Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20153/65G9V41mQ90VyzHD99LI3r77Im0.roa
File:                     65G9V41mQ90VyzHD99LI3r77Im0.roa (raw, json)
Hash identifier:          MzfcIWz2tYvMZGqUXN4tvzqVrNcmdevmOYVYpyUBC+A=
Subject key identifier:   EB:91:BD:57:8D:66:43:DD:15:CB:31:C3:F7:D2:C8:DE:BE:FB:22:6D
Certificate issuer:       /CN=5C57DDC59248271E71E1325877992B9738E043D4
Certificate serial:       02
Authority key identifier: 5C:57:DD:C5:92:48:27:1E:71:E1:32:58:77:99:2B:97:38:E0:43:D4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XFfdxZJIJx5x4TJYd5krlzjgQ9Q.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20153/65G9V41mQ90VyzHD99LI3r77Im0.roa
Signing time:             Fri 09 Aug 2024 07:13:14 +0000
ROA not before:           Fri 09 Aug 2024 07:13:14 +0000
ROA not after:            Sat 09 Aug 2025 06:01:00 +0000
asID:                     131986
IP address blocks:        103.167.44.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20153/XFfdxZJIJx5x4TJYd5krlzjgQ9Q.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20153/XFfdxZJIJx5x4TJYd5krlzjgQ9Q.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XFfdxZJIJx5x4TJYd5krlzjgQ9Q.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C57DDC59248271E71E1325877992B9738E043D4
        Validity
            Not Before: Aug  9 07:13:14 2024 GMT
            Not After : Aug  9 06:01:00 2025 GMT
        Subject: CN=EB91BD578D6643DD15CB31C3F7D2C8DEBEFB226D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1d:ca:21:41:c3:67:ad:db:98:36:c9:6b:16:
                    75:56:d1:2b:de:a6:ab:af:4f:13:ac:20:84:4b:91:
                    52:74:73:0e:f5:c2:50:cc:85:ae:d4:c6:c8:7d:1c:
                    61:b9:e6:38:8a:a0:ee:e4:2e:8c:19:25:24:93:64:
                    ce:6d:ae:d2:5f:97:94:3d:4d:c8:95:9f:f8:50:d0:
                    6c:6d:63:71:75:c2:93:77:d4:d5:50:82:95:89:25:
                    f5:f9:91:6b:1a:10:e4:de:f9:66:81:40:88:e2:e0:
                    03:81:f6:2b:fa:c9:36:64:5b:8e:39:c2:b9:88:56:
                    2c:92:5b:80:ae:cf:12:a6:ce:df:a0:e5:7d:08:29:
                    56:c3:2d:b2:c9:51:4c:97:04:fc:4f:c3:ad:cb:d1:
                    59:1f:5e:60:e0:8c:c0:a3:a8:09:9b:a2:20:43:86:
                    cc:f9:9e:a8:7f:5f:1d:5b:83:71:cd:d6:f7:0a:ee:
                    ee:8e:d9:5b:5d:e3:68:3e:3d:e2:93:a8:b2:1c:ce:
                    77:3e:de:84:90:ba:1f:8a:ea:db:47:26:16:f7:8d:
                    da:2e:08:40:a5:4c:20:01:98:32:f3:3c:80:df:70:
                    ce:ad:62:de:bb:e4:4e:c6:68:8d:73:bd:1f:10:1a:
                    48:f1:54:1c:7c:c5:75:98:dc:50:cb:c8:ff:b2:3a:
                    7c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:91:BD:57:8D:66:43:DD:15:CB:31:C3:F7:D2:C8:DE:BE:FB:22:6D
            X509v3 Authority Key Identifier:
