Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20042/iUqFvNWrJj4-XE-vsKXctwGNjUw.roa
File:                     iUqFvNWrJj4-XE-vsKXctwGNjUw.roa (raw, json)
Hash identifier:          zqoM1N8eqx13d8e0XeDaXPAUabM5Mv8dorflf/KBCcU=
Subject key identifier:   89:4A:85:BC:D5:AB:26:3E:3E:5C:4F:AF:B0:A5:DC:B7:01:8D:8D:4C
Certificate issuer:       /CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
Certificate serial:       66
Authority key identifier: 96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/iUqFvNWrJj4-XE-vsKXctwGNjUw.roa
Signing time:             Wed 04 Sep 2024 06:29:24 +0000
ROA not before:           Wed 04 Sep 2024 06:29:24 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     15830
IP address blocks:        182.236.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102 (0x66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
        Validity
            Not Before: Sep  4 06:29:24 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=894A85BCD5AB263E3E5C4FAFB0A5DCB7018D8D4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:81:19:60:6a:1a:13:76:3f:6e:99:da:ba:97:
                    36:7f:5d:1c:a0:e0:a7:73:75:47:a9:dc:88:06:15:
                    bc:0f:55:05:e7:76:c0:d1:51:17:17:ce:0d:a3:e8:
                    23:9c:c8:69:fc:28:77:39:93:19:ad:8d:7a:50:ba:
                    67:25:2c:fc:af:18:f8:4a:2a:1a:b4:82:dc:44:ae:
                    ab:bc:2c:5c:d7:e7:17:35:90:0c:6a:72:4f:ee:33:
                    fd:2f:84:0e:77:9d:ce:37:91:48:ef:9d:a5:7b:6a:
                    14:90:cf:35:bc:35:19:c1:58:36:7c:f7:9b:3d:08:
                    43:41:f3:a9:a7:2a:74:99:28:94:05:ab:76:6b:14:
                    c8:03:35:71:98:e6:6f:c6:f6:da:1a:f8:05:5d:9b:
                    27:8f:ee:ee:01:97:d5:46:15:ca:d9:d9:c0:0e:20:
                    cc:d7:ba:4b:60:34:51:11:a1:bf:a3:62:80:c8:f4:
                    14:ea:35:a4:bf:9e:98:f5:f2:01:85:fa:74:96:5a:
                    39:b2:59:d5:31:67:ae:d1:54:06:33:b7:69:3a:8f:
                    a5:1e:8f:34:0d:63:fe:0e:79:b8:01:2e:24:67:75:
                    f5:8e:da:b0:fa:4f:0d:05:e5:26:76:7b:3c:bb:42:
                    cd:5e:55:62:7f:c8:b6:9d:91:f2:a1:e3:3b:0b:b4:
                    45:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:4A:85:BC:D5:AB:26:3E:3E:5C:4F:AF:B0:A5:DC:B7:01:8D:8D:4C
            X509v3 Authority Key Identifier:
                keyid:96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/iUqFvNWrJj4-XE-vsKXctwGNjUw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.236.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         61:3d:30:3a:13:b1:47:9f:e0:e9:27:52:e3:74:14:54:91:b7:
         8a:b6:57:f0:d7:16:8c:56:2b:ff:fa:9f:32:fb:c1:ae:34:34:
         05:d7:c8:c7:1b:98:8d:4b:4c:a3:f5:bf:8c:a6:64:b2:82:8a:
         61:bf:ef:67:1f:ce:7a:d1:c2:ba:1f:61:49:23:08:aa:c5:8d:
         9a:dd:44:87:5f:84:9b:89:ab:79:ff:ae:54:18:a8:9a:76:31:
         b4:a8:55:b5:4a:87:e0:bd:f5:c0:d0:74:c7:eb:71:6d:d8:2f:
         09:56:c6:38:d0:fe:29:82:27:95:72:d9:da:1d:dd:50:e9:10:
         da:67:14:c8:93:fe:ef:9a:ea:5e:41:5d:15:ff:8b:8f:50:71:
         3e:7a:00:97:96:4b:0a:c6:7a:bd:dd:64:72:b9:91:f8:e3:bc:
         00:02:55:68:a1:7e:19:30:ab:c1:45:52:bd:2a:c3:c9:77:46:
         a1:10:ed:5e:99:5d:6a:7b:35:fd:66:9f:15:8f:26:32:d4:21:
         a5:06:99:7c:09:b6:2f:28:9e:bb:50:50:1a:10:f4:df:5c:cc:
         45:b6:5c:b3:4d:59:38:c8:43:9c:a9:0e:e5:08:fa:e9:fb:d3:
         86:54:84:eb:a6:6f:cb:bc:49:22:90:34:e8:a5:1f:05:13:38:
         a8:26:cf:eb
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBZjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5NjFC
QzE4NTEyNzIyQUFGOUE5MEQ4OThBREVBOUFGNzc5M0MyNTQzMB4XDTI0MDkwNDA2
MjkyNFoXDTI1MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoODk0QTg1QkNENUFCMjYz
RTNFNUM0RkFGQjBBNURDQjcwMThEOEQ0QzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALSBGWBqGhN2P26Z2rqXNn9dHKDgp3N1R6nciAYVvA9VBed2wNFR
FxfODaPoI5zIafwodzmTGa2NelC6ZyUs/K8Y+EoqGrSC3ESuq7wsXNfnFzWQDGpy
T+4z/S+EDnedzjeRSO+dpXtqFJDPNbw1GcFYNnz3mz0IQ0HzqacqdJkolAWrdmsU
yAM1cZjmb8b22hr4BV2bJ4/u7gGX1UYVytnZwA4gzNe6S2A0URGhv6NigMj0FOo1
pL+emPXyAYX6dJZaObJZ1TFnrtFUBjO3aTqPpR6PNA1j/g55uAEuJGd19Y7asPpP
DQXlJnZ7PLtCzV5VYn/Itp2R8qHjOwu0RYUCAwEAAaOCAigwggIkMB0GA1UdDgQW
BBSJSoW81asmPj5cT6+wpdy3AY2NTDAfBgNVHSMEGDAWgBSWG8GFEnIqr5qQ2Jit
6pr3eTwlQzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAwNDIvbGh2QmhSSnlLcS1ha05pWXJlcWE5M2s4SlVNLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvbGh2QmhSSnlLcS1ha05pWXJlcWE5
M2s4SlVNLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMDQyL2lVcUZ2TldySmo0LVhFLXZzS1hjdHdHTmpVdy5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAW27EAwDQYJKoZIhvcNAQELBQADggEBAGE9MDoTsUef4OknUuN0FFSR
t4q2V/DXFoxWK//6nzL7wa40NAXXyMcbmI1LTKP1v4ymZLKCimG/72cfznrRwrof
YUkjCKrFjZrdRIdfhJuJq3n/rlQYqJp2MbSoVbVKh+C99cDQdMfrcW3YLwlWxjjQ
/imCJ5Vy2dod3VDpENpnFMiT/u+a6l5BXRX/i49QcT56AJeWSwrGer3dZHK5kfjj
vAACVWihfhkwq8FFUr0qw8l3RqEQ7V6ZXWp7Nf1mnxWPJjLUIaUGmXwJti8onrtQ
UBoQ9N9czEW2XLNNWTjIQ5ypDuUI+un704ZUhOumb8u8SSKQNOilHwUTOKgmz+s=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:28:42 2025 by rpki-client