Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20084/GgUZEPVhyK_6FVgAf4bzt_-cLv0.roa
File:                     GgUZEPVhyK_6FVgAf4bzt_-cLv0.roa (raw, json)
Hash identifier:          Pp0da5eBdWHpJ4/VdoauLk5b22QSBOkR+rCNM9Mhw4U=
Subject key identifier:   1A:05:19:10:F5:61:C8:AF:FA:15:58:00:7F:86:F3:B7:FF:9C:2E:FD
Certificate issuer:       /CN=381CEBD5718139418E2BA504374D52816234E9EB
Certificate serial:       0A
Authority key identifier: 38:1C:EB:D5:71:81:39:41:8E:2B:A5:04:37:4D:52:81:62:34:E9:EB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/OBzr1XGBOUGOK6UEN01SgWI06es.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20084/GgUZEPVhyK_6FVgAf4bzt_-cLv0.roa
Signing time:             Fri 12 Jul 2024 23:41:20 +0000
ROA not before:           Fri 12 Jul 2024 23:41:20 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     131943
IP address blocks:        61.195.40.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20084/OBzr1XGBOUGOK6UEN01SgWI06es.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20084/OBzr1XGBOUGOK6UEN01SgWI06es.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/OBzr1XGBOUGOK6UEN01SgWI06es.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=381CEBD5718139418E2BA504374D52816234E9EB
        Validity
            Not Before: Jul 12 23:41:20 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=1A051910F561C8AFFA1558007F86F3B7FF9C2EFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:65:0e:53:a3:02:27:68:22:85:1c:e2:de:c4:
                    17:ab:15:53:cc:5d:ad:3e:45:c9:4a:52:6a:72:ab:
                    3e:5a:1f:10:09:99:da:cc:7a:c9:e6:ca:b0:6a:ba:
                    2a:f3:f9:d7:49:2e:62:2e:92:8b:fd:b6:99:ea:23:
                    41:fb:51:89:77:b5:f8:c9:6d:ff:dc:40:60:df:78:
                    71:6e:b5:bf:5b:1e:d3:0c:1a:9a:a8:52:a5:dd:4c:
                    10:7a:fa:f7:3e:24:41:3e:79:7f:b2:a4:4d:5c:10:
                    d6:2a:4a:ca:d9:68:1e:a4:c4:ef:be:32:1c:e3:59:
                    27:70:fb:c1:15:3f:34:44:72:19:95:cd:77:97:c9:
                    e4:03:e2:bc:62:eb:f5:3b:6f:cf:8b:60:6d:9e:5a:
                    bd:f4:e8:58:df:16:48:06:1f:e2:fa:29:b9:c9:dc:
                    ca:60:40:1d:bf:79:62:66:3c:11:89:04:7c:e2:f9:
                    e4:74:02:29:6e:a7:86:fa:4f:49:91:4f:07:12:c3:
                    90:6c:a5:37:aa:d8:28:c2:67:42:33:8e:d2:e3:8b:
                    e6:aa:79:a4:76:b9:68:12:9d:56:b3:c0:54:f5:69:
                    1c:d4:27:23:6b:89:7c:16:9c:02:d8:27:d4:e8:0d:
                    3c:58:61:58:aa:24:a3:77:5e:cc:f7:b5:b4:29:97:
                    0c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:05:19:10:F5:61:C8:AF:FA:15:58:00:7F:86:F3:B7:FF:9C:2E:FD
            X509v3 Authority Key Identifier:
