Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20116/wP60sOJfV7qeJGsKbdpXjk8Z6PY.roa
File:                     wP60sOJfV7qeJGsKbdpXjk8Z6PY.roa (raw, json)
Hash identifier:          1tdFTrXPVTOm1a1VFdTgFwv7fTgcbnBOxtB0pspQ2nA=
Subject key identifier:   C0:FE:B4:B0:E2:5F:57:BA:9E:24:6B:0A:6D:DA:57:8E:4F:19:E8:F6
Certificate issuer:       /CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
Certificate serial:       5B
Authority key identifier: C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/wP60sOJfV7qeJGsKbdpXjk8Z6PY.roa
Signing time:             Mon 01 Jul 2024 06:13:20 +0000
ROA not before:           Mon 01 Jul 2024 06:13:20 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     38631
IP address blocks:        103.2.30.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91 (0x5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
        Validity
            Not Before: Jul  1 06:13:20 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=C0FEB4B0E25F57BA9E246B0A6DDA578E4F19E8F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:0c:0e:5c:67:34:eb:78:3b:d4:7f:7b:86:fb:
                    46:b3:82:fa:8a:e7:53:ea:aa:d7:c0:31:cc:01:63:
                    7d:ff:1b:20:0e:79:48:8f:70:51:3d:e4:45:85:15:
                    4b:00:1a:7e:cc:33:f0:be:d2:96:8b:14:bf:5a:9a:
                    78:b0:9d:7d:06:cc:1d:1b:fc:46:97:5c:91:1b:a5:
                    8c:5e:56:c2:d6:88:65:23:89:8d:e1:82:3e:b9:2d:
                    13:22:46:a8:1d:7a:92:da:c7:11:44:9b:5c:4c:f4:
                    58:ff:b5:0a:ea:8d:75:62:21:8c:66:76:1c:8c:53:
                    ed:d4:27:a0:11:93:ff:65:4d:5e:5c:0a:6b:4e:ea:
                    aa:5f:0c:4d:58:30:cd:dc:e0:30:7e:0a:62:d0:ed:
                    92:4e:c9:e3:44:78:db:a6:ec:d9:62:84:38:b5:8f:
                    90:0c:70:7c:62:5e:ba:f9:7b:a0:42:69:20:b1:42:
                    06:1c:53:bb:a6:73:83:3f:81:26:ce:32:2b:7c:71:
                    15:d6:df:bd:63:1d:32:1f:96:1f:d7:c5:6e:14:80:
                    22:d0:6a:71:b5:bf:8a:11:6f:16:a9:79:4a:4f:16:
                    b1:df:2d:88:81:9a:d6:32:15:7e:5a:3d:aa:c5:f9:
                    40:50:53:24:3c:dd:48:ee:a1:ef:ad:a6:14:7d:dc:
                    b0:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:FE:B4:B0:E2:5F:57:BA:9E:24:6B:0A:6D:DA:57:8E:4F:19:E8:F6
            X509v3 Authority Key Identifier:
                keyid:C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/wP60sOJfV7qeJGsKbdpXjk8Z6PY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.2.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:1b:ee:a1:a1:ff:b8:b8:73:aa:65:f5:0f:88:92:f3:45:92:
         73:7a:5d:b2:8a:43:71:35:a9:ca:40:69:37:09:f1:f9:25:f5:
         56:40:43:d5:e7:90:b3:af:94:91:18:6d:89:e6:09:a8:ab:8c:
         67:98:2c:de:c7:c9:54:08:3b:3d:d5:63:82:00:a8:9e:cf:72:
         20:2c:a3:e5:cd:88:60:d8:1e:d1:db:41:50:a1:a2:84:a8:07:
         fa:19:d6:f6:88:65:c7:85:dc:41:98:7e:d5:03:f5:42:8b:89:
         60:53:10:fb:c3:ee:ec:47:89:c0:b3:da:81:bd:8a:6f:1d:70:
         a2:71:cf:58:0b:f5:05:df:ae:c0:f9:9d:43:0b:45:9f:7c:11:
         65:63:00:37:21:8c:36:a4:be:bb:69:32:e2:86:e3:7d:84:19:
         b9:42:73:74:e7:e3:2f:f1:25:fb:b9:44:79:01:12:fe:45:31:
         a2:d1:9a:a3:4b:8f:38:2d:44:45:c9:bd:e0:df:23:e6:b3:be:
         d7:5c:9f:cd:dd:1a:8b:5d:e1:12:a6:f4:65:23:38:05:5e:c8:
         f1:ac:2c:08:f2:77:64:30:cc:99:d1:9f:8d:8f:9b:e6:68:49:
         8e:31:80:a4:90:e5:75:f3:91:9a:91:b4:2b:e8:1b:68:3f:ae:
         41:95:f2:96
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBWzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDNDlF
NjRGQjdDOEM3QzZCNUNEN0M3NzAxODgyRTg1OTdDNDI4MzhFMB4XDTI0MDcwMTA2
MTMyMFoXDTI1MDYyNDEwNDY0NVowMzExMC8GA1UEAxMoQzBGRUI0QjBFMjVGNTdC
QTlFMjQ2QjBBNkREQTU3OEU0RjE5RThGNjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAPcMDlxnNOt4O9R/e4b7RrOC+ornU+qq18AxzAFjff8bIA55SI9w
UT3kRYUVSwAafswz8L7SlosUv1qaeLCdfQbMHRv8RpdckRuljF5WwtaIZSOJjeGC
PrktEyJGqB16ktrHEUSbXEz0WP+1CuqNdWIhjGZ2HIxT7dQnoBGT/2VNXlwKa07q
ql8MTVgwzdzgMH4KYtDtkk7J40R426bs2WKEOLWPkAxwfGJeuvl7oEJpILFCBhxT
u6Zzgz+BJs4yK3xxFdbfvWMdMh+WH9fFbhSAItBqcbW/ihFvFql5Sk8Wsd8tiIGa
1jIVflo9qsX5QFBTJDzdSO6h762mFH3csHsCAwEAAaOCAigwggIkMB0GA1UdDgQW
BBTA/rSw4l9Xup4kawpt2leOTxno9jAfBgNVHSMEGDAWgBTEnmT7fIx8a1zXx3AY
guhZfEKDjjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAxMTYveEo1ay0zeU1mR3RjMThkd0dJTG9XWHhDZzQ0LmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAveEo1ay0zeU1mR3RjMThkd0dJTG9X
WHhDZzQ0LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMTE2L3dQNjBzT0pmVjdxZUpHc0tiZHBYams4WjZQWS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAFnAh4wDQYJKoZIhvcNAQELBQADggEBACsb7qGh/7i4c6pl9Q+IkvNF
knN6XbKKQ3E1qcpAaTcJ8fkl9VZAQ9XnkLOvlJEYbYnmCairjGeYLN7HyVQIOz3V
Y4IAqJ7PciAso+XNiGDYHtHbQVChooSoB/oZ1vaIZceF3EGYftUD9UKLiWBTEPvD
7uxHicCz2oG9im8dcKJxz1gL9QXfrsD5nUMLRZ98EWVjADchjDakvrtpMuKG432E
GblCc3Tn4y/xJfu5RHkBEv5FMaLRmqNLjzgtREXJveDfI+azvtdcn83dGotd4RKm
9GUjOAVeyPGsLAjyd2QwzJnRn42Pm+ZoSY4xgKSQ5XXzkZqRtCvoG2g/rkGV8pY=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:06:35 2025 by rpki-client