Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20042/MDKIOzMZv1uqOb-z-hDwyTkTe_Y.roa
File:                     MDKIOzMZv1uqOb-z-hDwyTkTe_Y.roa (raw, json)
Hash identifier:          FmyL8oEDt+u0biA6H3KoF7MrMbbR9ldLOT9Yw759l84=
Subject key identifier:   30:32:88:3B:33:19:BF:5B:AA:39:BF:B3:FA:10:F0:C9:39:13:7B:F6
Certificate issuer:       /CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
Certificate serial:       5D
Authority key identifier: 96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/MDKIOzMZv1uqOb-z-hDwyTkTe_Y.roa
Signing time:             Wed 04 Sep 2024 06:25:31 +0000
ROA not before:           Wed 04 Sep 2024 06:25:31 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     15830
IP address blocks:        110.74.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93 (0x5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
        Validity
            Not Before: Sep  4 06:25:31 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=3032883B3319BF5BAA39BFB3FA10F0C939137BF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c0:54:92:1b:31:41:0a:5f:0e:a3:c6:33:51:
                    52:ee:5d:53:ea:92:42:4c:27:78:9a:bc:64:c9:1b:
                    95:4f:bf:1e:fe:3a:ef:8d:57:6e:16:74:9c:83:8e:
                    95:ab:c8:e8:6b:14:65:01:be:7d:17:4c:ee:68:b8:
                    93:2b:79:14:db:72:ef:3d:5f:d1:a0:aa:72:9c:6a:
                    6e:e8:96:9c:c9:59:be:53:0e:a0:89:97:e1:d8:c3:
                    c5:f4:85:1e:a6:22:47:59:72:05:e4:5b:b5:53:ff:
                    85:f5:c6:1b:b1:69:c4:38:8c:87:5e:e4:d7:16:3f:
                    6e:86:eb:67:fe:4b:52:69:f2:04:a2:ce:da:07:1a:
                    1b:6a:08:4b:9d:d3:a0:1a:6d:fb:e0:72:71:49:33:
                    fa:42:7a:77:9e:59:95:b9:71:82:81:67:42:1b:17:
                    6c:c6:24:bf:9d:2f:6c:61:0d:f1:ca:8a:64:9b:50:
                    44:c7:3a:06:15:98:41:15:c1:27:f3:03:cd:cb:80:
                    db:2c:de:06:37:58:f0:06:1f:29:a5:1b:75:be:9d:
                    84:c8:6d:7d:ee:57:44:2c:35:72:9b:ed:05:fa:50:
                    65:ea:47:8c:42:21:8b:72:35:0b:a9:ef:95:14:89:
                    e1:17:f8:b8:29:12:6d:df:d6:e6:0a:00:cb:78:63:
                    70:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:32:88:3B:33:19:BF:5B:AA:39:BF:B3:FA:10:F0:C9:39:13:7B:F6
            X509v3 Authority Key Identifier:
                keyid:96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/MDKIOzMZv1uqOb-z-hDwyTkTe_Y.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.74.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         22:5a:47:79:d4:92:b0:71:af:a6:58:ba:08:ee:cc:96:56:37:
         a5:82:2d:86:a7:88:d8:75:64:5b:dd:2d:4b:dc:34:49:f9:d4:
         9a:4f:2c:94:36:0d:0c:48:32:53:71:23:87:d0:99:93:e1:48:
         ff:7d:0d:98:d3:af:f6:31:14:b6:14:46:54:2a:a4:69:e2:82:
         27:c3:6f:5c:6e:58:44:9d:4d:46:95:4b:77:25:a8:97:8e:cd:
         1f:99:1d:77:39:53:e4:f7:4c:d1:1b:41:6a:17:35:6a:a8:aa:
         36:49:0c:00:25:88:ff:2f:9f:6d:21:28:25:07:07:09:04:9f:
         3b:9c:50:02:0c:6d:15:c3:db:02:d9:72:62:d3:de:95:f6:da:
         4a:2f:dc:a0:01:13:7a:c1:4d:24:8c:d5:aa:c7:79:dc:be:b8:
         27:ff:4c:ba:77:60:ba:47:aa:74:a9:82:25:b0:0f:9c:78:2f:
         99:23:04:b8:85:e3:43:a3:26:06:14:d8:1d:a8:bf:b5:c8:6f:
         92:b1:74:99:fa:05:64:37:49:39:f0:6b:39:27:aa:8a:55:94:
         78:5c:ee:64:ee:79:9a:59:1a:ec:64:e1:b6:c7:db:50:3b:94:
         de:1b:76:14:28:dc:db:b8:22:ab:bf:c5:61:74:13:30:9a:49:
         5a:ca:39:42
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBXTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5NjFC
QzE4NTEyNzIyQUFGOUE5MEQ4OThBREVBOUFGNzc5M0MyNTQzMB4XDTI0MDkwNDA2
MjUzMVoXDTI1MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoMzAzMjg4M0IzMzE5QkY1
QkFBMzlCRkIzRkExMEYwQzkzOTEzN0JGNjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAM7AVJIbMUEKXw6jxjNRUu5dU+qSQkwneJq8ZMkblU+/Hv46741X
bhZ0nIOOlavI6GsUZQG+fRdM7mi4kyt5FNty7z1f0aCqcpxqbuiWnMlZvlMOoImX
4djDxfSFHqYiR1lyBeRbtVP/hfXGG7FpxDiMh17k1xY/bobrZ/5LUmnyBKLO2gca
G2oIS53ToBpt++BycUkz+kJ6d55ZlblxgoFnQhsXbMYkv50vbGEN8cqKZJtQRMc6
BhWYQRXBJ/MDzcuA2yzeBjdY8AYfKaUbdb6dhMhtfe5XRCw1cpvtBfpQZepHjEIh
i3I1C6nvlRSJ4Rf4uCkSbd/W5goAy3hjcIsCAwEAAaOCAigwggIkMB0GA1UdDgQW
BBQwMog7Mxm/W6o5v7P6EPDJORN79jAfBgNVHSMEGDAWgBSWG8GFEnIqr5qQ2Jit
6pr3eTwlQzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAwNDIvbGh2QmhSSnlLcS1ha05pWXJlcWE5M2s4SlVNLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvbGh2QmhSSnlLcS1ha05pWXJlcWE5
M2s4SlVNLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMDQyL01ES0lPek1adjF1cU9iLXotaER3eVRrVGVfWS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAVuSgAwDQYJKoZIhvcNAQELBQADggEBACJaR3nUkrBxr6ZYugjuzJZW
N6WCLYaniNh1ZFvdLUvcNEn51JpPLJQ2DQxIMlNxI4fQmZPhSP99DZjTr/YxFLYU
RlQqpGnigifDb1xuWESdTUaVS3clqJeOzR+ZHXc5U+T3TNEbQWoXNWqoqjZJDAAl
iP8vn20hKCUHBwkEnzucUAIMbRXD2wLZcmLT3pX22kov3KABE3rBTSSM1arHedy+
uCf/TLp3YLpHqnSpgiWwD5x4L5kjBLiF40OjJgYU2B2ov7XIb5KxdJn6BWQ3STnw
azknqopVlHhc7mTueZpZGuxk4bbH21A7lN4bdhQo3Nu4Iqu/xWF0EzCaSVrKOUI=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:31:22 2025 by rpki-client