Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20042/HjNbY-ZRkrtVs_nBjpcvHy7iJxA.roa
File:                     HjNbY-ZRkrtVs_nBjpcvHy7iJxA.roa (raw, json)
Hash identifier:          PShvB3fKTWlDxtG+mt3vppKzgshroU/k8uU4JoR8N6Y=
Subject key identifier:   1E:33:5B:63:E6:51:92:BB:55:B3:F9:C1:8E:97:2F:1F:2E:E2:27:10
Certificate issuer:       /CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
Certificate serial:       29
Authority key identifier: 96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/HjNbY-ZRkrtVs_nBjpcvHy7iJxA.roa
Signing time:             Tue 26 Sep 2023 06:51:11 +0000
ROA not before:           Tue 26 Sep 2023 06:51:11 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     17941
IP address blocks:        119.75.224.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 22 Jun 2024 01:32:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 41 (0x29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
        Validity
            Not Before: Sep 26 06:51:11 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=1E335B63E65192BB55B3F9C18E972F1F2EE22710
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:dd:18:96:3a:b9:51:97:1f:1d:ef:7a:25:13:
                    61:29:8e:bd:c8:1d:bc:52:c9:47:99:af:21:5a:d7:
                    04:70:10:3c:b1:29:3b:8f:1f:aa:97:73:17:3c:d1:
                    e7:c1:ca:39:60:66:f9:0b:dd:49:f2:7d:be:5b:71:
                    d5:c2:8d:a7:44:e9:4c:11:f3:af:62:fb:e4:b9:e4:
                    97:a3:85:8c:7d:40:87:d9:ff:82:1f:84:d9:c0:c3:
                    f9:e7:72:9d:09:3c:4c:3b:4d:74:c6:25:f1:6b:e1:
                    b4:ce:ac:33:ac:8e:14:14:6c:f6:8e:31:3e:f1:8b:
                    53:ce:09:db:d4:14:4a:e5:86:c2:4f:e3:e4:0a:79:
                    0a:96:e6:72:fb:22:6c:81:ee:e8:16:e9:82:f5:20:
                    72:3e:82:5a:a3:a9:ab:78:6b:d6:f0:98:c2:4d:82:
                    56:f6:01:9b:1d:40:81:6c:33:cc:41:f2:c0:02:0f:
                    6c:bb:1f:73:20:0d:4a:84:d6:8d:f4:5c:ec:7e:a1:
                    67:af:82:88:ac:94:1b:0f:d7:12:2c:fa:e9:5a:59:
                    34:55:af:97:7f:bf:8a:c9:f7:ab:22:64:b5:48:7d:
                    f4:2b:b5:ad:d8:29:8f:04:33:17:49:a6:59:9c:a2:
                    66:34:6a:96:47:74:1c:60:dd:ab:b1:0a:73:4e:6f:
                    fb:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:33:5B:63:E6:51:92:BB:55:B3:F9:C1:8E:97:2F:1F:2E:E2:27:10
            X509v3 Authority Key Identifier:
                keyid:96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/HjNbY-ZRkrtVs_nBjpcvHy7iJxA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.75.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6e:6a:7b:47:15:0c:3b:d8:f9:d4:7b:57:05:21:e8:be:fa:70:
         7d:1d:ec:c2:eb:56:f2:22:f3:72:1a:d4:b4:ac:32:40:db:63:
         7d:44:89:1a:1a:c7:97:2b:51:2f:c7:df:69:5f:25:ad:2e:f2:
         5c:80:5f:bf:14:dd:15:51:2d:a9:85:42:d2:75:a6:f0:33:99:
         7f:54:eb:f5:13:d8:6a:57:8d:32:ac:08:81:f9:29:ad:de:e1:
         34:8f:64:1e:f7:8a:4c:ec:19:63:88:44:b3:7c:0b:0d:17:33:
         db:d5:18:01:86:fa:07:f0:74:04:4e:b5:b0:35:b8:80:ab:5e:
         5d:9d:df:41:c4:b2:fa:20:4f:ec:d2:77:d9:a4:10:c4:e3:4d:
         ed:07:b7:6b:0d:7c:63:49:e8:e1:e0:1e:61:08:52:da:25:1c:
         ca:87:64:af:2b:cf:77:0f:3e:b3:e9:2c:75:e7:45:98:03:ae:
         8a:3d:00:b5:66:a5:72:1b:d3:82:a7:95:3f:f0:42:07:6d:3c:
         1a:4a:f8:9a:ca:b2:7f:f2:b5:fe:5d:4d:8e:b3:d3:0b:e8:b7:
         9d:71:c1:2f:9b:c1:a6:18:eb:15:05:a2:16:f6:24:c7:a3:d3:
         b6:ac:14:fe:b2:ee:27:e6:f0:3c:20:ed:41:1d:3f:52:27:42:
         03:c2:ee:a1
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBKTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5NjFC
QzE4NTEyNzIyQUFGOUE5MEQ4OThBREVBOUFGNzc5M0MyNTQzMB4XDTIzMDkyNjA2
NTExMVoXDTI0MDkxNDAxMzAwM1owMzExMC8GA1UEAxMoMUUzMzVCNjNFNjUxOTJC
QjU1QjNGOUMxOEU5NzJGMUYyRUUyMjcxMDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOzdGJY6uVGXHx3veiUTYSmOvcgdvFLJR5mvIVrXBHAQPLEpO48f
qpdzFzzR58HKOWBm+QvdSfJ9vltx1cKNp0TpTBHzr2L75Lnkl6OFjH1Ah9n/gh+E
2cDD+edynQk8TDtNdMYl8WvhtM6sM6yOFBRs9o4xPvGLU84J29QUSuWGwk/j5Ap5
CpbmcvsibIHu6BbpgvUgcj6CWqOpq3hr1vCYwk2CVvYBmx1AgWwzzEHywAIPbLsf
cyANSoTWjfRc7H6hZ6+CiKyUGw/XEiz66VpZNFWvl3+/isn3qyJktUh99Cu1rdgp
jwQzF0mmWZyiZjRqlkd0HGDdq7EKc05v+3kCAwEAAaOCAigwggIkMB0GA1UdDgQW
BBQeM1tj5lGSu1Wz+cGOly8fLuInEDAfBgNVHSMEGDAWgBSWG8GFEnIqr5qQ2Jit
6pr3eTwlQzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAwNDIvbGh2QmhSSnlLcS1ha05pWXJlcWE5M2s4SlVNLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvbGh2QmhSSnlLcS1ha05pWXJlcWE5
M2s4SlVNLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMDQyL0hqTmJZLVpSa3J0VnNfbkJqcGN2SHk3aUp4QS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAR3S+AwDQYJKoZIhvcNAQELBQADggEBAG5qe0cVDDvY+dR7VwUh6L76
cH0d7MLrVvIi83Ia1LSsMkDbY31EiRoax5crUS/H32lfJa0u8lyAX78U3RVRLamF
QtJ1pvAzmX9U6/UT2GpXjTKsCIH5Ka3e4TSPZB73ikzsGWOIRLN8Cw0XM9vVGAGG
+gfwdAROtbA1uICrXl2d30HEsvogT+zSd9mkEMTjTe0Ht2sNfGNJ6OHgHmEIUtol
HMqHZK8rz3cPPrPpLHXnRZgDroo9ALVmpXIb04KnlT/wQgdtPBpK+JrKsn/ytf5d
TY6z0wvot51xwS+bwaYY6xUFohb2JMej07asFP6y7ifm8Dwg7UEdP1InQgPC7qE=
-----END CERTIFICATE-----
Generated at Sat Jun 15 02:41:48 2024 by rpki-client on console-ams.rpki-client.org