Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/207/M1mYq-GIfBBnwkdtnFEcmxvl3n4.roa
File:                     M1mYq-GIfBBnwkdtnFEcmxvl3n4.roa (raw, json)
Hash identifier:          mjjZ23XHmw6jsF2o4yEeHPK3/TEv0x85d5mQcBZpP/g=
Subject key identifier:   33:59:98:AB:E1:88:7C:10:67:C2:47:6D:9C:51:1C:9B:1B:E5:DE:7E
Certificate issuer:       /CN=67018B4DFE54BD644E000641A234B471DB20B892
Certificate serial:       90
Authority key identifier: 67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/M1mYq-GIfBBnwkdtnFEcmxvl3n4.roa
Signing time:             Wed 31 Jul 2024 01:30:45 +0000
ROA not before:           Wed 31 Jul 2024 01:30:45 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     38644
IP address blocks:        210.173.190.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 144 (0x90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67018B4DFE54BD644E000641A234B471DB20B892
        Validity
            Not Before: Jul 31 01:30:45 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=335998ABE1887C1067C2476D9C511C9B1BE5DE7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5c:09:de:03:76:2e:9b:78:69:d2:16:b5:9a:
                    c8:1b:d6:db:60:5a:b5:66:30:68:18:53:3a:b3:1a:
                    e7:59:5a:8c:2d:f1:e4:e1:b1:3b:76:65:84:b7:3a:
                    33:24:e8:c3:79:e1:90:d4:08:be:65:d2:47:16:04:
                    60:be:27:db:9e:4e:e5:8c:fc:56:5f:8d:cd:2d:8c:
                    9d:6f:4f:9e:55:ce:40:31:ff:0c:44:2b:6e:05:9c:
                    2c:55:1f:33:76:f6:9e:ad:b6:6b:59:52:40:1b:71:
                    d9:35:ff:10:20:b0:0a:46:c4:d0:3f:db:6e:6e:7a:
                    4d:27:a3:71:52:8e:45:9f:27:85:9e:b6:45:c0:e0:
                    a8:8f:be:23:0f:ea:cb:48:d1:0d:57:65:ba:72:7b:
                    ec:ca:23:de:ba:01:96:19:70:52:3d:f8:36:34:b8:
                    e9:3d:57:9c:5a:7e:df:18:85:ed:25:ff:29:0b:82:
                    fa:68:d8:bf:8c:c7:c6:ae:60:34:b3:1d:88:7f:3b:
                    8c:76:ae:97:c1:11:c0:b8:28:b8:6d:f4:49:e2:62:
                    09:60:84:0e:65:3d:dd:e8:51:5e:a9:ab:93:7f:03:
                    48:78:b1:b4:b7:10:e9:57:34:40:6b:20:a9:21:e2:
                    7d:a7:d6:fc:78:ee:c5:50:2a:25:78:45:c6:f8:e8:
                    ac:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:59:98:AB:E1:88:7C:10:67:C2:47:6D:9C:51:1C:9B:1B:E5:DE:7E
            X509v3 Authority Key Identifier:
                keyid:67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/M1mYq-GIfBBnwkdtnFEcmxvl3n4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.173.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:4a:df:1b:3f:6f:f1:36:c8:96:3c:9c:69:d1:7b:ad:7b:74:
         f9:d4:28:14:fd:7b:f8:9a:4e:ca:63:d2:35:a6:d3:1f:33:e9:
         fe:bf:be:74:5f:98:b1:88:fd:6b:4d:44:df:44:b0:cd:c2:ba:
         5e:b6:b3:72:c0:64:70:c6:87:a3:3f:49:ce:34:33:f7:01:3e:
         95:1e:13:b0:48:26:3b:46:7a:4e:cf:dc:3e:0f:2f:89:2e:ad:
         47:5d:76:0f:9d:cf:56:08:ce:b1:a7:b8:6b:4f:60:11:a5:7b:
         93:3b:02:27:88:d5:36:34:00:b8:50:4a:bc:0d:96:d5:9a:3e:
         68:80:aa:81:16:cb:05:68:9b:20:3a:b2:0a:a9:5e:88:97:c4:
         98:cf:84:30:2f:11:ab:47:4e:b5:a0:14:2b:6a:75:bc:40:92:
         93:65:df:99:59:2e:d9:a2:92:5b:f6:60:1c:38:f7:2e:70:58:
         a7:1a:03:68:21:01:38:9b:2c:7b:66:d8:5c:ed:ca:b5:f1:34:
         f1:59:78:47:e8:af:1b:15:12:8c:4e:30:8b:17:75:4f:bf:98:
         34:7a:d7:91:94:9b:d2:08:29:5c:74:6b:3d:72:41:e1:b2:ca:
         66:5f:1e:ce:28:d1:9e:55:9f:f5:60:f7:83:e5:2b:15:1c:19:
         45:6e:06:72
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjcw
MThCNERGRTU0QkQ2NDRFMDAwNjQxQTIzNEI0NzFEQjIwQjg5MjAeFw0yNDA3MzEw
MTMwNDVaFw0yNTA3MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDMzNTk5OEFCRTE4ODdD
MTA2N0MyNDc2RDlDNTExQzlCMUJFNURFN0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCzXAneA3Yum3hp0ha1msgb1ttgWrVmMGgYUzqzGudZWowt8eTh
sTt2ZYS3OjMk6MN54ZDUCL5l0kcWBGC+J9ueTuWM/FZfjc0tjJ1vT55VzkAx/wxE
K24FnCxVHzN29p6ttmtZUkAbcdk1/xAgsApGxNA/225uek0no3FSjkWfJ4WetkXA
4KiPviMP6stI0Q1XZbpye+zKI966AZYZcFI9+DY0uOk9V5xaft8Yhe0l/ykLgvpo
2L+Mx8auYDSzHYh/O4x2rpfBEcC4KLht9EniYglghA5lPd3oUV6pq5N/A0h4sbS3
EOlXNEBrIKkh4n2n1vx47sVQKiV4Rcb46KxRAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUM1mYq+GIfBBnwkdtnFEcmxvl3n4wHwYDVR0jBBgwFoAUZwGLTf5UvWROAAZB
ojS0cdsguJIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIwNy9ad0dMVGY1VXZXUk9BQVpCb2pTMGNkc2d1SkkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9ad0dMVGY1VXZXUk9BQVpCb2pTMGNk
c2d1SkkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMjA3L00xbVlxLUdJZkJCbndrZHRuRkVjbXh2bDNuNC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADSrb4wDQYJKoZIhvcNAQELBQADggEBADFK3xs/b/E2yJY8nGnRe617dPnU
KBT9e/iaTspj0jWm0x8z6f6/vnRfmLGI/WtNRN9EsM3Cul62s3LAZHDGh6M/Sc40
M/cBPpUeE7BIJjtGek7P3D4PL4kurUdddg+dz1YIzrGnuGtPYBGle5M7AieI1TY0
ALhQSrwNltWaPmiAqoEWywVomyA6sgqpXoiXxJjPhDAvEatHTrWgFCtqdbxAkpNl
35lZLtmiklv2YBw49y5wWKcaA2ghATibLHtm2FztyrXxNPFZeEforxsVEoxOMIsX
dU+/mDR615GUm9IIKVx0az1yQeGyymZfHs4o0Z5Vn/Vg94PlKxUcGUVuBnI=
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:28 2024 by rpki-client on console-ams.rpki-client.org