Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20159/hv6OZyBQ5KBh27Dx3TQBGFA-LuQ.roa
File:                     hv6OZyBQ5KBh27Dx3TQBGFA-LuQ.roa (raw, json)
Hash identifier:          kMajvnbsh9+A8fVuzdyRZZhCr6JR3Iz03F+vfRzHfD8=
Subject key identifier:   86:FE:8E:67:20:50:E4:A0:61:DB:B0:F1:DD:34:01:18:50:3E:2E:E4
Certificate issuer:       /CN=BDB8B810AA8518F19E8EA1EE1539662736ACF0EB
Certificate serial:       0E
Authority key identifier: BD:B8:B8:10:AA:85:18:F1:9E:8E:A1:EE:15:39:66:27:36:AC:F0:EB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/vbi4EKqFGPGejqHuFTlmJzas8Os.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20159/hv6OZyBQ5KBh27Dx3TQBGFA-LuQ.roa
Signing time:             Fri 06 Oct 2023 01:57:37 +0000
ROA not before:           Fri 06 Oct 2023 01:57:37 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     131988
IP address blocks:        103.170.124.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20159/vbi4EKqFGPGejqHuFTlmJzas8Os.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20159/vbi4EKqFGPGejqHuFTlmJzas8Os.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/vbi4EKqFGPGejqHuFTlmJzas8Os.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Jun 2024 01:59:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDB8B810AA8518F19E8EA1EE1539662736ACF0EB
        Validity
            Not Before: Oct  6 01:57:37 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=86FE8E672050E4A061DBB0F1DD340118503E2EE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:98:36:50:c3:19:c8:fd:f0:77:8e:fd:37:64:
                    48:cb:e4:5d:a0:2d:a6:92:be:99:34:64:dc:79:56:
                    47:12:38:9a:41:65:b9:25:d4:e2:80:a6:85:6b:e7:
                    6f:a4:9f:21:86:e3:f0:ed:87:87:9c:d0:1d:e8:48:
                    d9:7d:26:fd:5d:fc:3a:43:3d:ed:23:13:c0:bc:36:
                    4c:67:48:c8:7a:46:a7:48:af:f5:d5:8a:1c:66:6d:
                    f4:ba:a8:a6:67:a0:13:ea:b2:36:ab:27:92:cb:20:
                    bc:74:cc:08:4d:20:27:bf:68:60:a9:f9:c1:75:a8:
                    e2:80:d6:4a:65:7c:42:02:03:89:57:1b:41:7a:74:
                    98:cd:4d:4f:58:59:98:b4:56:8d:31:ec:8c:16:96:
                    5b:b0:99:af:47:b5:19:8f:62:b7:98:cc:9c:cf:ad:
                    77:cb:21:3b:40:09:3c:85:79:e9:25:fe:25:ba:c9:
                    21:58:b5:fd:f8:c7:0b:86:a7:2f:75:84:77:ee:39:
                    8f:c7:6b:07:45:fd:46:21:f3:32:b3:98:c8:44:52:
                    82:1e:dd:83:25:d3:98:c1:f4:f0:50:a4:ae:ff:50:
                    15:15:da:63:24:b5:9e:40:a9:80:26:79:94:78:9a:
                    f9:22:c0:f2:e2:83:d2:91:bb:4b:74:d0:93:3c:a8:
                    7f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:FE:8E:67:20:50:E4:A0:61:DB:B0:F1:DD:34:01:18:50:3E:2E:E4
            X509v3 Authority Key Identifier:
                keyid:BD:B8:B8:10:AA:85:18:F1:9E:8E:A1:EE:15:39:66:27:36:AC:F0:EB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20159/vbi4EKqFGPGejqHuFTlmJzas8Os.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/vbi4EKqFGPGejqHuFTlmJzas8Os.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20159/hv6OZyBQ5KBh27Dx3TQBGFA-LuQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         62:46:29:1e:ec:eb:da:d1:27:91:54:01:a5:f8:b1:66:ae:19:
         85:5f:c8:71:2f:ad:e4:40:65:6b:2e:10:60:d5:e3:ee:95:2c:
         bf:57:28:77:5c:d5:ea:1d:f6:d2:d0:ff:bb:0b:75:aa:87:6a:
         82:84:d5:5f:86:28:07:f1:db:ad:69:47:29:fc:b3:4c:bc:5f:
         bf:5a:0f:08:6d:e9:77:10:10:85:da:c6:cf:be:77:20:4e:17:
         cd:cc:d8:89:32:f3:56:30:e7:68:dc:17:89:e6:98:2e:56:19:
         a3:99:4a:9f:d6:4a:d4:eb:09:4b:ec:06:46:c5:44:dd:e6:09:
         b5:e0:6b:6e:14:aa:63:cf:eb:1e:9b:8c:09:fc:58:c8:72:e3:
         d5:a4:39:ac:5f:35:51:ee:b1:61:5d:a5:d0:4c:72:59:e8:fc:
         12:0d:9f:97:97:5b:f1:0f:5f:ef:da:f5:cc:c2:d3:4c:1a:1b:
         fa:40:87:37:69:df:36:6d:3b:b6:5a:16:2b:26:75:92:99:e1:
         f2:15:69:df:ca:5c:af:a6:97:ea:d3:ec:58:81:10:80:02:bf:
         7e:2d:ba:8a:01:06:4a:c7:ef:30:a7:c8:67:57:9a:bf:d6:b5:
         c3:16:3b:b6:3d:2b:7d:bb:07:b7:53:75:9e:e9:86:d3:08:6c:
         93:54:8f:31
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBDjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCREI4
QjgxMEFBODUxOEYxOUU4RUExRUUxNTM5NjYyNzM2QUNGMEVCMB4XDTIzMTAwNjAx
NTczN1oXDTI0MDkxNDAxMzAwM1owMzExMC8GA1UEAxMoODZGRThFNjcyMDUwRTRB
MDYxREJCMEYxREQzNDAxMTg1MDNFMkVFNDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMqYNlDDGcj98HeO/TdkSMvkXaAtppK+mTRk3HlWRxI4mkFluSXU
4oCmhWvnb6SfIYbj8O2Hh5zQHehI2X0m/V38OkM97SMTwLw2TGdIyHpGp0iv9dWK
HGZt9LqopmegE+qyNqsnkssgvHTMCE0gJ79oYKn5wXWo4oDWSmV8QgIDiVcbQXp0
mM1NT1hZmLRWjTHsjBaWW7CZr0e1GY9it5jMnM+td8shO0AJPIV56SX+JbrJIVi1
/fjHC4anL3WEd+45j8drB0X9RiHzMrOYyERSgh7dgyXTmMH08FCkrv9QFRXaYyS1
nkCpgCZ5lHia+SLA8uKD0pG7S3TQkzyof3ECAwEAAaOCAigwggIkMB0GA1UdDgQW
BBSG/o5nIFDkoGHbsPHdNAEYUD4u5DAfBgNVHSMEGDAWgBS9uLgQqoUY8Z6Ooe4V
OWYnNqzw6zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAxNTkvdmJpNEVLcUZHUEdlanFIdUZUbG1KemFzOE9zLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdmJpNEVLcUZHUEdlanFIdUZUbG1K
emFzOE9zLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMTU5L2h2Nk9aeUJRNUtCaDI3RHgzVFFCR0ZBLUx1US5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAFnqnwwDQYJKoZIhvcNAQELBQADggEBAGJGKR7s69rRJ5FUAaX4sWau
GYVfyHEvreRAZWsuEGDV4+6VLL9XKHdc1eod9tLQ/7sLdaqHaoKE1V+GKAfx261p
Ryn8s0y8X79aDwht6XcQEIXaxs++dyBOF83M2Iky81Yw52jcF4nmmC5WGaOZSp/W
StTrCUvsBkbFRN3mCbXga24UqmPP6x6bjAn8WMhy49WkOaxfNVHusWFdpdBMclno
/BINn5eXW/EPX+/a9czC00waG/pAhzdp3zZtO7ZaFismdZKZ4fIVad/KXK+ml+rT
7FiBEIACv34tuooBBkrH7zCnyGdXmr/WtcMWO7Y9K327B7dTdZ7phtMIbJNUjzE=
-----END CERTIFICATE-----
Generated at Fri Jun 14 02:47:19 2024 by rpki-client on console-ams.rpki-client.org