Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20062/i7JTlnQQ9qlxJ_VekNOKT1chddE.roa
File:                     i7JTlnQQ9qlxJ_VekNOKT1chddE.roa (raw, json)
Hash identifier:          vU0sRh/JpcI0hLvPyz8UthI7b7QGPHDqrkK0hwJpuRM=
Subject key identifier:   8B:B2:53:96:74:10:F6:A9:71:27:F5:5E:90:D3:8A:4F:57:21:75:D1
Certificate issuer:       /CN=938067C25BCA7D1385BD36C482858F830B5A6E3A
Certificate serial:       25
Authority key identifier: 93:80:67:C2:5B:CA:7D:13:85:BD:36:C4:82:85:8F:83:0B:5A:6E:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k4BnwlvKfROFvTbEgoWPgwtabjo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20062/i7JTlnQQ9qlxJ_VekNOKT1chddE.roa
Signing time:             Thu 29 Feb 2024 01:34:05 +0000
ROA not before:           Thu 29 Feb 2024 01:34:05 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     131929
IP address blocks:        103.108.232.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20062/k4BnwlvKfROFvTbEgoWPgwtabjo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20062/k4BnwlvKfROFvTbEgoWPgwtabjo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k4BnwlvKfROFvTbEgoWPgwtabjo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37 (0x25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=938067C25BCA7D1385BD36C482858F830B5A6E3A
        Validity
            Not Before: Feb 29 01:34:05 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=8BB253967410F6A97127F55E90D38A4F572175D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:fb:17:9b:b7:21:d2:79:fb:db:26:bc:48:bf:
                    8e:28:c1:5c:78:34:0d:96:b4:af:d8:74:b3:e2:c1:
                    a8:e1:f8:63:f1:42:cb:84:5b:0d:3e:72:ef:11:c2:
                    c4:8c:f0:85:56:55:17:ed:7f:bc:a9:68:e1:99:e5:
                    25:d4:84:6c:51:72:2c:68:ae:47:6f:20:f9:ca:19:
                    0a:71:4b:b7:1d:7d:55:62:c8:98:09:30:83:64:41:
                    f4:70:ee:9a:14:a6:f8:f4:72:bc:bc:09:a3:e1:b9:
                    26:75:71:ff:40:2b:2d:fb:14:ac:85:b9:72:8a:32:
                    b8:4d:49:5d:10:8c:e9:d0:90:c9:f4:fd:4d:d5:57:
                    97:9d:f6:0d:0d:25:20:52:fb:8c:ee:fa:38:ee:32:
                    66:c5:ad:de:43:dd:3b:4f:7b:c5:40:78:46:de:8c:
                    72:d4:ae:7e:0c:33:a9:6b:7f:90:3e:a2:5c:e8:54:
                    04:c3:64:dc:74:01:2a:a2:b2:03:86:c7:65:c1:f2:
                    55:69:74:34:50:de:0a:0b:57:71:b6:1b:39:ef:f2:
                    2d:d2:36:24:9a:49:66:05:e9:2e:fd:34:0a:02:c3:
                    cb:7a:75:b1:b0:26:a9:22:c9:66:ad:f7:bd:e4:ae:
                    da:6b:c1:fa:53:c5:5c:d6:09:0f:0d:d6:3a:5b:9b:
                    8a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:B2:53:96:74:10:F6:A9:71:27:F5:5E:90:D3:8A:4F:57:21:75:D1
            X509v3 Authority Key Identifier:
