Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20064/BG6i7D6_UBM0Vl7t14dY11jv0tg.roa
File:                     BG6i7D6_UBM0Vl7t14dY11jv0tg.roa (raw, json)
Hash identifier:          JedRqBlFr5KDcY8nQoMLzF5uIXmA90XVmFTPSnw8dr8=
Subject key identifier:   04:6E:A2:EC:3E:BF:50:13:34:56:5E:ED:D7:87:58:D7:58:EF:D2:D8
Certificate issuer:       /CN=10D187DB1D9F4D36B4DE448BE43767129A79D764
Certificate serial:       46
Authority key identifier: 10:D1:87:DB:1D:9F:4D:36:B4:DE:44:8B:E4:37:67:12:9A:79:D7:64
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ENGH2x2fTTa03kSL5DdnEpp512Q.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20064/BG6i7D6_UBM0Vl7t14dY11jv0tg.roa
Signing time:             Thu 29 Feb 2024 01:30:46 +0000
ROA not before:           Thu 29 Feb 2024 01:30:46 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     63774
IP address blocks:        202.226.0.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20064/ENGH2x2fTTa03kSL5DdnEpp512Q.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20064/ENGH2x2fTTa03kSL5DdnEpp512Q.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ENGH2x2fTTa03kSL5DdnEpp512Q.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70 (0x46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10D187DB1D9F4D36B4DE448BE43767129A79D764
        Validity
            Not Before: Feb 29 01:30:46 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=046EA2EC3EBF501334565EEDD78758D758EFD2D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:32:e7:5e:d4:16:0b:aa:61:f3:5e:c1:3c:b9:
                    2c:ff:e7:c5:ea:f2:6e:c2:d7:1c:4a:83:b6:f4:aa:
                    8e:d8:90:ba:bf:3f:39:32:8a:9b:d2:60:67:0d:35:
                    86:f3:f6:e1:96:93:74:59:53:b0:6e:76:a8:86:0e:
                    31:d0:f4:c8:52:32:f2:9d:a7:6f:da:7b:38:10:de:
                    70:45:ef:e9:9f:80:43:9e:55:66:20:06:c5:d9:3e:
                    87:68:36:97:05:1f:0b:2c:fb:3f:ad:ad:57:22:33:
                    63:f8:5c:e2:f2:25:7a:3f:21:69:50:9d:2f:ad:c9:
                    1c:03:cf:5f:07:19:8b:ed:9d:ce:14:e1:4a:05:03:
                    7e:fb:19:0e:ff:33:39:6c:a6:f0:86:15:52:07:7e:
                    a4:a1:6b:ac:34:ca:96:dd:a9:73:60:e7:c6:d2:b6:
                    e1:14:b9:1e:cf:26:54:fc:a6:70:ed:47:1d:b5:4f:
                    4e:46:74:fb:51:a0:99:c8:84:3b:bf:06:01:4d:1c:
                    ab:92:52:e9:44:a0:ee:14:a1:54:0d:97:71:52:a0:
                    ca:b1:87:d9:45:52:f5:8d:5f:a5:c9:64:7f:d2:b8:
                    b0:67:47:83:33:85:8f:45:21:70:b5:5c:88:aa:06:
                    0a:f8:13:74:22:93:d9:e8:c2:95:37:cb:77:f2:28:
                    b0:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:6E:A2:EC:3E:BF:50:13:34:56:5E:ED:D7:87:58:D7:58:EF:D2:D8
            X509v3 Authority Key Identifier:
