Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20042/mzxqsrRIo7P8qd7-WyZzDzbTH24.roa
File:                     mzxqsrRIo7P8qd7-WyZzDzbTH24.roa (raw, json)
Hash identifier:          RuznOLrlANLmCE+rN+bAcTOn4gucmTZs07lEq3qow/w=
Subject key identifier:   9B:3C:6A:B2:B4:48:A3:B3:FC:A9:DE:FE:5B:26:73:0F:36:D3:1F:6E
Certificate issuer:       /CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
Certificate serial:       5E
Authority key identifier: 96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/mzxqsrRIo7P8qd7-WyZzDzbTH24.roa
Signing time:             Wed 04 Sep 2024 06:25:31 +0000
ROA not before:           Wed 04 Sep 2024 06:25:31 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     15830
IP address blocks:        115.30.0.0/19 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 94 (0x5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
        Validity
            Not Before: Sep  4 06:25:31 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=9B3C6AB2B448A3B3FCA9DEFE5B26730F36D31F6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7c:76:72:7f:bd:86:3e:91:a2:a6:ef:c3:4f:
                    db:5f:de:7a:a7:7f:e7:ef:71:e1:2e:f4:19:70:90:
                    e3:aa:60:8b:f3:f7:e3:1f:84:7d:f4:d3:23:97:69:
                    57:c1:49:58:4d:b3:10:67:65:c5:4f:66:e2:7c:81:
                    98:60:93:51:79:2b:6f:f8:f6:51:09:de:cd:8f:e7:
                    28:2c:a4:2e:4c:50:d0:16:84:8b:fc:73:68:7e:c9:
                    1d:1c:e2:de:e5:90:78:84:7a:a7:61:c7:1e:66:2b:
                    ef:b3:bb:57:85:f1:8f:3b:26:6b:23:1a:66:8b:50:
                    e4:23:e7:10:04:f5:e8:99:81:5b:60:e9:17:f5:bf:
                    f4:e4:e7:76:88:23:bc:69:34:e4:d6:3f:69:fe:25:
                    e9:1e:11:81:e7:2f:c9:b3:38:64:3e:29:fc:2c:d4:
                    10:b7:1e:79:1d:95:e1:b8:bc:d1:26:1f:14:c7:11:
                    47:1c:e8:7a:b5:b9:5a:06:39:88:8f:b0:46:cd:6a:
                    ad:1f:d1:c1:df:14:cb:17:84:93:dd:96:0c:57:b1:
                    ec:8a:52:d3:ac:db:6e:d4:26:8b:68:9a:c1:28:ba:
                    0f:c3:3f:bd:f5:46:15:44:be:dc:3d:f8:9a:93:0c:
                    00:47:ba:69:be:dc:4a:2e:1a:a1:5b:21:a3:75:5e:
                    8d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:3C:6A:B2:B4:48:A3:B3:FC:A9:DE:FE:5B:26:73:0F:36:D3:1F:6E
            X509v3 Authority Key Identifier:
                keyid:96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/mzxqsrRIo7P8qd7-WyZzDzbTH24.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.30.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8d:2f:16:05:87:99:47:24:89:39:56:18:64:9b:ab:18:d3:e2:
         a2:8d:bd:48:bc:4f:7b:73:10:28:ac:5c:53:ac:22:a6:7e:61:
         a9:99:d9:c0:00:d9:2b:c9:65:38:11:7d:ff:99:b6:e6:bd:08:
         cc:74:fe:ac:21:85:e6:08:6a:b2:32:61:f8:2c:57:4e:61:bc:
         c8:a5:cf:ab:8e:b9:13:12:8f:96:f3:89:3e:27:ce:80:75:c1:
         25:b2:0c:d3:7c:90:a6:95:18:92:16:5d:c4:3e:a1:d3:df:93:
         7c:54:88:34:ef:5c:5e:cc:43:d6:8f:59:38:08:45:cb:30:bf:
         b0:c4:c3:63:38:cb:0c:80:2b:5d:df:00:14:f2:d4:cb:50:ed:
         3b:d2:af:75:23:4f:b6:8e:53:24:b6:c7:e0:30:93:b0:a4:95:
         c1:1d:45:d4:07:4d:c2:40:f6:71:e1:00:b1:60:b1:6c:ff:3f:
         44:62:39:3d:f7:1c:b0:12:05:aa:a7:ff:0e:5d:a0:70:31:5e:
         32:80:14:2e:2d:af:75:c3:65:0d:54:d9:b0:1c:6b:f5:b7:21:
         8c:2b:f3:28:9f:54:0d:1a:f1:9f:45:e8:18:5f:5c:e6:b6:1a:
         64:55:4d:e9:a0:e2:88:d7:44:79:b2:74:84:8a:6a:60:09:67:
         7a:8d:8f:1c
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBXjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5NjFC
QzE4NTEyNzIyQUFGOUE5MEQ4OThBREVBOUFGNzc5M0MyNTQzMB4XDTI0MDkwNDA2
MjUzMVoXDTI1MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoOUIzQzZBQjJCNDQ4QTNC
M0ZDQTlERUZFNUIyNjczMEYzNkQzMUY2RTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKp8dnJ/vYY+kaKm78NP21/eeqd/5+9x4S70GXCQ46pgi/P34x+E
ffTTI5dpV8FJWE2zEGdlxU9m4nyBmGCTUXkrb/j2UQnezY/nKCykLkxQ0BaEi/xz
aH7JHRzi3uWQeIR6p2HHHmYr77O7V4XxjzsmayMaZotQ5CPnEAT16JmBW2DpF/W/
9OTndogjvGk05NY/af4l6R4RgecvybM4ZD4p/CzUELceeR2V4bi80SYfFMcRRxzo
erW5WgY5iI+wRs1qrR/Rwd8UyxeEk92WDFex7IpS06zbbtQmi2iawSi6D8M/vfVG
FUS+3D34mpMMAEe6ab7cSi4aoVsho3VejQ8CAwEAAaOCAigwggIkMB0GA1UdDgQW
BBSbPGqytEijs/yp3v5bJnMPNtMfbjAfBgNVHSMEGDAWgBSWG8GFEnIqr5qQ2Jit
6pr3eTwlQzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAwNDIvbGh2QmhSSnlLcS1ha05pWXJlcWE5M2s4SlVNLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvbGh2QmhSSnlLcS1ha05pWXJlcWE5
M2s4SlVNLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMDQyL216eHFzclJJbzdQOHFkNy1XeVp6RHpiVEgyNC5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAVzHgAwDQYJKoZIhvcNAQELBQADggEBAI0vFgWHmUckiTlWGGSbqxjT
4qKNvUi8T3tzECisXFOsIqZ+YamZ2cAA2SvJZTgRff+Ztua9CMx0/qwhheYIarIy
YfgsV05hvMilz6uOuRMSj5bziT4nzoB1wSWyDNN8kKaVGJIWXcQ+odPfk3xUiDTv
XF7MQ9aPWTgIRcswv7DEw2M4ywyAK13fABTy1MtQ7TvSr3UjT7aOUyS2x+Awk7Ck
lcEdRdQHTcJA9nHhALFgsWz/P0RiOT33HLASBaqn/w5doHAxXjKAFC4tr3XDZQ1U
2bAca/W3IYwr8yifVA0a8Z9F6BhfXOa2GmRVTemg4ojXRHmydISKamAJZ3qNjxw=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:38:16 2025 by rpki-client