                keyid:93:80:67:C2:5B:CA:7D:13:85:BD:36:C4:82:85:8F:83:0B:5A:6E:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20062/k4BnwlvKfROFvTbEgoWPgwtabjo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k4BnwlvKfROFvTbEgoWPgwtabjo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20062/i7JTlnQQ9qlxJ_VekNOKT1chddE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.108.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:fa:ac:13:3d:48:18:5a:21:0c:37:00:cc:94:82:49:31:11:
         8a:b8:6e:e6:1c:70:ee:15:b7:25:81:82:f7:9a:c3:22:05:35:
         06:de:d5:89:4f:9f:19:31:73:83:db:00:07:b4:dc:84:d0:96:
         02:8b:83:0b:b7:0b:d8:43:80:5f:1f:69:72:c4:9c:1e:1c:54:
         22:89:52:32:02:e1:9e:a6:a9:22:f0:98:b2:7d:83:81:f9:a3:
         ef:4b:75:b4:d0:60:f2:f4:6f:fa:bb:78:9f:06:a8:57:2f:ea:
         0f:50:5e:e4:06:2d:6d:7e:7d:25:8c:58:a6:ca:bf:ac:1a:b9:
         01:68:3c:b3:19:8b:6d:d7:18:da:1a:39:dd:35:66:91:85:ba:
         3f:d2:a5:09:7a:31:0f:23:b3:f4:63:3e:d8:49:fd:5e:cd:7f:
         9b:d3:e6:61:30:f2:d3:97:7e:a6:96:11:c5:35:d2:74:b5:cc:
         95:16:5f:5e:1d:49:4c:6e:b5:9e:61:f5:dd:62:75:ff:c5:ed:
         f4:d8:70:dd:fd:6a:8a:a3:9c:2e:ff:5e:6f:97:e4:1c:5c:f3:
         19:68:07:e3:2d:cf:7d:a7:f2:df:47:aa:3d:53:7c:aa:8f:7b:
         f8:d3:dd:32:aa:3d:93:b0:32:a2:f2:4a:5c:82:e4:7c:19:d5:
         be:b0:a0:2f
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBJTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5Mzgw
NjdDMjVCQ0E3RDEzODVCRDM2QzQ4Mjg1OEY4MzBCNUE2RTNBMB4XDTI0MDIyOTAx
MzQwNVoXDTI1MDIxNDAxMzAwM1owMzExMC8GA1UEAxMoOEJCMjUzOTY3NDEwRjZB
OTcxMjdGNTVFOTBEMzhBNEY1NzIxNzVEMTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKn7F5u3IdJ5+9smvEi/jijBXHg0DZa0r9h0s+LBqOH4Y/FCy4Rb
DT5y7xHCxIzwhVZVF+1/vKlo4ZnlJdSEbFFyLGiuR28g+coZCnFLtx19VWLImAkw
g2RB9HDumhSm+PRyvLwJo+G5JnVx/0ArLfsUrIW5cooyuE1JXRCM6dCQyfT9TdVX
l532DQ0lIFL7jO76OO4yZsWt3kPdO097xUB4Rt6MctSufgwzqWt/kD6iXOhUBMNk
3HQBKqKyA4bHZcHyVWl0NFDeCgtXcbYbOe/yLdI2JJpJZgXpLv00CgLDy3p1sbAm
qSLJZq33veSu2mvB+lPFXNYJDw3WOlubitUCAwEAAaOCAigwggIkMB0GA1UdDgQW
BBSLslOWdBD2qXEn9V6Q04pPVyF10TAfBgNVHSMEGDAWgBSTgGfCW8p9E4W9NsSC
hY+DC1puOjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAwNjIvazRCbndsdktmUk9GdlRiRWdvV1Bnd3RhYmpvLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvazRCbndsdktmUk9GdlRiRWdvV1Bn
d3RhYmpvLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMDYyL2k3SlRsblFROXFseEpfVmVrTk9LVDFjaGRkRS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAJnbOgwDQYJKoZIhvcNAQELBQADggEBAGL6rBM9SBhaIQw3AMyUgkkx
EYq4buYccO4VtyWBgveawyIFNQbe1YlPnxkxc4PbAAe03ITQlgKLgwu3C9hDgF8f
aXLEnB4cVCKJUjIC4Z6mqSLwmLJ9g4H5o+9LdbTQYPL0b/q7eJ8GqFcv6g9QXuQG
LW1+fSWMWKbKv6wauQFoPLMZi23XGNoaOd01ZpGFuj/SpQl6MQ8js/RjPthJ/V7N
f5vT5mEw8tOXfqaWEcU10nS1zJUWX14dSUxutZ5h9d1idf/F7fTYcN39aoqjnC7/
Xm+X5Bxc8xloB+Mtz32n8t9Hqj1TfKqPe/jT3TKqPZOwMqLySlyC5HwZ1b6woC8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 15:06:32 2024 by rpki-client on console-ams.rpki-client.org