                keyid:5C:57:DD:C5:92:48:27:1E:71:E1:32:58:77:99:2B:97:38:E0:43:D4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20153/XFfdxZJIJx5x4TJYd5krlzjgQ9Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XFfdxZJIJx5x4TJYd5krlzjgQ9Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20153/65G9V41mQ90VyzHD99LI3r77Im0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8a:83:ed:c8:24:64:ba:b2:14:50:b6:f3:27:2f:32:12:32:11:
         b7:a6:af:8b:1c:fe:44:38:7e:66:cc:90:fe:5a:f8:f9:0b:88:
         ae:35:88:c8:c6:6e:83:7e:fd:82:c3:1a:6b:54:30:2a:09:9d:
         91:d2:63:3f:73:b0:e3:b8:3c:28:7d:70:19:b1:7f:9f:48:e9:
         2f:58:a3:50:51:e9:75:79:76:47:af:86:0c:20:8d:6f:28:68:
         00:8b:ed:b4:31:1f:bb:eb:6d:c5:83:66:85:09:3d:c8:98:b8:
         96:0c:af:50:a8:f4:a7:2c:0f:63:e8:e2:38:30:91:cb:f9:26:
         47:3d:d1:6a:9a:dc:27:f4:a8:ea:b3:b6:fe:d4:d4:01:ed:70:
         8d:c6:7b:b5:7c:d4:f9:48:62:3f:f3:16:6d:bb:35:c1:b7:03:
         3d:59:44:11:2c:f2:c4:4f:bb:3e:fa:6b:60:aa:c4:08:15:d6:
         39:8a:f4:39:f8:6b:00:67:d2:65:2b:0c:52:80:cf:ad:83:a9:
         87:f6:42:bd:c0:38:2e:c9:c1:6e:36:d8:a0:bb:0d:58:a8:08:
         02:9a:3f:d7:6a:90:89:2d:1b:9d:87:87:8c:45:14:de:cd:89:
         69:48:b4:08:fb:e4:18:1b:00:c9:b1:54:c1:e5:1e:7c:ab:1e:
         fc:c3:33:f4
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1QzU3
RERDNTkyNDgyNzFFNzFFMTMyNTg3Nzk5MkI5NzM4RTA0M0Q0MB4XDTI0MDgwOTA3
MTMxNFoXDTI1MDgwOTA2MDEwMFowMzExMC8GA1UEAxMoRUI5MUJENTc4RDY2NDNE
RDE1Q0IzMUMzRjdEMkM4REVCRUZCMjI2RDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMMdyiFBw2et25g2yWsWdVbRK96mq69PE6wghEuRUnRzDvXCUMyF
rtTGyH0cYbnmOIqg7uQujBklJJNkzm2u0l+XlD1NyJWf+FDQbG1jcXXCk3fU1VCC
lYkl9fmRaxoQ5N75ZoFAiOLgA4H2K/rJNmRbjjnCuYhWLJJbgK7PEqbO36DlfQgp
VsMtsslRTJcE/E/DrcvRWR9eYOCMwKOoCZuiIEOGzPmeqH9fHVuDcc3W9wru7o7Z
W13jaD494pOoshzOdz7ehJC6H4rq20cmFveN2i4IQKVMIAGYMvM8gN9wzq1i3rvk
TsZojXO9HxAaSPFUHHzFdZjcUMvI/7I6fLkCAwEAAaOCAigwggIkMB0GA1UdDgQW
BBTrkb1XjWZD3RXLMcP30sjevvsibTAfBgNVHSMEGDAWgBRcV93FkkgnHnHhMlh3
mSuXOOBD1DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAxNTMvWEZmZHhaSklKeDV4NFRKWWQ1a3JsempnUTlRLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvWEZmZHhaSklKeDV4NFRKWWQ1a3Js
empnUTlRLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMTUzLzY1RzlWNDFtUTkwVnl6SEQ5OUxJM3I3N0ltMC5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAFnpywwDQYJKoZIhvcNAQELBQADggEBAIqD7cgkZLqyFFC28ycvMhIy
Ebemr4sc/kQ4fmbMkP5a+PkLiK41iMjGboN+/YLDGmtUMCoJnZHSYz9zsOO4PCh9
cBmxf59I6S9Yo1BR6XV5dkevhgwgjW8oaACL7bQxH7vrbcWDZoUJPciYuJYMr1Co
9KcsD2Po4jgwkcv5Jkc90Wqa3Cf0qOqztv7U1AHtcI3Ge7V81PlIYj/zFm27NcG3
Az1ZRBEs8sRPuz76a2CqxAgV1jmK9Dn4awBn0mUrDFKAz62DqYf2Qr3AOC7JwW42
2KC7DVioCAKaP9dqkIktG52Hh4xFFN7NiWlItAj75BgbAMmxVMHlHnyrHvzDM/Q=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:04:01 2025 by rpki-client