Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/AQiSlXh8BLQcuGsnm_2pI40-6lI.roa
File:                     AQiSlXh8BLQcuGsnm_2pI40-6lI.roa (raw, json)
Hash identifier:          tdO0vGTe/td8ZxMkooDyBxYLYGs3M9E+czoYCohcDr4=
Subject key identifier:   01:08:92:95:78:7C:04:B4:1C:B8:6B:27:9B:FD:A9:23:8D:3E:EA:52
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       0380
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/AQiSlXh8BLQcuGsnm_2pI40-6lI.roa
Signing time:             Tue 27 Jun 2023 08:01:25 +0000
ROA not before:           Tue 27 Jun 2023 08:01:25 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     0
IP address blocks:        202.236.89.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 May 2024 21:46:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 896 (0x380)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Jun 27 08:01:25 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=01089295787C04B41CB86B279BFDA9238D3EEA52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:69:49:ea:e5:3e:64:2b:84:0e:b1:16:62:4a:
                    80:0e:6a:ce:c9:db:d7:46:da:f9:ea:65:5d:f6:31:
                    35:36:6d:1a:fe:5d:96:4e:7a:81:5d:a4:78:f1:c1:
                    65:09:ac:f7:d7:a2:82:24:0f:15:95:cd:6f:5b:b8:
                    26:80:e0:96:eb:83:eb:b9:9b:61:64:85:21:c8:8c:
                    3e:e1:2e:68:5c:f4:67:af:62:df:c6:9f:09:cd:dd:
                    dc:e4:c8:f0:1d:70:65:91:4a:d8:f8:c8:3e:bb:e7:
                    e2:7e:c2:dd:d9:48:f1:c5:cc:31:a9:13:00:7e:93:
                    ff:5b:24:1c:05:c7:5f:b9:c2:b9:88:65:91:50:d4:
                    2e:3f:9f:9b:1c:4a:eb:b0:34:d9:aa:d7:89:d0:0e:
                    71:94:6b:5a:87:af:f0:de:e6:ef:85:f3:49:84:be:
                    0e:5f:fc:e8:ec:b7:52:13:d4:0f:c7:dc:e1:4f:95:
                    58:70:21:00:7f:79:1b:90:38:5f:4e:69:4a:4e:0b:
                    30:b7:6a:83:ea:e3:c5:f5:9c:53:cc:7d:b0:3c:51:
                    d8:2d:e3:63:72:c3:ae:a5:ab:50:ca:94:26:d5:d6:
                    dc:47:db:e6:0b:a4:4e:04:40:d9:3f:57:99:23:4a:
                    9d:9d:48:4d:d4:a4:6f:62:41:dc:62:96:a7:be:b6:
                    a6:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:08:92:95:78:7C:04:B4:1C:B8:6B:27:9B:FD:A9:23:8D:3E:EA:52
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/AQiSlXh8BLQcuGsnm_2pI40-6lI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:c3:aa:24:a4:2b:dd:ec:b2:d6:7a:04:9c:7f:da:93:ae:b4:
         4c:0a:04:68:c4:8e:a8:49:f1:43:58:ef:0c:ab:de:54:97:df:
         ea:d4:ed:20:17:7b:49:12:0b:83:94:56:a0:de:c5:60:c6:e0:
         b4:ff:4b:4b:80:6b:cb:2e:a0:6a:06:4a:99:b3:b8:23:97:30:
         a5:eb:f7:8c:17:12:80:6b:bf:76:ee:2b:66:49:4a:41:69:36:
         4d:6f:f0:5d:30:1e:e5:41:cb:fc:46:50:98:1c:6a:57:fa:2c:
         7c:08:f0:4b:96:b8:81:ec:03:48:ca:e8:04:a4:a4:d5:32:31:
         af:cd:5c:d4:db:02:ed:42:2f:41:0c:97:24:56:e7:2e:e0:89:
         b6:9c:ba:1f:4b:92:2a:97:2a:d8:3c:5c:7d:b0:93:eb:d2:f5:
         55:c1:de:1a:bc:91:98:ef:fd:19:da:29:b3:cb:a4:30:10:ad:
         4c:ed:99:5b:56:4c:23:01:7b:3a:e6:4b:15:c2:ba:52:84:f4:
         54:8e:50:a0:82:8d:4d:e8:e5:86:95:60:06:de:18:00:76:73:
         60:c8:c4:72:00:b4:75:6d:9b:fb:61:b4:42:76:17:e2:84:27:
         b0:e2:d3:49:cd:3a:7b:37:18:60:9b:d6:ba:9a:76:d6:d1:37:
         a9:18:b2:25
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgICA4AwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTYw
NkJFQjEzN0I4OERCQkVFQkE3ODUxQTBBOEY4RDdEMTgyOTRBRjAeFw0yMzA2Mjcw
ODAxMjVaFw0yNDA2MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDAxMDg5Mjk1Nzg3QzA0
QjQxQ0I4NkIyNzlCRkRBOTIzOEQzRUVBNTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC7aUnq5T5kK4QOsRZiSoAOas7J29dG2vnqZV32MTU2bRr+XZZO
eoFdpHjxwWUJrPfXooIkDxWVzW9buCaA4Jbrg+u5m2FkhSHIjD7hLmhc9GevYt/G
nwnN3dzkyPAdcGWRStj4yD675+J+wt3ZSPHFzDGpEwB+k/9bJBwFx1+5wrmIZZFQ
1C4/n5scSuuwNNmq14nQDnGUa1qHr/De5u+F80mEvg5f/Ojst1IT1A/H3OFPlVhw
IQB/eRuQOF9OaUpOCzC3aoPq48X1nFPMfbA8Udgt42Nyw66lq1DKlCbV1txH2+YL
pE4EQNk/V5kjSp2dSE3UpG9iQdxilqe+tqbHAgMBAAGjggIoMIICJDAdBgNVHQ4E
FgQUAQiSlXh8BLQcuGsnm/2pI40+6lIwHwYDVR0jBBgwFoAUFga+sTe4jbvuunhR
oKj419GClK8wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwMTgzL0ZnYS1zVGU0amJ2dXVuaFJvS2o0MTlHQ2xLOC5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0ZnYS1zVGU0amJ2dXVuaFJvS2o0
MTlHQ2xLOC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8yMDE4My9BUWlTbFhoOEJMUWN1R3NubV8ycEk0MC02bEku
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAyuxZMA0GCSqGSIb3DQEBCwUAA4IBAQCbw6okpCvd7LLWegScf9qT
rrRMCgRoxI6oSfFDWO8Mq95Ul9/q1O0gF3tJEguDlFag3sVgxuC0/0tLgGvLLqBq
BkqZs7gjlzCl6/eMFxKAa7927itmSUpBaTZNb/BdMB7lQcv8RlCYHGpX+ix8CPBL
lriB7ANIyugEpKTVMjGvzVzU2wLtQi9BDJckVucu4Im2nLofS5IqlyrYPFx9sJPr
0vVVwd4avJGY7/0Z2imzy6QwEK1M7ZlbVkwjAXs65ksVwrpShPRUjlCggo1N6OWG
lWAG3hgAdnNgyMRyALR1bZv7YbRCdhfihCew4tNJzTp7Nxhgm9a6mnbW0TepGLIl
-----END CERTIFICATE-----
Generated at Thu Apr 25 00:30:27 2024 by rpki-client on console-fra.rpki-client.org