Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20116/EePQuz4fVF2CPJpAaXMaFzWbHSk.roa
File:                     EePQuz4fVF2CPJpAaXMaFzWbHSk.roa (raw, json)
Hash identifier:          1fXJ2hE3nKtAIkhdJ+lZmlZvx8ig+PYxFBiXd1iv2BA=
Subject key identifier:   11:E3:D0:BB:3E:1F:54:5D:82:3C:9A:40:69:73:1A:17:35:9B:1D:29
Certificate issuer:       /CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
Certificate serial:       72
Authority key identifier: C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/EePQuz4fVF2CPJpAaXMaFzWbHSk.roa
Signing time:             Tue 12 Nov 2024 01:20:55 +0000
ROA not before:           Tue 12 Nov 2024 01:20:55 +0000
ROA not after:            Fri 07 Nov 2025 10:27:51 +0000
asID:                     131898
IP address blocks:        219.100.147.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Dec 2024 00:11:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114 (0x72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
        Validity
            Not Before: Nov 12 01:20:55 2024 GMT
            Not After : Nov  7 10:27:51 2025 GMT
        Subject: CN=11E3D0BB3E1F545D823C9A4069731A17359B1D29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9f:77:3a:e8:d6:0a:18:59:5f:f7:ed:75:a3:
                    d5:4d:5d:79:cb:5b:cc:fa:3e:32:0a:f1:ce:7b:2f:
                    7a:ae:82:93:e4:4a:35:69:fe:44:60:3e:cb:aa:37:
                    61:48:74:dc:58:64:21:7e:43:52:fd:be:34:94:a8:
                    52:cd:dd:4d:50:13:99:c2:89:fb:93:89:e3:03:f3:
                    a6:b0:0b:ad:63:b7:d8:30:2a:26:63:42:6f:92:a4:
                    65:58:33:80:cb:97:0f:ed:d7:95:5d:61:c5:1c:a0:
                    10:e0:12:75:12:d1:66:a8:3f:76:dc:77:75:a3:75:
                    75:f3:67:be:7f:f9:f1:6d:2a:1c:f3:b0:54:2c:a3:
                    2e:2e:70:ab:09:c1:6f:5d:16:3c:73:e2:66:87:82:
                    31:fd:2b:26:ba:6e:61:6d:38:80:33:64:a9:e6:b0:
                    40:c5:46:43:4e:63:3e:42:f9:fa:eb:73:a1:34:5b:
                    4c:9f:16:de:f7:8e:09:4f:40:f7:c1:76:2b:38:0c:
                    03:6a:b5:41:cf:2d:18:5b:b2:74:90:78:ac:b5:38:
                    30:65:ce:ed:a4:06:2f:01:17:1b:1e:7a:89:a1:1f:
                    17:eb:c7:bb:fe:af:ee:31:2c:47:e5:f6:cc:1c:69:
                    e9:bd:64:36:a0:b7:70:71:fc:b5:e0:d2:98:76:0d:
                    1f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:E3:D0:BB:3E:1F:54:5D:82:3C:9A:40:69:73:1A:17:35:9B:1D:29
            X509v3 Authority Key Identifier:
