Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20134/jNc088F4Di7_5OP88zNvO9AdNbg.roa
File:                     jNc088F4Di7_5OP88zNvO9AdNbg.roa (raw, json)
Hash identifier:          di9p9h/Z7knKDC33zSEbAozHODuOFa7eEArv7y6uEkg=
Subject key identifier:   8C:D7:34:F3:C1:78:0E:2E:FF:E4:E3:FC:F3:33:6F:3B:D0:1D:35:B8
Certificate issuer:       /CN=D02A9A652B87C96957C9DAFD6FFAE7244188E063
Certificate serial:       02
Authority key identifier: D0:2A:9A:65:2B:87:C9:69:57:C9:DA:FD:6F:FA:E7:24:41:88:E0:63
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0CqaZSuHyWlXydr9b_rnJEGI4GM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20134/jNc088F4Di7_5OP88zNvO9AdNbg.roa
Signing time:             Wed 22 May 2024 01:41:21 +0000
ROA not before:           Wed 22 May 2024 01:41:21 +0000
ROA not after:            Wed 21 May 2025 06:22:50 +0000
asID:                     131960
IP address blocks:        101.102.96.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20134/0CqaZSuHyWlXydr9b_rnJEGI4GM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20134/0CqaZSuHyWlXydr9b_rnJEGI4GM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0CqaZSuHyWlXydr9b_rnJEGI4GM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D02A9A652B87C96957C9DAFD6FFAE7244188E063
        Validity
            Not Before: May 22 01:41:21 2024 GMT
            Not After : May 21 06:22:50 2025 GMT
        Subject: CN=8CD734F3C1780E2EFFE4E3FCF3336F3BD01D35B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f1:7d:6f:1e:76:92:71:cd:0c:ee:51:68:ce:
                    3e:c5:b0:06:c7:01:f4:0a:0e:13:ab:a7:7e:35:28:
                    f0:93:a1:3f:f9:11:ca:b8:80:45:ab:96:61:d5:48:
                    95:65:ac:bc:9b:34:d1:9d:b9:3c:d4:49:2e:8b:02:
                    31:bb:6e:26:19:59:8b:ab:38:0a:00:7e:25:6e:bf:
                    0a:0b:cd:0e:09:84:d5:59:2e:93:f1:99:01:fc:d4:
                    1c:3d:e9:92:89:2e:17:cc:f0:de:ce:6f:aa:c7:c2:
                    be:72:1f:8d:de:39:74:f4:5b:26:dc:2b:6e:72:ad:
                    68:c5:75:ee:a7:2f:63:e9:cd:e9:cf:8b:98:56:9b:
                    4f:e9:8e:7a:c5:85:c5:c5:bd:02:53:1a:8e:d8:2f:
                    be:64:d1:f8:73:24:8e:71:4f:01:30:05:81:1a:dc:
                    ab:a2:58:ce:01:db:78:d1:04:f5:c8:db:25:8b:92:
                    2a:2d:f6:a8:2e:2f:d8:91:da:6e:67:45:bc:5c:40:
                    67:c9:60:cd:63:1d:45:32:30:1a:1d:00:c4:2a:7a:
                    29:50:57:27:89:f1:62:11:4b:5e:9b:83:97:35:b7:
                    5f:57:8d:1e:53:19:8b:5f:24:5d:b2:fb:dd:0b:4f:
                    66:18:5f:6e:e4:5b:48:c7:73:c9:41:ac:33:1d:fc:
                    4b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:D7:34:F3:C1:78:0E:2E:FF:E4:E3:FC:F3:33:6F:3B:D0:1D:35:B8
            X509v3 Authority Key Identifier:
                keyid:D0:2A:9A:65:2B:87:C9:69:57:C9:DA:FD:6F:FA:E7:24:41:88:E0:63

