Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/207/htK4WpA9uFw9LgpnaK5Y2xvO1nE.roa
File:                     htK4WpA9uFw9LgpnaK5Y2xvO1nE.roa (raw, json)
Hash identifier:          bvgLNZCvO70OiFW9fyW24EobQ2QJ0TnknRa/UP1uBY0=
Subject key identifier:   86:D2:B8:5A:90:3D:B8:5C:3D:2E:0A:67:68:AE:58:DB:1B:CE:D6:71
Certificate issuer:       /CN=67018B4DFE54BD644E000641A234B471DB20B892
Certificate serial:       6B
Authority key identifier: 67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/htK4WpA9uFw9LgpnaK5Y2xvO1nE.roa
Signing time:             Mon 05 Jun 2023 04:49:06 +0000
ROA not before:           Mon 05 Jun 2023 04:49:06 +0000
ROA not after:            Tue 14 May 2024 01:30:02 +0000
asID:                     7521
IP address blocks:        210.173.178.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 13:35:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107 (0x6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67018B4DFE54BD644E000641A234B471DB20B892
        Validity
            Not Before: Jun  5 04:49:06 2023 GMT
            Not After : May 14 01:30:02 2024 GMT
        Subject: CN=86D2B85A903DB85C3D2E0A6768AE58DB1BCED671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:bb:d4:88:6f:e8:4f:24:ab:d4:8f:78:24:3b:
                    0b:df:fb:df:98:38:87:75:51:23:26:03:ab:ea:db:
                    07:ce:fd:a0:8a:7f:2a:2b:a5:88:41:38:2f:38:23:
                    71:89:26:e3:87:17:eb:8c:1b:be:ae:c9:e4:8c:11:
                    80:46:df:a6:8a:72:04:58:01:5a:81:1c:eb:bb:e6:
                    60:ea:a8:11:cd:1a:f1:86:ea:a4:4e:59:54:4a:53:
                    ad:fc:e4:b4:49:74:73:19:50:aa:26:55:2a:7c:73:
                    47:b3:44:5f:53:c5:01:f8:25:75:66:f3:19:6d:dc:
                    1e:70:f6:dc:a0:c3:c2:5d:76:4f:b1:78:33:c5:8b:
                    24:98:c7:e6:51:eb:78:cd:97:2b:3e:61:ec:34:5f:
                    60:8e:96:dd:89:8a:55:37:90:bd:cd:af:d2:d6:b9:
                    53:4b:29:92:b1:12:06:02:03:51:d1:59:1f:3d:3f:
                    d4:a3:0c:29:2e:a3:a9:cc:0e:b3:f6:95:4d:6a:5d:
                    14:56:98:ca:49:d1:4f:89:7a:c7:87:c9:aa:5c:b6:
                    29:6f:9b:3f:30:05:8c:b4:ce:96:dd:38:f3:1a:5a:
                    57:b6:70:b8:af:7c:96:7a:df:16:99:eb:1b:f0:92:
                    9a:d0:f8:a7:ad:e2:b1:9d:85:f9:b8:c4:88:3d:5b:
                    dd:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:D2:B8:5A:90:3D:B8:5C:3D:2E:0A:67:68:AE:58:DB:1B:CE:D6:71
            X509v3 Authority Key Identifier:
