Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20095/CheUTYRg2moBmveYXxnz73FRrGM.roa
File:                     CheUTYRg2moBmveYXxnz73FRrGM.roa (raw, json)
Hash identifier:          7qyG1qPbtFo3DMIFn7irmVRxUg14QWmUTdzO0pyEsQg=
Subject key identifier:   0A:17:94:4D:84:60:DA:6A:01:9A:F7:98:5F:19:F3:EF:71:51:AC:63
Certificate issuer:       /CN=29FE1E79542EB2CEFA4E283BFCAF18A398BC7611
Certificate serial:       02
Authority key identifier: 29:FE:1E:79:54:2E:B2:CE:FA:4E:28:3B:FC:AF:18:A3:98:BC:76:11
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kf4eeVQuss76Tig7_K8Yo5i8dhE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20095/CheUTYRg2moBmveYXxnz73FRrGM.roa
Signing time:             Mon 08 Apr 2024 05:18:02 +0000
ROA not before:           Mon 08 Apr 2024 05:18:02 +0000
ROA not after:            Fri 21 Mar 2025 11:49:17 +0000
asID:                     63779
IP address blocks:        103.139.238.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20095/Kf4eeVQuss76Tig7_K8Yo5i8dhE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20095/Kf4eeVQuss76Tig7_K8Yo5i8dhE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kf4eeVQuss76Tig7_K8Yo5i8dhE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29FE1E79542EB2CEFA4E283BFCAF18A398BC7611
        Validity
            Not Before: Apr  8 05:18:02 2024 GMT
            Not After : Mar 21 11:49:17 2025 GMT
        Subject: CN=0A17944D8460DA6A019AF7985F19F3EF7151AC63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c2:7f:d4:57:bd:35:64:e2:00:41:b4:f4:f3:
                    57:e1:f2:06:7a:4a:d0:4f:bd:6f:6a:5e:97:1a:74:
                    05:76:35:32:e1:ec:7e:1a:f6:1c:80:9b:69:97:fe:
                    62:35:37:1d:83:c1:da:6e:4f:87:96:18:c5:bf:79:
                    c7:2a:4c:f6:9a:bf:82:16:0b:73:83:4d:2b:93:e5:
                    f6:a0:f6:06:78:b8:90:1b:4c:f8:7a:c5:21:8e:ba:
                    a4:67:ae:4b:33:41:f0:b2:ae:36:a2:99:db:ab:8c:
                    10:e2:c1:f4:96:41:fe:69:2d:03:95:08:6a:2c:48:
                    29:f6:de:40:b1:de:3e:1f:2d:79:e3:9c:7d:d1:37:
                    f0:be:04:c1:e6:b9:79:26:2e:8d:de:87:84:3f:5a:
                    86:ec:ee:24:8c:18:40:f8:21:15:60:7d:a1:e7:d3:
                    fa:4e:75:97:30:2d:cb:35:0d:ef:3b:26:e4:00:a9:
                    cc:a6:13:72:e8:49:32:01:5c:b1:77:b9:03:ce:6c:
                    09:44:9c:ef:e7:f7:de:17:c9:61:9d:f8:d4:b8:ea:
                    ac:3b:0c:84:6b:76:e4:6d:33:64:d8:c4:30:1f:bb:
                    51:a6:b9:59:05:b5:3b:0f:57:41:af:1c:74:2f:84:
                    83:6a:45:1c:f8:b6:04:0d:d9:59:67:40:14:2a:fa:
                    4b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:17:94:4D:84:60:DA:6A:01:9A:F7:98:5F:19:F3:EF:71:51:AC:63
            X509v3 Authority Key Identifier:
                keyid:29:FE:1E:79:54:2E:B2:CE:FA:4E:28:3B:FC:AF:18:A3:98:BC:76:11

