Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/208/xZzo24e4wjAuy_N8h6m7_j2NDlg.roa
File:                     xZzo24e4wjAuy_N8h6m7_j2NDlg.roa (raw, json)
Hash identifier:          a14hobsq+yg+ilnR7DWzUlvuhh5RyWbnYPmK6lSkYlw=
Subject key identifier:   C5:9C:E8:DB:87:B8:C2:30:2E:CB:F3:7C:87:A9:BB:FE:3D:8D:0E:58
Certificate issuer:       /CN=7A7D206E5113C27285FDAA85362B4F6F9BD8D70D
Certificate serial:       17
Authority key identifier: 7A:7D:20:6E:51:13:C2:72:85:FD:AA:85:36:2B:4F:6F:9B:D8:D7:0D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/en0gblETwnKF_aqFNitPb5vY1w0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/208/xZzo24e4wjAuy_N8h6m7_j2NDlg.roa
Signing time:             Sun 30 Jun 2024 01:33:02 +0000
ROA not before:           Sun 30 Jun 2024 01:33:02 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     7682
IP address blocks:        210.229.160.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/208/en0gblETwnKF_aqFNitPb5vY1w0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/208/en0gblETwnKF_aqFNitPb5vY1w0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/en0gblETwnKF_aqFNitPb5vY1w0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23 (0x17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A7D206E5113C27285FDAA85362B4F6F9BD8D70D
        Validity
            Not Before: Jun 30 01:33:02 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=C59CE8DB87B8C2302ECBF37C87A9BBFE3D8D0E58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:40:1f:76:3c:0a:8c:b9:48:a5:86:76:ec:f6:
                    0e:6b:6d:9c:26:a5:08:df:19:9f:4d:5f:ff:52:a0:
                    54:a1:a0:6f:13:35:4f:d4:56:b7:1a:f7:86:d0:db:
                    08:ca:3d:45:10:80:cf:11:3d:9a:49:65:ae:b8:10:
                    fb:31:12:00:70:82:ee:1a:50:3b:17:26:ea:79:82:
                    3c:24:77:b9:de:59:74:36:95:d8:ce:c6:c0:a7:99:
                    77:9d:ba:97:d0:73:bb:ab:4c:b5:ee:db:a8:38:b6:
                    fa:80:fe:20:18:4c:b3:86:d1:29:99:cd:39:ef:d8:
                    df:c6:d1:1b:27:82:21:29:6f:db:60:32:4b:e3:ce:
                    35:81:e0:d1:87:b3:0c:70:3d:7c:37:a6:11:a5:b0:
                    18:c1:c3:07:e7:69:b2:ee:b7:cb:a6:59:39:54:5a:
                    d5:c8:f1:87:f0:02:62:53:16:21:ca:dd:8e:55:a2:
                    38:bc:43:b3:c7:d7:56:aa:6b:6f:ec:44:7b:75:09:
                    fa:8a:97:78:71:c2:6d:2c:35:b1:5d:f2:fa:e9:33:
                    23:2d:99:49:66:e4:50:f8:14:bf:59:99:98:b8:51:
                    99:4a:32:d8:f5:f3:a5:70:5f:fd:5d:45:47:22:d0:
                    e4:f7:a9:a5:d9:b1:8e:b2:9c:f4:4d:e8:17:cc:8a:
                    37:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:9C:E8:DB:87:B8:C2:30:2E:CB:F3:7C:87:A9:BB:FE:3D:8D:0E:58
            X509v3 Authority Key Identifier:
                keyid:7A:7D:20:6E:51:13:C2:72:85:FD:AA:85:36:2B:4F:6F:9B:D8:D7:0D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/208/en0gblETwnKF_aqFNitPb5vY1w0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/en0gblETwnKF_aqFNitPb5vY1w0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/208/xZzo24e4wjAuy_N8h6m7_j2NDlg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.229.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b5:4e:37:d1:14:45:82:a3:ab:57:5b:7c:0a:b3:b7:b0:57:33:
         9c:25:57:0c:65:35:ef:d8:24:ec:62:82:af:88:b4:f3:5c:4f:
         60:16:c7:ef:1d:28:87:7e:e5:6e:c3:7f:4f:03:3f:9a:57:78:
         df:d9:3b:12:a1:a2:4e:bc:bc:03:6b:a2:78:bc:34:ef:15:f5:
         0a:d8:1c:8d:8d:7a:66:cd:42:b7:4b:c3:ec:ab:ee:fe:c1:61:
         1b:c4:92:e9:60:53:66:a2:ce:81:0f:8f:2c:83:c9:1d:3c:a1:
         7f:b1:6c:ee:6b:85:de:2f:30:e5:73:bf:f1:2e:79:43:b2:6a:
         1c:94:b6:1c:73:c3:8e:24:0a:b5:72:fa:57:a7:44:f5:fb:12:
         2d:0e:da:fb:3d:a2:81:88:5f:74:b5:3f:da:48:e3:0b:36:5b:
         ee:68:3f:38:65:cb:d2:8a:c8:06:24:cb:86:15:ce:1a:66:ca:
         9d:67:30:c4:b2:a2:ab:71:6c:61:cd:d9:aa:ec:27:2e:62:41:
         c6:65:4a:ee:09:92:29:05:20:f4:d7:5b:a0:d4:2a:b8:a1:2e:
         e9:14:76:30:45:54:85:21:70:b0:0f:82:0f:58:6c:26:fe:29:
         25:ce:51:d5:f6:34:77:14:16:2d:c5:c0:eb:a3:05:f1:a8:3d:
         ea:c3:ea:1e
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBFzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3QTdE
MjA2RTUxMTNDMjcyODVGREFBODUzNjJCNEY2RjlCRDhENzBEMB4XDTI0MDYzMDAx
MzMwMloXDTI1MDYyNDEwNDY0NVowMzExMC8GA1UEAxMoQzU5Q0U4REI4N0I4QzIz
MDJFQ0JGMzdDODdBOUJCRkUzRDhEMEU1ODCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALtAH3Y8Coy5SKWGduz2DmttnCalCN8Zn01f/1KgVKGgbxM1T9RW
txr3htDbCMo9RRCAzxE9mkllrrgQ+zESAHCC7hpQOxcm6nmCPCR3ud5ZdDaV2M7G
wKeZd526l9Bzu6tMte7bqDi2+oD+IBhMs4bRKZnNOe/Y38bRGyeCISlv22AyS+PO
NYHg0YezDHA9fDemEaWwGMHDB+dpsu63y6ZZOVRa1cjxh/ACYlMWIcrdjlWiOLxD
s8fXVqprb+xEe3UJ+oqXeHHCbSw1sV3y+ukzIy2ZSWbkUPgUv1mZmLhRmUoy2PXz
pXBf/V1FRyLQ5PeppdmxjrKc9E3oF8yKN/UCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBTFnOjbh7jCMC7L83yHqbv+PY0OWDAfBgNVHSMEGDAWgBR6fSBuURPCcoX9qoU2
K09vm9jXDTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjA4L2VuMGdibEVUd25LRl9hcUZOaXRQYjV2WTF3MC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2VuMGdibEVUd25LRl9hcUZOaXRQYjV2
WTF3MC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8yMDgveFp6bzI0ZTR3akF1eV9OOGg2bTdfajJORGxnLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBdLloDANBgkqhkiG9w0BAQsFAAOCAQEAtU430RRFgqOrV1t8CrO3sFcznCVX
DGU179gk7GKCr4i081xPYBbH7x0oh37lbsN/TwM/mld439k7EqGiTry8A2uieLw0
7xX1CtgcjY16Zs1Ct0vD7Kvu/sFhG8SS6WBTZqLOgQ+PLIPJHTyhf7Fs7muF3i8w
5XO/8S55Q7JqHJS2HHPDjiQKtXL6V6dE9fsSLQ7a+z2igYhfdLU/2kjjCzZb7mg/
OGXL0orIBiTLhhXOGmbKnWcwxLKiq3FsYc3ZquwnLmJBxmVK7gmSKQUg9NdboNQq
uKEu6RR2MEVUhSFwsA+CD1hsJv4pJc5R1fY0dxQWLcXA66MF8ag96sPqHg==
-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:29 2024 by rpki-client on console-ams.rpki-client.org