Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/Fjpwb0rQcniheGnQRZ_JJVoy4TY.roa
File:                     Fjpwb0rQcniheGnQRZ_JJVoy4TY.roa (raw, json)
Hash identifier:          U6tT6IsLm2vtG2lgk/vXm3CkfZfGd46cKCSvMv02xic=
Subject key identifier:   16:3A:70:6F:4A:D0:72:78:A1:78:69:D0:45:9F:C9:25:5A:32:E1:36
Certificate issuer:       /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial:       77
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/Fjpwb0rQcniheGnQRZ_JJVoy4TY.roa
Signing time:             Fri 15 Nov 2024 15:36:31 +0000
ROA not before:           Fri 15 Nov 2024 15:36:31 +0000
ROA not after:            Sat 15 Nov 2025 01:30:03 +0000
asID:                     3949
IP address blocks:        117.103.185.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119 (0x77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
        Validity
            Not Before: Nov 15 15:36:31 2024 GMT
            Not After : Nov 15 01:30:03 2025 GMT
        Subject: CN=163A706F4AD07278A17869D0459FC9255A32E136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1a:dc:65:f1:1a:71:83:52:ad:c2:1f:ff:94:
                    64:95:39:62:7e:ec:6c:7a:31:78:c3:ae:34:29:14:
                    86:00:7a:41:ff:44:96:b9:41:61:50:4c:d4:5d:7d:
                    74:0b:fd:08:ff:d9:a0:ba:46:e0:46:47:da:f6:af:
                    d5:7a:98:e4:50:fe:44:9d:61:7a:c4:91:56:e0:55:
                    ea:5c:33:6e:c7:c6:8c:49:c5:4f:b9:6d:32:ec:01:
                    8c:54:d9:33:d9:76:28:1c:52:a4:81:ed:2c:0b:5e:
                    74:05:9c:dd:be:de:0b:42:fb:2a:f3:62:2e:20:03:
                    ea:07:dd:4d:bc:22:b0:da:c6:52:61:fc:c5:cf:81:
                    69:86:f7:c2:d9:c2:03:c0:ad:1c:4d:75:e1:f3:36:
                    5b:64:fb:f1:04:7c:c4:21:52:70:d0:70:d1:92:f7:
                    ee:37:f7:08:20:85:c8:4f:3a:df:61:3f:3d:d1:04:
                    bf:33:ca:25:5b:94:39:02:99:09:c5:69:7c:4e:27:
                    57:59:c2:2e:9c:e3:5d:1f:3f:48:df:42:5d:69:51:
                    bf:29:a4:52:4f:27:22:52:2b:4e:b1:70:21:4d:e6:
                    17:6b:26:9a:61:d4:0a:70:e9:48:4b:23:ea:fa:c1:
                    ce:e8:05:b5:63:ea:80:70:0a:29:b8:b4:29:87:bc:
                    37:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:3A:70:6F:4A:D0:72:78:A1:78:69:D0:45:9F:C9:25:5A:32:E1:36
            X509v3 Authority Key Identifier:
                keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/Fjpwb0rQcniheGnQRZ_JJVoy4TY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.103.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:3b:72:03:96:5d:97:46:2b:41:4d:ce:04:7b:a2:96:3a:bd:
         53:63:d3:97:7e:c3:f6:0a:5b:9e:41:56:e7:15:e6:4f:4b:0a:
         a5:af:e2:86:3c:fc:99:31:cf:0b:02:1a:c2:e0:4e:e9:e3:06:
         57:36:27:f5:3d:13:ea:ff:67:67:9e:ad:e2:4b:f7:b2:40:23:
         b6:20:42:0f:d6:ec:f2:42:e8:3e:e1:23:4d:40:82:af:a6:ac:
         aa:f9:13:ea:89:0e:b6:3a:d4:7d:df:64:a4:e1:29:ff:4b:aa:
         26:3a:de:33:03:54:19:6b:ec:1a:8a:a2:e5:56:e7:49:42:fb:
         c6:34:4d:f4:49:f3:23:70:7b:99:a0:30:79:46:91:44:3c:b6:
         9e:9c:17:6e:aa:0f:55:79:66:59:9f:ab:c4:bc:68:c8:bf:cc:
         30:fb:f4:47:ed:f2:4c:f3:dd:a6:76:32:b2:de:d0:e2:3a:3c:
         be:ba:ca:57:64:d9:6e:f9:27:ef:40:0b:64:4c:a9:d9:e0:90:
         81:a2:48:4f:96:41:56:d6:85:73:79:98:1a:bf:93:16:af:19:
         39:44:10:e1:4a:85:dc:42:45:0a:e0:1f:dd:29:33:f2:a1:2d:
         b5:72:65:54:0b:45:18:18:72:85:1e:03:f2:3f:09:0e:e9:16:
         f3:b0:6d:f8
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBdzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4RDQ2
RERGODhBNDZFNEVDMkQ5QTlCQUI1RkYxMzA1RkQwNTdGMTM4MB4XDTI0MTExNTE1
MzYzMVoXDTI1MTExNTAxMzAwM1owMzExMC8GA1UEAxMoMTYzQTcwNkY0QUQwNzI3
OEExNzg2OUQwNDU5RkM5MjU1QTMyRTEzNjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMUa3GXxGnGDUq3CH/+UZJU5Yn7sbHoxeMOuNCkUhgB6Qf9ElrlB
YVBM1F19dAv9CP/ZoLpG4EZH2vav1XqY5FD+RJ1hesSRVuBV6lwzbsfGjEnFT7lt
MuwBjFTZM9l2KBxSpIHtLAtedAWc3b7eC0L7KvNiLiAD6gfdTbwisNrGUmH8xc+B
aYb3wtnCA8CtHE114fM2W2T78QR8xCFScNBw0ZL37jf3CCCFyE8632E/PdEEvzPK
JVuUOQKZCcVpfE4nV1nCLpzjXR8/SN9CXWlRvymkUk8nIlIrTrFwIU3mF2smmmHU
CnDpSEsj6vrBzugFtWPqgHAKKbi0KYe8N2sCAwEAAaOCAigwggIkMB0GA1UdDgQW
BBQWOnBvStByeKF4adBFn8klWjLhNjAfBgNVHSMEGDAWgBSNRt34ikbk7C2am6tf
8TBf0FfxODAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAxMjgvalViZC1JcEc1T3d0bXB1clhfRXdYOUJYOFRnLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvalViZC1JcEc1T3d0bXB1clhfRXdY
OUJYOFRnLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMTI4L0ZqcHdiMHJRY25paGVHblFSWl9KSlZveTRUWS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAB1Z7kwDQYJKoZIhvcNAQELBQADggEBAFU7cgOWXZdGK0FNzgR7opY6
vVNj05d+w/YKW55BVucV5k9LCqWv4oY8/JkxzwsCGsLgTunjBlc2J/U9E+r/Z2ee
reJL97JAI7YgQg/W7PJC6D7hI01Agq+mrKr5E+qJDrY61H3fZKThKf9LqiY63jMD
VBlr7BqKouVW50lC+8Y0TfRJ8yNwe5mgMHlGkUQ8tp6cF26qD1V5Zlmfq8S8aMi/
zDD79Eft8kzz3aZ2MrLe0OI6PL66yldk2W75J+9AC2RMqdngkIGiSE+WQVbWhXN5
mBq/kxavGTlEEOFKhdxCRQrgH90pM/KhLbVyZVQLRRgYcoUeA/I/CQ7pFvOwbfg=
-----END CERTIFICATE-----
Generated at Fri Nov 22 08:01:31 2024 by rpki-client on console-ams.rpki-client.org