                keyid:67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/htK4WpA9uFw9LgpnaK5Y2xvO1nE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.173.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:ae:87:9c:a5:3d:c1:88:32:04:3a:bf:05:2b:c6:57:69:b6:
         d9:96:e3:88:0b:2a:05:3a:e1:2e:aa:06:49:23:7d:79:3b:62:
         b7:60:61:a2:de:03:0d:9f:e1:ef:f8:7c:59:89:c0:c6:af:cb:
         87:87:84:76:b4:9f:f1:d9:22:c0:4d:08:00:52:e7:63:b3:b4:
         5a:d4:a0:93:de:f3:33:9b:05:00:ad:0d:f4:f1:38:8a:91:06:
         b2:74:f0:b3:c3:42:aa:1b:5f:aa:f5:68:2d:00:e1:43:58:d3:
         c5:89:76:bf:95:13:ae:5b:d4:76:bf:02:fd:ea:f3:34:a3:2b:
         6d:b4:bb:0b:13:6f:db:c7:d9:9a:08:10:10:d0:bc:e9:44:be:
         88:f4:bc:5a:88:d5:27:92:d6:47:fb:a3:44:c4:cc:84:76:34:
         0d:82:aa:e5:6d:bc:61:b3:90:5c:af:31:3a:23:f0:40:1c:ff:
         d9:35:7a:45:19:17:cf:04:c0:46:4d:21:e1:36:c1:38:08:7f:
         43:66:3d:63:31:71:6a:31:50:c8:6a:12:af:b7:52:2e:9c:96:
         b2:77:ec:72:e7:6b:b3:4f:fe:94:7b:9a:84:b8:e1:fb:f7:d3:
         8c:fa:31:3d:ce:2e:50:3a:4a:30:07:19:41:fc:1c:03:5c:2a:
         9f:68:5b:11
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBazANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2NzAx
OEI0REZFNTRCRDY0NEUwMDA2NDFBMjM0QjQ3MURCMjBCODkyMB4XDTIzMDYwNTA0
NDkwNloXDTI0MDUxNDAxMzAwMlowMzExMC8GA1UEAxMoODZEMkI4NUE5MDNEQjg1
QzNEMkUwQTY3NjhBRTU4REIxQkNFRDY3MTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMu71Ihv6E8kq9SPeCQ7C9/735g4h3VRIyYDq+rbB879oIp/Kiul
iEE4LzgjcYkm44cX64wbvq7J5IwRgEbfpopyBFgBWoEc67vmYOqoEc0a8YbqpE5Z
VEpTrfzktEl0cxlQqiZVKnxzR7NEX1PFAfgldWbzGW3cHnD23KDDwl12T7F4M8WL
JJjH5lHreM2XKz5h7DRfYI6W3YmKVTeQvc2v0ta5U0spkrESBgIDUdFZHz0/1KMM
KS6jqcwOs/aVTWpdFFaYyknRT4l6x4fJqly2KW+bPzAFjLTOlt048xpaV7ZwuK98
lnrfFpnrG/CSmtD4p63isZ2F+bjEiD1b3VsCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBSG0rhakD24XD0uCmdorljbG87WcTAfBgNVHSMEGDAWgBRnAYtN/lS9ZE4ABkGi
NLRx2yC4kjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjA3L1p3R0xUZjVVdldST0FBWkJvalMwY2RzZ3VKSS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1p3R0xUZjVVdldST0FBWkJvalMwY2Rz
Z3VKSS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8yMDcvaHRLNFdwQTl1Rnc5TGdwbmFLNVkyeHZPMW5FLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEANKtsjANBgkqhkiG9w0BAQsFAAOCAQEAsa6HnKU9wYgyBDq/BSvGV2m22Zbj
iAsqBTrhLqoGSSN9eTtit2Bhot4DDZ/h7/h8WYnAxq/Lh4eEdrSf8dkiwE0IAFLn
Y7O0WtSgk97zM5sFAK0N9PE4ipEGsnTws8NCqhtfqvVoLQDhQ1jTxYl2v5UTrlvU
dr8C/erzNKMrbbS7CxNv28fZmggQENC86US+iPS8WojVJ5LWR/ujRMTMhHY0DYKq
5W28YbOQXK8xOiPwQBz/2TV6RRkXzwTARk0h4TbBOAh/Q2Y9YzFxajFQyGoSr7dS
LpyWsnfscudrs0/+lHuahLjh+/fTjPoxPc4uUDpKMAcZQfwcA1wqn2hbEQ==
-----END CERTIFICATE-----
Generated at Sat Apr 27 10:15:51 2024 by rpki-client on console-ams.rpki-client.org