                keyid:38:1C:EB:D5:71:81:39:41:8E:2B:A5:04:37:4D:52:81:62:34:E9:EB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20084/OBzr1XGBOUGOK6UEN01SgWI06es.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/OBzr1XGBOUGOK6UEN01SgWI06es.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20084/GgUZEPVhyK_6FVgAf4bzt_-cLv0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.195.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b6:51:ba:2a:d4:ff:1b:f7:c6:64:ae:a6:d0:f1:06:cd:aa:6c:
         50:f0:bf:45:45:3f:7a:bf:ad:3b:06:8e:12:6e:fb:42:42:92:
         77:32:8f:81:36:93:6d:f7:a7:9d:c5:e9:dd:98:1d:2d:92:7b:
         24:95:eb:c6:9e:98:66:d8:7d:00:48:4c:f5:a2:f9:74:37:b2:
         eb:3f:4a:ab:97:54:9b:e5:0f:3d:e9:2e:dd:56:ca:99:df:03:
         0a:9a:54:a7:70:19:1b:a6:81:d9:a0:ac:46:8d:55:51:f9:cc:
         86:c1:35:02:b5:3c:01:e9:bb:43:6b:73:af:b8:36:ce:27:6d:
         81:84:d7:97:0b:62:7d:0b:f3:36:d6:83:67:81:6c:9d:61:33:
         13:fa:5b:04:b4:8d:3a:7c:f2:ba:3f:45:78:79:bf:3a:99:a1:
         da:a1:9d:f4:36:d2:30:d8:55:c0:01:ad:bb:87:6d:b1:3d:3e:
         66:aa:28:ea:1a:d4:57:2f:1d:40:25:ab:f7:05:f3:c4:77:e0:
         c4:82:90:aa:30:96:04:52:86:d1:07:67:16:bf:8e:ae:3f:ba:
         0b:86:3f:01:6b:37:74:de:01:74:d0:07:07:0d:97:75:96:99:
         ff:d4:9a:c4:e8:bb:e1:43:b0:31:ec:96:9b:43:bd:35:09:54:
         c0:8f:5e:a8
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBCjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzODFD
RUJENTcxODEzOTQxOEUyQkE1MDQzNzRENTI4MTYyMzRFOUVCMB4XDTI0MDcxMjIz
NDEyMFoXDTI1MDYyNDEwNDY0NVowMzExMC8GA1UEAxMoMUEwNTE5MTBGNTYxQzhB
RkZBMTU1ODAwN0Y4NkYzQjdGRjlDMkVGRDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMllDlOjAidoIoUc4t7EF6sVU8xdrT5FyUpSanKrPlofEAmZ2sx6
yebKsGq6KvP510kuYi6Si/22meojQftRiXe1+Mlt/9xAYN94cW61v1se0wwamqhS
pd1MEHr69z4kQT55f7KkTVwQ1ipKytloHqTE774yHONZJ3D7wRU/NERyGZXNd5fJ
5APivGLr9Ttvz4tgbZ5avfToWN8WSAYf4vopucncymBAHb95YmY8EYkEfOL55HQC
KW6nhvpPSZFPBxLDkGylN6rYKMJnQjOO0uOL5qp5pHa5aBKdVrPAVPVpHNQnI2uJ
fBacAtgn1OgNPFhhWKoko3dezPe1tCmXDIcCAwEAAaOCAigwggIkMB0GA1UdDgQW
BBQaBRkQ9WHIr/oVWAB/hvO3/5wu/TAfBgNVHSMEGDAWgBQ4HOvVcYE5QY4rpQQ3
TVKBYjTp6zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAwODQvT0J6cjFYR0JPVUdPSzZVRU4wMVNnV0kwNmVzLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvT0J6cjFYR0JPVUdPSzZVRU4wMVNn
V0kwNmVzLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMDg0L0dnVVpFUFZoeUtfNkZWZ0FmNGJ6dF8tY0x2MC5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAI9wygwDQYJKoZIhvcNAQELBQADggEBALZRuirU/xv3xmSuptDxBs2q
bFDwv0VFP3q/rTsGjhJu+0JCkncyj4E2k233p53F6d2YHS2SeySV68aemGbYfQBI
TPWi+XQ3sus/SquXVJvlDz3pLt1WypnfAwqaVKdwGRumgdmgrEaNVVH5zIbBNQK1
PAHpu0Nrc6+4Ns4nbYGE15cLYn0L8zbWg2eBbJ1hMxP6WwS0jTp88ro/RXh5vzqZ
odqhnfQ20jDYVcABrbuHbbE9PmaqKOoa1FcvHUAlq/cF88R34MSCkKowlgRShtEH
Zxa/jq4/uguGPwFrN3TeAXTQBwcNl3WWmf/UmsTou+FDsDHslptDvTUJVMCPXqg=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:56 2025 by rpki-client