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20134/0CqaZSuHyWlXydr9b_rnJEGI4GM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0CqaZSuHyWlXydr9b_rnJEGI4GM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20134/jNc088F4Di7_5OP88zNvO9AdNbg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.102.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:81:a9:cb:99:9e:a9:ef:ab:91:29:ea:61:b1:b7:69:e9:2c:
         f2:13:e5:1f:0e:e2:09:93:e9:ed:a0:a7:31:82:ee:80:75:c1:
         ee:f3:36:7e:3e:3b:33:76:7e:77:45:21:8b:22:fa:70:e0:09:
         82:6c:04:4a:4e:ab:60:74:f4:e9:35:b7:17:50:77:5a:3a:08:
         2f:95:1f:78:6a:96:4f:ff:9c:93:e4:d6:e0:72:e6:ad:53:a1:
         98:ff:73:43:14:94:20:48:7f:92:f5:09:ce:8c:83:f0:51:1e:
         05:70:52:c5:17:b0:72:be:0d:fa:73:11:05:e5:36:d4:72:80:
         10:33:5d:c4:df:8e:11:1f:14:6d:01:96:b4:6e:23:1b:cc:ea:
         d0:74:cd:3d:05:ba:53:f3:97:9f:1a:27:61:43:fc:23:4d:61:
         54:a9:95:01:9c:ec:62:a6:1d:dc:b6:b6:00:5c:19:d1:0a:e6:
         8c:ca:83:f6:00:04:46:d1:e4:c2:7f:17:4e:0f:ff:26:45:ea:
         ba:5d:e1:df:15:8c:06:dc:b9:18:c0:28:9b:74:82:9f:a2:2d:
         ce:5c:2e:0c:b5:12:8a:19:be:4f:e1:26:c5:25:bd:c8:fa:65:
         57:ce:ed:81:37:cf:cf:d8:93:c8:bb:ce:f9:b9:01:b2:44:17:
         b2:10:9a:99
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEMDJB
OUE2NTJCODdDOTY5NTdDOURBRkQ2RkZBRTcyNDQxODhFMDYzMB4XDTI0MDUyMjAx
NDEyMVoXDTI1MDUyMTA2MjI1MFowMzExMC8GA1UEAxMoOENENzM0RjNDMTc4MEUy
RUZGRTRFM0ZDRjMzMzZGM0JEMDFEMzVCODCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAM7xfW8edpJxzQzuUWjOPsWwBscB9AoOE6unfjUo8JOhP/kRyriA
RauWYdVIlWWsvJs00Z25PNRJLosCMbtuJhlZi6s4CgB+JW6/CgvNDgmE1Vkuk/GZ
AfzUHD3pkokuF8zw3s5vqsfCvnIfjd45dPRbJtwrbnKtaMV17qcvY+nN6c+LmFab
T+mOesWFxcW9AlMajtgvvmTR+HMkjnFPATAFgRrcq6JYzgHbeNEE9cjbJYuSKi32
qC4v2JHabmdFvFxAZ8lgzWMdRTIwGh0AxCp6KVBXJ4nxYhFLXpuDlzW3X1eNHlMZ
i18kXbL73QtPZhhfbuRbSMdzyUGsMx38S10CAwEAAaOCAigwggIkMB0GA1UdDgQW
BBSM1zTzwXgOLv/k4/zzM2870B01uDAfBgNVHSMEGDAWgBTQKpplK4fJaVfJ2v1v
+uckQYjgYzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAxMzQvMENxYVpTdUh5V2xYeWRyOWJfcm5KRUdJNEdNLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMENxYVpTdUh5V2xYeWRyOWJfcm5K
RUdJNEdNLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMTM0L2pOYzA4OEY0RGk3XzVPUDg4ek52TzlBZE5iZy5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAJlZmAwDQYJKoZIhvcNAQELBQADggEBAACBqcuZnqnvq5Ep6mGxt2np
LPIT5R8O4gmT6e2gpzGC7oB1we7zNn4+OzN2fndFIYsi+nDgCYJsBEpOq2B09Ok1
txdQd1o6CC+VH3hqlk//nJPk1uBy5q1ToZj/c0MUlCBIf5L1Cc6Mg/BRHgVwUsUX
sHK+DfpzEQXlNtRygBAzXcTfjhEfFG0BlrRuIxvM6tB0zT0FulPzl58aJ2FD/CNN
YVSplQGc7GKmHdy2tgBcGdEK5ozKg/YABEbR5MJ/F04P/yZF6rpd4d8VjAbcuRjA
KJt0gp+iLc5cLgy1EooZvk/hJsUlvcj6ZVfO7YE3z8/Yk8i7zvm5AbJEF7IQmpk=
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:27 2024 by rpki-client on console-ams.rpki-client.org