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20095/Kf4eeVQuss76Tig7_K8Yo5i8dhE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kf4eeVQuss76Tig7_K8Yo5i8dhE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20095/CheUTYRg2moBmveYXxnz73FRrGM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9e:0c:0f:69:74:c6:ea:9d:30:0e:fb:96:fa:c5:cc:91:3c:9d:
         e7:a5:4f:33:06:b0:99:88:c9:08:91:d9:31:a1:55:5c:f8:f0:
         2c:b6:a5:35:c7:f9:bb:3b:d4:28:9a:2a:dd:05:a3:64:8b:58:
         02:aa:08:de:c0:b1:ed:d1:fe:ea:31:8e:e8:b4:66:ab:76:89:
         c9:03:66:6a:0f:c3:27:f9:19:9b:ca:a5:7b:61:03:7f:ab:91:
         e2:a7:21:96:a9:72:5c:f1:9e:5f:10:36:2e:18:68:06:11:a4:
         c0:be:e5:4c:b9:93:12:45:0b:7f:8d:41:44:a4:4a:31:38:cc:
         0f:88:71:33:a3:1c:d0:2b:e6:93:92:c6:34:e0:9c:ea:08:86:
         12:87:5e:c4:e2:82:28:48:79:b2:82:24:7a:ef:7d:e6:e8:9b:
         0a:62:f0:fd:a2:fa:e5:b5:c8:57:4b:0b:c8:85:4c:48:9b:06:
         23:b3:a7:60:c3:67:d0:2d:38:fc:d9:ba:2f:d2:f0:8a:36:db:
         30:aa:88:d7:f5:ef:24:7c:93:84:28:f9:f3:11:62:02:0a:e7:
         3b:3e:1a:7c:ef:a6:ea:dd:d8:3a:51:65:30:ef:6f:90:35:9c:
         f4:ef:0d:3c:8c:2c:26:43:5a:18:7a:09:ae:6b:92:51:e4:13:
         0e:eb:15:c5
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyOUZF
MUU3OTU0MkVCMkNFRkE0RTI4M0JGQ0FGMThBMzk4QkM3NjExMB4XDTI0MDQwODA1
MTgwMloXDTI1MDMyMTExNDkxN1owMzExMC8GA1UEAxMoMEExNzk0NEQ4NDYwREE2
QTAxOUFGNzk4NUYxOUYzRUY3MTUxQUM2MzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANbCf9RXvTVk4gBBtPTzV+HyBnpK0E+9b2pelxp0BXY1MuHsfhr2
HICbaZf+YjU3HYPB2m5Ph5YYxb95xypM9pq/ghYLc4NNK5Pl9qD2Bni4kBtM+HrF
IY66pGeuSzNB8LKuNqKZ26uMEOLB9JZB/mktA5UIaixIKfbeQLHePh8teeOcfdE3
8L4Ewea5eSYujd6HhD9ahuzuJIwYQPghFWB9oefT+k51lzAtyzUN7zsm5ACpzKYT
cuhJMgFcsXe5A85sCUSc7+f33hfJYZ341LjqrDsMhGt25G0zZNjEMB+7Uaa5WQW1
Ow9XQa8cdC+Eg2pFHPi2BA3ZWWdAFCr6Sx8CAwEAAaOCAigwggIkMB0GA1UdDgQW
BBQKF5RNhGDaagGa95hfGfPvcVGsYzAfBgNVHSMEGDAWgBQp/h55VC6yzvpOKDv8
rxijmLx2ETAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAwOTUvS2Y0ZWVWUXVzczc2VGlnN19LOFlvNWk4ZGhFLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS2Y0ZWVWUXVzczc2VGlnN19LOFlv
NWk4ZGhFLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMDk1L0NoZVVUWVJnMm1vQm12ZVlYeG56NzNGUnJHTS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAFni+4wDQYJKoZIhvcNAQELBQADggEBAJ4MD2l0xuqdMA77lvrFzJE8
neelTzMGsJmIyQiR2TGhVVz48Cy2pTXH+bs71CiaKt0Fo2SLWAKqCN7Ase3R/uox
jui0Zqt2ickDZmoPwyf5GZvKpXthA3+rkeKnIZapclzxnl8QNi4YaAYRpMC+5Uy5
kxJFC3+NQUSkSjE4zA+IcTOjHNAr5pOSxjTgnOoIhhKHXsTigihIebKCJHrvfebo
mwpi8P2i+uW1yFdLC8iFTEibBiOzp2DDZ9AtOPzZui/S8Io22zCqiNf17yR8k4Qo
+fMRYgIK5zs+Gnzvpurd2DpRZTDvb5A1nPTvDTyMLCZDWhh6Ca5rklHkEw7rFcU=
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:10 2024 by rpki-client on console-fra.rpki-client.org