:43:4a:08:ba:a3:b0:92:89:9a:
                    18:c2:09:46:96:0a:63:ec:70:d0:ff:13:e9:14:8b:
                    c8:31:c1:fb:bf:84:36:61:be:3a:f9:bf:05:3d:88:
                    98:4e:54:c8:a2:fd:d8:e6:ab:80:6c:3f:81:4e:1d:
                    7d:a7:7e:fe:f7:ce:85:1c:a4:4b:6b:e4:57:d2:ef:
                    f0:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:40:3C:8D:89:D2:1E:D1:A9:0C:56:2E:46:E8:5E:A8:A4:72:76:12
            X509v3 Authority Key Identifier:
                keyid:96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/-kA8jYnSHtGpDFYuRuheqKRydhI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.122.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a3:11:52:44:6d:40:7a:39:c0:ed:b6:54:d2:05:99:56:99:07:
         3e:4d:ec:06:56:a8:61:45:e0:ab:79:a4:ad:25:ce:0e:17:42:
         3b:7e:e4:5c:af:6b:8d:29:a7:c1:a8:0f:6f:23:63:57:1f:6d:
         25:05:73:45:ca:5a:c2:a3:5f:76:cd:41:ea:55:64:63:bb:6d:
         0d:9c:bc:b0:79:2e:bd:f1:aa:fa:dc:27:58:bd:5d:9d:c9:f6:
         52:7f:94:f0:f1:29:9d:7d:af:2d:eb:12:7b:85:b4:9b:08:3a:
         c0:fc:6c:89:1f:2f:03:02:a3:fd:6b:d3:0d:b3:2b:93:1c:85:
         b9:51:3c:a1:ad:01:bd:50:77:93:83:e8:99:7e:6b:df:b6:ef:
         a7:f1:57:70:e0:ed:bf:cc:77:8a:86:19:96:46:6e:f2:26:17:
         41:b3:f4:0d:e8:1f:68:c6:ac:00:88:a6:20:34:11:a6:08:6f:
         5a:e0:63:8a:3f:a0:19:e9:4a:e5:e4:4c:5c:7b:d7:86:7c:08:
         7b:b8:c6:ea:7e:f6:a0:44:65:3c:19:8e:15:28:46:ef:b6:ab:
         6e:08:83:8e:e6:48:46:26:ff:88:43:d3:05:c2:0b:43:87:63:
         f1:96:26:c1:ac:16:90:e4:10:42:a6:23:82:1b:90:39:e4:d4:
         c2:97:92:82
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBNTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5NjFC
QzE4NTEyNzIyQUFGOUE5MEQ4OThBREVBOUFGNzc5M0MyNTQzMB4XDTIzMDkyNjA2
NTcxNloXDTI0MDkxNDAxMzAwM1owMzExMC8GA1UEAxMoRkE0MDNDOEQ4OUQyMUVE
MUE5MEM1NjJFNDZFODVFQThBNDcyNzYxMjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOfED7KF32ikXrZfthOynbKW1je8D8sqzXfYbCRYJKHVs2MWA+uN
F96cMsT7BYCsW0uO1phj/0nH3eLyU5OOognnARNaZtzbVZXyFiQCZvud1FAJ6iTP
Oq8ZOLsKalSZ6eDd5oivyHnfMcds0NMMzfLZEgWX+Z/cq8v67nyPfCeSxq2DvvEc
NPlbKt3TgHY+iwXKxyiaDLN+FqTztSxWNv6NG1QJDQgDX2tk2U5Rv2ns3f+/WuSk
IlSHQ0oIuqOwkomaGMIJRpYKY+xw0P8T6RSLyDHB+7+ENmG+Ovm/BT2ImE5UyKL9
2OargGw/gU4dfad+/vfOhRykS2vkV9Lv8E8CAwEAAaOCAigwggIkMB0GA1UdDgQW
BBT6QDyNidIe0akMVi5G6F6opHJ2EjAfBgNVHSMEGDAWgBSWG8GFEnIqr5qQ2Jit
6pr3eTwlQzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAwNDIvbGh2QmhSSnlLcS1ha05pWXJlcWE5M2s4SlVNLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvbGh2QmhSSnlLcS1ha05pWXJlcWE5
M2s4SlVNLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMDQyLy1rQThqWW5TSHRHcERGWXVSdWhlcUtSeWRoSS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBATbegAwDQYJKoZIhvcNAQELBQADggEBAKMRUkRtQHo5wO22VNIFmVaZ
Bz5N7AZWqGFF4Kt5pK0lzg4XQjt+5Fyva40pp8GoD28jY1cfbSUFc0XKWsKjX3bN
QepVZGO7bQ2cvLB5Lr3xqvrcJ1i9XZ3J9lJ/lPDxKZ19ry3rEnuFtJsIOsD8bIkf
LwMCo/1r0w2zK5MchblRPKGtAb1Qd5OD6Jl+a9+276fxV3Dg7b/Md4qGGZZGbvIm
F0Gz9A3oH2jGrACIpiA0EaYIb1rgY4o/oBnpSuXkTFx714Z8CHu4xup+9qBEZTwZ
jhUoRu+2q24Ig47mSEYm/4hD0wXCC0OHY/GWJsGsFpDkEEKmI4IbkDnk1MKXkoI=
-----END CERTIFICATE-----
Generated at Sun Jun 16 14:31:44 2024 by rpki-client on console-ams.rpki-client.org