Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20168/57olW-86TUd8kDfQ1SKNdjDojCw.roa
File:                     57olW-86TUd8kDfQ1SKNdjDojCw.roa (raw, json)
Hash identifier:          JwJ+mUfcGvptDX/SBx05LBgdU9a1VDBsy3FDNJHU34Y=
Subject key identifier:   E7:BA:25:5B:EF:3A:4D:47:7C:90:37:D0:D5:22:8D:76:30:E8:8C:2C
Certificate issuer:       /CN=7911FB3B3FB825FF96628FBC08DD2BEFCADB869C
Certificate serial:       03
Authority key identifier: 79:11:FB:3B:3F:B8:25:FF:96:62:8F:BC:08:DD:2B:EF:CA:DB:86:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/eRH7Oz-4Jf-WYo-8CN0r78rbhpw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20168/57olW-86TUd8kDfQ1SKNdjDojCw.roa
Signing time:             Mon 17 Jun 2024 11:58:38 +0000
ROA not before:           Mon 17 Jun 2024 11:58:38 +0000
ROA not after:            Sun 15 Jun 2025 01:30:03 +0000
asID:                     146969
IP address blocks:        157.70.240.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20168/eRH7Oz-4Jf-WYo-8CN0r78rbhpw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20168/eRH7Oz-4Jf-WYo-8CN0r78rbhpw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/eRH7Oz-4Jf-WYo-8CN0r78rbhpw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7911FB3B3FB825FF96628FBC08DD2BEFCADB869C
        Validity
            Not Before: Jun 17 11:58:38 2024 GMT
            Not After : Jun 15 01:30:03 2025 GMT
        Subject: CN=E7BA255BEF3A4D477C9037D0D5228D7630E88C2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c2:53:16:3b:5d:70:1b:38:2c:cb:8e:36:bd:
                    39:c2:f8:bd:c4:90:5a:b9:1f:08:bc:73:72:41:57:
                    df:f4:3e:0e:7d:fd:c1:ac:39:5c:3c:24:f4:da:f1:
                    12:76:11:73:6b:17:5b:9e:43:a6:46:e0:6f:14:f8:
                    2b:20:e2:f0:0b:30:d0:0a:53:be:9c:85:f4:38:84:
                    4e:af:cd:60:39:30:0d:f1:0c:b7:7b:b4:18:96:6a:
                    ee:95:8a:a6:ae:45:fa:14:93:fd:39:17:dc:81:21:
                    2a:94:cb:b7:70:2c:71:23:71:7e:c3:7a:02:a9:12:
                    a2:46:5d:ff:b0:a4:04:a2:b3:7e:b3:c3:ac:37:c5:
                    d5:9a:20:0f:80:00:a9:53:6e:26:ab:e3:03:9a:ec:
                    04:e3:55:05:af:c4:ae:df:b6:2f:16:3a:7a:b3:c4:
                    a8:84:4d:fe:2c:0d:18:39:17:17:b4:cf:d8:dd:7c:
                    88:7d:ae:39:7d:61:b0:f4:68:a1:eb:6e:86:89:0e:
                    05:a8:5d:5c:a9:12:8d:dd:04:28:eb:e0:ec:27:1a:
                    aa:55:0a:f9:02:02:95:3a:3c:c5:98:43:df:6f:90:
                    67:96:9c:66:51:f7:6c:38:25:a1:bb:c3:71:89:5d:
                    91:ce:19:40:3b:09:18:57:ae:df:b9:95:10:ce:6a:
                    9d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:BA:25:5B:EF:3A:4D:47:7C:90:37:D0:D5:22:8D:76:30:E8:8C:2C
            X509v3 Authority Key Identifier:
