Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20042/62yQAmqd9_fZ0WKRBhzJuuIrG3U.roa
File:                     62yQAmqd9_fZ0WKRBhzJuuIrG3U.roa (raw, json)
Hash identifier:          mzE4hmstTYdgMG7y+4hDw0RcJjBu2cSnz9IyM3ljPlQ=
Subject key identifier:   EB:6C:90:02:6A:9D:F7:F7:D9:D1:62:91:06:1C:C9:BA:E2:2B:1B:75
Certificate issuer:       /CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
Certificate serial:       31
Authority key identifier: 96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/62yQAmqd9_fZ0WKRBhzJuuIrG3U.roa
Signing time:             Tue 26 Sep 2023 06:55:12 +0000
ROA not before:           Tue 26 Sep 2023 06:55:12 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     17941
IP address blocks:        202.144.224.0/19 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49 (0x31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
        Validity
            Not Before: Sep 26 06:55:12 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=EB6C90026A9DF7F7D9D16291061CC9BAE22B1B75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:93:a8:25:15:05:10:5f:cb:35:82:c8:5e:6e:
                    b6:3b:31:1f:06:bc:c1:3c:00:53:34:4b:f8:8d:3b:
                    de:99:d6:15:d1:c2:35:01:fb:16:ee:0a:80:95:98:
                    f8:df:b8:f0:2e:2c:89:da:67:e5:7a:ec:47:ef:a3:
                    24:ee:b1:4b:28:70:7c:3a:ef:f9:9b:93:10:59:5a:
                    b5:c0:87:eb:dd:73:41:33:5a:13:5c:b5:57:82:0c:
                    4e:fc:cc:da:4a:cf:e9:84:76:9f:f4:cf:3f:8a:0b:
                    94:d5:d4:36:85:c3:12:9e:72:f2:22:cb:73:f2:91:
                    6f:4e:32:ab:ee:bf:e6:53:f8:7d:8f:4f:e9:e5:91:
                    d3:2a:8c:a9:b0:1c:50:59:1b:56:1f:f7:ec:51:42:
                    f1:1f:37:32:43:6f:89:ef:31:a0:4a:55:b2:d8:77:
                    53:65:80:76:43:99:9f:d1:e1:a8:d4:86:76:79:21:
                    0a:e8:8c:6c:2b:53:c5:8c:8f:a5:38:a2:d3:47:20:
                    85:c7:f6:ee:f5:6e:10:41:ea:d0:85:33:4e:f4:8d:
                    62:25:50:5b:27:27:35:51:5e:99:46:d7:ff:ba:a9:
                    e1:27:ca:b6:15:d7:aa:63:3f:0a:38:80:e7:74:1b:
                    0f:37:47:f8:21:ac:8f:0c:e1:f9:a8:e2:c3:f2:b9:
                    0c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:6C:90:02:6A:9D:F7:F7:D9:D1:62:91:06:1C:C9:BA:E2:2B:1B:75
            X509v3 Authority Key Identifier:
                keyid:96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/62yQAmqd9_fZ0WKRBhzJuuIrG3U.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.144.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         04:b8:64:48:b4:f1:c2:1a:17:34:8a:ec:54:23:37:53:70:eb:
         43:26:24:51:5f:e6:e4:5e:c5:f0:92:96:02:5e:54:06:6c:cf:
         f0:39:13:6d:1c:ec:6e:52:34:80:f7:9d:1b:dd:03:dd:da:67:
         92:45:87:2a:be:86:bd:71:ea:a9:74:97:40:5e:11:c6:a5:cd:
         c9:61:d2:41:1f:99:7f:4a:01:05:f4:41:5e:a1:da:e8:72:f4:
         55:f8:62:5a:9c:a0:22:2f:09:74:ba:91:57:a6:af:f9:3d:7e:
         66:89:70:e4:61:11:4b:50:69:d0:a1:c7:8a:39:3a:03:ce:67:
         92:23:d9:e0:e4:ad:2b:01:da:5f:01:74:6e:f8:c1:20:29:0d:
         7c:c6:ee:37:16:24:c2:00:da:53:c8:fa:a8:82:5b:66:30:2c:
         08:06:94:65:f9:9f:ab:f2:9d:e1:0d:c9:45:7b:a1:e0:f9:b2:
         88:ac:17:19:54:37:52:d5:9b:ff:f1:18:ab:cb:0f:36:d5:3d:
         03:eb:a4:ce:61:95:ad:8f:4b:3d:97:82:1b:59:fd:4a:08:62:
         e9:fe:a6:d0:d5:55:14:49:17:1c:e7:e1:2b:2e:81:7e:8d:e7:
         16:d0:79:72:d6:9c:32:09:2c:30:aa:15:b2:15:e9:82:d0:29:
         36:be:ca:77
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBMTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5NjFC
QzE4NTEyNzIyQUFGOUE5MEQ4OThBREVBOUFGNzc5M0MyNTQzMB4XDTIzMDkyNjA2
NTUxMloXDTI0MDkxNDAxMzAwM1owMzExMC8GA1UEAxMoRUI2QzkwMDI2QTlERjdG
N0Q5RDE2MjkxMDYxQ0M5QkFFMjJCMUI3NTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANyTqCUVBRBfyzWCyF5utjsxHwa8wTwAUzRL+I073pnWFdHCNQH7
Fu4KgJWY+N+48C4sidpn5XrsR++jJO6xSyhwfDrv+ZuTEFlatcCH691zQTNaE1y1
V4IMTvzM2krP6YR2n/TPP4oLlNXUNoXDEp5y8iLLc/KRb04yq+6/5lP4fY9P6eWR
0yqMqbAcUFkbVh/37FFC8R83MkNvie8xoEpVsth3U2WAdkOZn9HhqNSGdnkhCuiM
bCtTxYyPpTii00cghcf27vVuEEHq0IUzTvSNYiVQWycnNVFemUbX/7qp4SfKthXX
qmM/CjiA53QbDzdH+CGsjwzh+ajiw/K5DIsCAwEAAaOCAigwggIkMB0GA1UdDgQW
BBTrbJACap3399nRYpEGHMm64isbdTAfBgNVHSMEGDAWgBSWG8GFEnIqr5qQ2Jit
6pr3eTwlQzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAwNDIvbGh2QmhSSnlLcS1ha05pWXJlcWE5M2s4SlVNLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvbGh2QmhSSnlLcS1ha05pWXJlcWE5
M2s4SlVNLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMDQyLzYyeVFBbXFkOV9mWjBXS1JCaHpKdXVJckczVS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAXKkOAwDQYJKoZIhvcNAQELBQADggEBAAS4ZEi08cIaFzSK7FQjN1Nw
60MmJFFf5uRexfCSlgJeVAZsz/A5E20c7G5SNID3nRvdA93aZ5JFhyq+hr1x6ql0
l0BeEcalzclh0kEfmX9KAQX0QV6h2uhy9FX4YlqcoCIvCXS6kVemr/k9fmaJcORh
EUtQadChx4o5OgPOZ5Ij2eDkrSsB2l8BdG74wSApDXzG7jcWJMIA2lPI+qiCW2Yw
LAgGlGX5n6vyneENyUV7oeD5soisFxlUN1LVm//xGKvLDzbVPQPrpM5hla2PSz2X
ghtZ/UoIYun+ptDVVRRJFxzn4SsugX6N5xbQeXLWnDIJLDCqFbIV6YLQKTa+ync=
-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:17 2024 by rpki-client on console-ams.rpki-client.org