Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20042/LNQBIIq6PCih3K3b6u3897clrRE.roa
File:                     LNQBIIq6PCih3K3b6u3897clrRE.roa (raw, json)
Hash identifier:          H/YO7NtaxYf1tg2bOU9ta7RFd95OzaXNsW0haB1+aAw=
Subject key identifier:   2C:D4:01:20:8A:BA:3C:28:A1:DC:AD:DB:EA:ED:FC:F7:B7:25:AD:11
Certificate issuer:       /CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
Certificate serial:       67
Authority key identifier: 96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/LNQBIIq6PCih3K3b6u3897clrRE.roa
Signing time:             Wed 04 Sep 2024 06:29:24 +0000
ROA not before:           Wed 04 Sep 2024 06:29:24 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     15830
IP address blocks:        182.236.96.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 20:13:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103 (0x67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
        Validity
            Not Before: Sep  4 06:29:24 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=2CD401208ABA3C28A1DCADDBEAEDFCF7B725AD11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:03:a0:5d:d1:0f:e2:44:82:e0:74:77:24:b5:
                    b2:76:52:41:76:6a:c1:d1:37:02:46:f3:f3:ed:5e:
                    b1:51:37:1e:67:db:41:e8:51:45:70:f3:90:13:48:
                    16:e0:93:86:3c:44:16:3d:5d:f4:55:9e:27:0c:b0:
                    ab:1b:97:9d:dd:e2:18:b6:47:76:78:2e:cd:28:7b:
                    a1:d5:3f:99:67:a9:20:51:aa:ac:ad:c8:e5:5b:5f:
                    19:a7:ca:1d:32:82:3a:2e:fd:4a:b1:4d:2e:f1:90:
                    ce:db:74:92:52:66:94:2f:78:b4:11:15:d5:10:1b:
                    88:f3:c0:ce:76:5c:ad:64:6f:a3:57:06:27:73:e9:
                    96:ca:61:8d:de:4d:c5:84:90:94:cc:fa:f4:96:3e:
                    1d:e9:1b:72:f5:f2:d0:7b:97:ce:4e:3b:da:44:59:
                    80:9a:92:04:5f:2a:16:94:42:73:26:e4:27:83:73:
                    75:26:3e:86:3c:5d:85:2f:fe:44:d7:ef:ca:01:5e:
                    68:2f:41:b5:58:83:9d:cd:14:6a:38:33:9f:ae:9a:
                    e3:c2:6c:0b:e1:03:6b:72:11:36:29:aa:64:05:25:
                    62:c3:ff:10:3a:dc:e2:27:4f:4b:f6:e9:69:f3:b7:
                    a3:89:c4:3b:76:94:29:58:cf:57:e8:b3:e9:b0:34:
                    b5:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:D4:01:20:8A:BA:3C:28:A1:DC:AD:DB:EA:ED:FC:F7:B7:25:AD:11
            X509v3 Authority Key Identifier:
                keyid:96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/LNQBIIq6PCih3K3b6u3897clrRE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.236.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9f:32:2f:17:9d:8c:3b:22:1c:3c:dc:d5:e4:4f:66:9c:3c:f4:
         40:66:52:23:d2:0f:5d:6d:e3:e1:70:28:c1:e7:f9:85:b2:e9:
         d6:9e:9f:0f:e5:f4:42:61:81:a3:56:20:09:6f:b7:6e:1e:1d:
         14:67:06:a9:9f:62:13:0f:e2:62:f5:28:d7:c1:c8:98:d4:e9:
         57:77:65:ed:df:c3:48:af:fc:77:9f:b4:79:aa:bc:59:c8:6b:
         2b:18:11:d9:9a:5b:02:aa:66:42:52:4e:61:ab:c3:ea:29:32:
         ac:ac:4f:f2:f6:bc:ac:cb:ef:d5:4e:cc:66:ed:8f:36:7e:50:
         ba:f3:84:69:34:8c:7c:fc:0d:08:b5:dc:af:79:65:1a:fe:dd:
         82:91:5b:b2:e2:ff:cc:ec:2d:10:a2:eb:fc:27:36:7f:be:43:
         0c:32:59:0b:18:2c:42:7a:fc:24:97:53:e3:b8:f3:74:95:8f:
         6d:bf:b2:26:88:be:b4:7b:e6:9d:ac:84:73:4d:bd:e4:29:a2:
         c0:6a:25:18:1a:25:d1:33:fc:69:c4:72:55:76:99:19:00:26:
         56:5b:14:00:7c:60:29:b0:d5:43:38:ad:4e:12:b8:2a:06:57:
         50:6a:67:19:8a:a3:c0:40:1e:15:29:eb:04:87:9e:d9:a4:80:
         f2:73:3e:76
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBZzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5NjFC
QzE4NTEyNzIyQUFGOUE5MEQ4OThBREVBOUFGNzc5M0MyNTQzMB4XDTI0MDkwNDA2
MjkyNFoXDTI1MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoMkNENDAxMjA4QUJBM0My
OEExRENBRERCRUFFREZDRjdCNzI1QUQxMTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJsDoF3RD+JEguB0dyS1snZSQXZqwdE3Akbz8+1esVE3HmfbQehR
RXDzkBNIFuCThjxEFj1d9FWeJwywqxuXnd3iGLZHdnguzSh7odU/mWepIFGqrK3I
5VtfGafKHTKCOi79SrFNLvGQztt0klJmlC94tBEV1RAbiPPAznZcrWRvo1cGJ3Pp
lsphjd5NxYSQlMz69JY+HekbcvXy0HuXzk472kRZgJqSBF8qFpRCcybkJ4NzdSY+
hjxdhS/+RNfvygFeaC9BtViDnc0Uajgzn66a48JsC+EDa3IRNimqZAUlYsP/EDrc
4idPS/bpafO3o4nEO3aUKVjPV+iz6bA0tUUCAwEAAaOCAigwggIkMB0GA1UdDgQW
BBQs1AEgiro8KKHcrdvq7fz3tyWtETAfBgNVHSMEGDAWgBSWG8GFEnIqr5qQ2Jit
6pr3eTwlQzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAwNDIvbGh2QmhSSnlLcS1ha05pWXJlcWE5M2s4SlVNLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvbGh2QmhSSnlLcS1ha05pWXJlcWE5
M2s4SlVNLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMDQyL0xOUUJJSXE2UENpaDNLM2I2dTM4OTdjbHJSRS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAS27GAwDQYJKoZIhvcNAQELBQADggEBAJ8yLxedjDsiHDzc1eRPZpw8
9EBmUiPSD11t4+FwKMHn+YWy6daenw/l9EJhgaNWIAlvt24eHRRnBqmfYhMP4mL1
KNfByJjU6Vd3Ze3fw0iv/HeftHmqvFnIaysYEdmaWwKqZkJSTmGrw+opMqysT/L2
vKzL79VOzGbtjzZ+ULrzhGk0jHz8DQi13K95ZRr+3YKRW7Li/8zsLRCi6/wnNn++
QwwyWQsYLEJ6/CSXU+O483SVj22/siaIvrR75p2shHNNveQposBqJRgaJdEz/GnE
clV2mRkAJlZbFAB8YCmw1UM4rU4SuCoGV1BqZxmKo8BAHhUp6wSHntmkgPJzPnY=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:07:16 2024 by rpki-client on console-fra.rpki-client.org