                keyid:79:11:FB:3B:3F:B8:25:FF:96:62:8F:BC:08:DD:2B:EF:CA:DB:86:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20168/eRH7Oz-4Jf-WYo-8CN0r78rbhpw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/eRH7Oz-4Jf-WYo-8CN0r78rbhpw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20168/57olW-86TUd8kDfQ1SKNdjDojCw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.70.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a9:0a:59:93:bd:7c:bd:76:5d:22:03:8e:75:e6:58:9c:f0:a3:
         f8:9c:f1:bb:89:5a:c6:ac:a4:22:b9:80:46:76:c5:aa:f1:85:
         65:78:c3:06:67:67:27:a0:79:a6:7d:3f:38:47:c8:6d:95:01:
         e2:db:67:d5:f9:94:91:9e:f2:57:6a:65:19:94:dd:6a:ba:c1:
         3c:16:e8:39:be:d2:2e:35:b5:de:e2:ba:05:7e:32:f6:c1:d8:
         37:62:cd:19:3d:51:b8:92:93:6a:56:51:1a:dc:59:53:b3:cf:
         20:1c:d1:a9:eb:21:7f:13:31:79:35:4e:38:6f:40:b7:07:76:
         b7:86:f0:68:59:42:9d:5d:fb:a8:20:1d:16:0a:a6:8a:f6:40:
         f4:3b:c4:ff:2e:f8:85:e9:2f:3b:ac:fc:72:a8:8d:81:ec:f3:
         83:b0:05:90:a2:09:fd:cf:6a:54:c4:79:ca:4c:27:9a:3e:f7:
         b0:31:12:23:f1:40:e9:a0:ec:00:74:31:39:23:bd:46:4b:77:
         3f:fb:7e:1d:10:8e:ba:2a:4b:06:ae:ce:b2:78:e8:0b:8b:e9:
         ac:10:75:c8:ca:73:e9:10:86:a0:41:8e:45:fa:a2:f7:18:e8:
         3e:d2:54:9e:27:35:58:06:59:f7:1b:4d:7b:5e:7f:1a:87:cc:
         f6:9c:3e:42
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3OTEx
RkIzQjNGQjgyNUZGOTY2MjhGQkMwOEREMkJFRkNBREI4NjlDMB4XDTI0MDYxNzEx
NTgzOFoXDTI1MDYxNTAxMzAwM1owMzExMC8GA1UEAxMoRTdCQTI1NUJFRjNBNEQ0
NzdDOTAzN0QwRDUyMjhENzYzMEU4OEMyQzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKvCUxY7XXAbOCzLjja9OcL4vcSQWrkfCLxzckFX3/Q+Dn39waw5
XDwk9NrxEnYRc2sXW55DpkbgbxT4KyDi8Asw0ApTvpyF9DiETq/NYDkwDfEMt3u0
GJZq7pWKpq5F+hST/TkX3IEhKpTLt3AscSNxfsN6AqkSokZd/7CkBKKzfrPDrDfF
1ZogD4AAqVNuJqvjA5rsBONVBa/Ert+2LxY6erPEqIRN/iwNGDkXF7TP2N18iH2u
OX1hsPRooetuhokOBahdXKkSjd0EKOvg7CcaqlUK+QIClTo8xZhD32+QZ5acZlH3
bDglobvDcYldkc4ZQDsJGFeu37mVEM5qnRkCAwEAAaOCAigwggIkMB0GA1UdDgQW
BBTnuiVb7zpNR3yQN9DVIo12MOiMLDAfBgNVHSMEGDAWgBR5Efs7P7gl/5Zij7wI
3SvvytuGnDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAxNjgvZVJIN096LTRKZi1XWW8tOENOMHI3OHJiaHB3LmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvZVJIN096LTRKZi1XWW8tOENOMHI3
OHJiaHB3LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMTY4LzU3b2xXLTg2VFVkOGtEZlExU0tOZGpEb2pDdy5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBASdRvAwDQYJKoZIhvcNAQELBQADggEBAKkKWZO9fL12XSIDjnXmWJzw
o/ic8buJWsaspCK5gEZ2xarxhWV4wwZnZyegeaZ9PzhHyG2VAeLbZ9X5lJGe8ldq
ZRmU3Wq6wTwW6Dm+0i41td7iugV+MvbB2DdizRk9UbiSk2pWURrcWVOzzyAc0anr
IX8TMXk1TjhvQLcHdreG8GhZQp1d+6ggHRYKpor2QPQ7xP8u+IXpLzus/HKojYHs
84OwBZCiCf3PalTEecpMJ5o+97AxEiPxQOmg7AB0MTkjvUZLdz/7fh0QjroqSwau
zrJ46AuL6awQdcjKc+kQhqBBjkX6ovcY6D7SVJ4nNVgGWfcbTXtefxqHzPacPkI=
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:27 2024 by rpki-client on console-ams.rpki-client.org