                keyid:C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/EePQuz4fVF2CPJpAaXMaFzWbHSk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.100.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:01:34:0f:6a:d6:93:4d:61:fa:4e:d8:54:bc:a9:b7:e0:07:
         2d:86:58:24:80:6b:f3:8f:8e:d2:2a:db:03:ff:07:42:0d:d4:
         4c:48:fa:e7:a1:9c:46:36:f5:1a:5e:19:31:16:65:f3:1a:a1:
         c6:d3:81:81:02:1c:14:4a:45:4c:71:46:6f:b0:87:5c:22:de:
         19:67:e0:a9:34:a9:83:81:e2:2c:4d:55:9d:67:99:07:12:4a:
         b0:81:70:9b:4b:1b:f4:ad:44:cc:d7:38:35:d4:5f:a6:9f:30:
         ec:4d:1f:ca:99:99:09:81:b0:18:a5:9b:27:15:5d:40:79:9a:
         19:d5:cc:0b:aa:02:18:86:42:80:11:18:cc:d5:39:fa:fe:d6:
         78:6b:d5:94:dd:b0:d8:a8:e4:4c:4b:e7:d0:1f:a5:c8:eb:44:
         23:9b:af:94:f6:98:bf:9e:f2:0d:36:dc:69:08:f2:17:7b:06:
         dd:e1:b1:83:a9:12:88:9b:f7:e1:ee:8a:0a:19:44:12:a2:53:
         46:88:eb:09:18:e0:b1:9c:e7:42:c1:0d:29:c0:71:7d:a2:ad:
         a7:02:ee:74:02:ee:b4:24:84:e0:46:39:32:d7:5c:3e:cf:b4:
         a3:ac:e7:1d:73:c9:7a:0c:46:6e:09:8d:9e:cf:d2:bd:d5:bb:
         73:fd:7b:6a
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBcjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDNDlF
NjRGQjdDOEM3QzZCNUNEN0M3NzAxODgyRTg1OTdDNDI4MzhFMB4XDTI0MTExMjAx
MjA1NVoXDTI1MTEwNzEwMjc1MVowMzExMC8GA1UEAxMoMTFFM0QwQkIzRTFGNTQ1
RDgyM0M5QTQwNjk3MzFBMTczNTlCMUQyOTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALmfdzro1goYWV/37XWj1U1dectbzPo+Mgrxznsveq6Ck+RKNWn+
RGA+y6o3YUh03FhkIX5DUv2+NJSoUs3dTVATmcKJ+5OJ4wPzprALrWO32DAqJmNC
b5KkZVgzgMuXD+3XlV1hxRygEOASdRLRZqg/dtx3daN1dfNnvn/58W0qHPOwVCyj
Li5wqwnBb10WPHPiZoeCMf0rJrpuYW04gDNkqeawQMVGQ05jPkL5+utzoTRbTJ8W
3veOCU9A98F2KzgMA2q1Qc8tGFuydJB4rLU4MGXO7aQGLwEXGx56iaEfF+vHu/6v
7jEsR+X2zBxp6b1kNqC3cHH8teDSmHYNH5sCAwEAAaOCAigwggIkMB0GA1UdDgQW
BBQR49C7Ph9UXYI8mkBpcxoXNZsdKTAfBgNVHSMEGDAWgBTEnmT7fIx8a1zXx3AY
guhZfEKDjjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAxMTYveEo1ay0zeU1mR3RjMThkd0dJTG9XWHhDZzQ0LmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAveEo1ay0zeU1mR3RjMThkd0dJTG9X
WHhDZzQ0LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMTE2L0VlUFF1ejRmVkYyQ1BKcEFhWE1hRnpXYkhTay5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBADbZJMwDQYJKoZIhvcNAQELBQADggEBAAgBNA9q1pNNYfpO2FS8qbfg
By2GWCSAa/OPjtIq2wP/B0IN1ExI+uehnEY29RpeGTEWZfMaocbTgYECHBRKRUxx
Rm+wh1wi3hln4Kk0qYOB4ixNVZ1nmQcSSrCBcJtLG/StRMzXODXUX6afMOxNH8qZ
mQmBsBilmycVXUB5mhnVzAuqAhiGQoARGMzVOfr+1nhr1ZTdsNio5ExL59Afpcjr
RCObr5T2mL+e8g023GkI8hd7Bt3hsYOpEoib9+HuigoZRBKiU0aI6wkY4LGc50LB
DSnAcX2iracC7nQC7rQkhOBGOTLXXD7PtKOs5x1zyXoMRm4JjZ7P0r3Vu3P9e2o=
-----END CERTIFICATE-----
Generated at Tue Nov 26 02:17:04 2024 by rpki-client on console-fra.rpki-client.org