Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20116/zZoA5XjoagN40PJDiVHBiqQBuzM.roa
File:                     zZoA5XjoagN40PJDiVHBiqQBuzM.roa (raw, json)
Hash identifier:          2hoMk9DYhXKu24Isrc+d7rEzVOkyZ/tlfBn9loN6LSI=
Subject key identifier:   CD:9A:00:E5:78:E8:6A:03:78:D0:F2:43:89:51:C1:8A:A4:01:BB:33
Certificate issuer:       /CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
Certificate serial:       56
Authority key identifier: C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/zZoA5XjoagN40PJDiVHBiqQBuzM.roa
Signing time:             Sun 30 Jun 2024 01:31:40 +0000
ROA not before:           Sun 30 Jun 2024 01:31:40 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     23816
IP address blocks:        103.2.12.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86 (0x56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
        Validity
            Not Before: Jun 30 01:31:40 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=CD9A00E578E86A0378D0F2438951C18AA401BB33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a4:35:25:68:26:b6:f2:55:98:a4:c9:57:33:
                    88:4b:21:ae:e7:c5:9b:e3:82:24:52:68:d5:6d:95:
                    67:ca:8c:43:bb:46:d4:d4:97:94:46:af:1d:8b:95:
                    9a:9d:27:31:1f:2e:4b:1e:57:c2:c2:25:2e:30:1e:
                    02:6c:6c:fd:9e:ff:0e:62:2e:bf:8f:a7:ba:e7:66:
                    4d:4c:aa:97:90:2a:5f:16:42:5b:7f:9d:37:f1:6b:
                    ad:22:89:c1:76:17:50:75:81:91:50:55:7f:2d:b6:
                    11:17:d3:3d:82:2d:bd:a7:1f:c8:9e:f2:20:c7:b5:
                    1f:0a:05:f8:9b:8c:70:25:3c:75:8f:c6:16:10:55:
                    ec:1e:39:d8:24:a3:fb:43:4a:37:27:1b:b3:28:76:
                    7d:c2:56:3a:24:51:23:08:5a:04:21:ed:82:81:b8:
                    ee:f0:ed:9b:62:33:82:8c:3f:8a:f3:33:4d:47:39:
                    c1:50:13:38:cb:27:48:d3:1a:29:f9:16:b8:98:5d:
                    bf:a3:ba:b1:98:fc:08:dc:45:f2:fe:fe:33:c7:7d:
                    63:7b:47:f0:bb:fb:76:f3:28:e3:9a:3d:d5:1c:99:
                    66:8c:aa:af:d5:12:e6:37:0d:85:86:1d:d7:42:db:
                    2d:7c:1c:a7:d8:15:b6:be:89:e0:a6:6c:d8:04:48:
                    b9:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:9A:00:E5:78:E8:6A:03:78:D0:F2:43:89:51:C1:8A:A4:01:BB:33
            X509v3 Authority Key Identifier:
                keyid:C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/zZoA5XjoagN40PJDiVHBiqQBuzM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.2.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:45:fb:35:54:40:b3:76:bc:09:54:9f:31:cb:1b:5d:9e:7f:
         2d:f7:f2:cc:76:bc:cf:2f:4a:c9:eb:3f:d1:44:4e:b3:a5:d3:
         fb:a0:aa:18:81:94:41:32:3e:60:41:9b:bd:94:2f:57:13:51:
         67:33:cc:8b:27:04:76:45:57:0a:26:d3:de:32:e1:97:f6:9a:
         8b:f9:f1:05:f4:21:c6:9b:d3:ea:da:2e:24:1e:55:00:f2:93:
         9e:ad:ca:f3:4f:67:36:3e:fc:25:c0:84:4c:d1:39:95:39:85:
         cd:f6:50:ba:2b:f3:1b:ff:30:63:6f:a6:d1:56:67:78:91:c5:
         0c:5b:da:c2:26:24:2c:67:c9:28:37:94:32:9b:6c:08:d5:ef:
         ec:0b:20:16:70:29:2c:a5:ad:42:e4:59:84:ba:3b:31:ae:42:
         fc:03:3e:d3:a0:45:d6:09:dc:a4:ad:ec:65:d5:89:33:21:ad:
         ac:4f:94:0d:b8:71:a0:5d:d8:a0:b1:11:34:50:c5:59:1a:ab:
         a3:da:e7:12:3d:b9:81:7d:95:ba:c1:e1:5d:94:2b:6d:d4:27:
         7a:50:76:1f:00:a0:a5:a6:fb:31:6c:38:f3:a9:de:34:38:29:
         58:cd:df:b3:a3:27:04:5e:31:4d:dd:97:76:f0:84:67:c7:a0:
         e7:75:3a:56
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBVjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDNDlF
NjRGQjdDOEM3QzZCNUNEN0M3NzAxODgyRTg1OTdDNDI4MzhFMB4XDTI0MDYzMDAx
MzE0MFoXDTI1MDYyNDEwNDY0NVowMzExMC8GA1UEAxMoQ0Q5QTAwRTU3OEU4NkEw
Mzc4RDBGMjQzODk1MUMxOEFBNDAxQkIzMzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMOkNSVoJrbyVZikyVcziEshrufFm+OCJFJo1W2VZ8qMQ7tG1NSX
lEavHYuVmp0nMR8uSx5XwsIlLjAeAmxs/Z7/DmIuv4+nuudmTUyql5AqXxZCW3+d
N/FrrSKJwXYXUHWBkVBVfy22ERfTPYItvacfyJ7yIMe1HwoF+JuMcCU8dY/GFhBV
7B452CSj+0NKNycbsyh2fcJWOiRRIwhaBCHtgoG47vDtm2Izgow/ivMzTUc5wVAT
OMsnSNMaKfkWuJhdv6O6sZj8CNxF8v7+M8d9Y3tH8Lv7dvMo45o91RyZZoyqr9US
5jcNhYYd10LbLXwcp9gVtr6J4KZs2ARIuQsCAwEAAaOCAigwggIkMB0GA1UdDgQW
BBTNmgDleOhqA3jQ8kOJUcGKpAG7MzAfBgNVHSMEGDAWgBTEnmT7fIx8a1zXx3AY
guhZfEKDjjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAxMTYveEo1ay0zeU1mR3RjMThkd0dJTG9XWHhDZzQ0LmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAveEo1ay0zeU1mR3RjMThkd0dJTG9X
WHhDZzQ0LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMTE2L3pab0E1WGpvYWdONDBQSkRpVkhCaXFRQnV6TS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAJnAgwwDQYJKoZIhvcNAQELBQADggEBAG5F+zVUQLN2vAlUnzHLG12e
fy338sx2vM8vSsnrP9FETrOl0/ugqhiBlEEyPmBBm72UL1cTUWczzIsnBHZFVwom
094y4Zf2mov58QX0Icab0+raLiQeVQDyk56tyvNPZzY+/CXAhEzROZU5hc32ULor
8xv/MGNvptFWZ3iRxQxb2sImJCxnySg3lDKbbAjV7+wLIBZwKSylrULkWYS6OzGu
QvwDPtOgRdYJ3KSt7GXViTMhraxPlA24caBd2KCxETRQxVkaq6Pa5xI9uYF9lbrB
4V2UK23UJ3pQdh8AoKWm+zFsOPOp3jQ4KVjN37OjJwReMU3dl3bwhGfHoOd1OlY=
-----END CERTIFICATE-----
Generated at Fri Nov 22 15:23:56 2024 by rpki-client on console-fra.rpki-client.org