                keyid:10:D1:87:DB:1D:9F:4D:36:B4:DE:44:8B:E4:37:67:12:9A:79:D7:64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20064/ENGH2x2fTTa03kSL5DdnEpp512Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ENGH2x2fTTa03kSL5DdnEpp512Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20064/BG6i7D6_UBM0Vl7t14dY11jv0tg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.226.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:38:a9:12:af:9c:9d:91:c2:77:6e:a5:7a:50:cf:f5:b3:b3:
         9b:94:0c:b8:3a:81:b0:89:a5:42:c2:6c:66:ef:36:3e:26:5d:
         b9:9b:1f:c4:cd:e6:81:39:73:5c:60:a0:c0:6e:d1:b4:d3:52:
         38:ff:c9:b2:44:4a:f7:7c:f7:8c:e6:5a:c3:a1:2e:60:46:56:
         78:b8:e1:58:51:a9:61:96:29:dc:4c:b4:de:c0:19:26:23:e8:
         c2:24:2d:09:11:53:68:96:f0:6e:73:37:0a:9a:e5:10:9f:e7:
         e1:de:3c:ec:82:5d:d1:c9:8c:70:52:47:e8:c4:ff:4d:b6:34:
         d5:bd:23:a9:d6:ff:57:b4:bf:32:3c:17:25:8a:2a:8e:25:80:
         68:58:0c:44:8d:58:a9:ef:0c:1c:93:40:8d:9f:64:20:33:21:
         52:69:3c:52:42:c1:72:28:a2:f8:9e:f8:ed:f4:a0:29:22:98:
         88:19:d3:dc:22:38:6b:6e:5f:e6:84:15:90:27:eb:3c:29:b4:
         99:41:57:c6:80:a6:8f:23:49:83:d9:04:30:c8:6b:8c:64:5e:
         5b:19:fc:67:2c:bc:80:0f:30:ce:89:4b:e3:d2:ce:21:87:6a:
         6b:cd:0d:f7:2f:8a:7a:36:b0:50:3d:50:7c:24:9b:ea:95:84:
         35:fa:25:8d
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBRjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxMEQx
ODdEQjFEOUY0RDM2QjRERTQ0OEJFNDM3NjcxMjlBNzlENzY0MB4XDTI0MDIyOTAx
MzA0NloXDTI1MDIxNDAxMzAwM1owMzExMC8GA1UEAxMoMDQ2RUEyRUMzRUJGNTAx
MzM0NTY1RUVERDc4NzU4RDc1OEVGRDJEODCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAL4y517UFguqYfNewTy5LP/nxerybsLXHEqDtvSqjtiQur8/OTKK
m9JgZw01hvP24ZaTdFlTsG52qIYOMdD0yFIy8p2nb9p7OBDecEXv6Z+AQ55VZiAG
xdk+h2g2lwUfCyz7P62tVyIzY/hc4vIlej8haVCdL63JHAPPXwcZi+2dzhThSgUD
fvsZDv8zOWym8IYVUgd+pKFrrDTKlt2pc2DnxtK24RS5Hs8mVPymcO1HHbVPTkZ0
+1GgmciEO78GAU0cq5JS6USg7hShVA2XcVKgyrGH2UVS9Y1fpclkf9K4sGdHgzOF
j0UhcLVciKoGCvgTdCKT2ejClTfLd/IosH0CAwEAAaOCAigwggIkMB0GA1UdDgQW
BBQEbqLsPr9QEzRWXu3Xh1jXWO/S2DAfBgNVHSMEGDAWgBQQ0YfbHZ9NNrTeRIvk
N2cSmnnXZDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAwNjQvRU5HSDJ4MmZUVGEwM2tTTDVEZG5FcHA1MTJRLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvRU5HSDJ4MmZUVGEwM2tTTDVEZG5F
cHA1MTJRLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMDY0L0JHNmk3RDZfVUJNMFZsN3QxNGRZMTFqdjB0Zy5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBALK4gAwDQYJKoZIhvcNAQELBQADggEBAAQ4qRKvnJ2RwndupXpQz/Wz
s5uUDLg6gbCJpULCbGbvNj4mXbmbH8TN5oE5c1xgoMBu0bTTUjj/ybJESvd894zm
WsOhLmBGVni44VhRqWGWKdxMtN7AGSYj6MIkLQkRU2iW8G5zNwqa5RCf5+HePOyC
XdHJjHBSR+jE/022NNW9I6nW/1e0vzI8FyWKKo4lgGhYDESNWKnvDByTQI2fZCAz
IVJpPFJCwXIoovie+O30oCkimIgZ09wiOGtuX+aEFZAn6zwptJlBV8aApo8jSYPZ
BDDIa4xkXlsZ/GcsvIAPMM6JS+PSziGHamvNDfcvino2sFA9UHwkm+qVhDX6JY0=
-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:17 2024 by rpki-client on console-ams.rpki-client.org