Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/-ADKEtBGb_f1uMMcKrQiiEKHJKM.roa
File:                     -ADKEtBGb_f1uMMcKrQiiEKHJKM.roa (raw, json)
Hash identifier:          faVuZTereAqypzun5RgZjjuONdRkn6QhYlw1pRRKR84=
Subject key identifier:   F8:00:CA:12:D0:46:6F:F7:F5:B8:C3:1C:2A:B4:22:88:42:87:24:A3
Certificate issuer:       /CN=1850341C0E586CF47547FD06E54EDBE6902A0E24
Certificate serial:       2C
Authority key identifier: 18:50:34:1C:0E:58:6C:F4:75:47:FD:06:E5:4E:DB:E6:90:2A:0E:24
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GFA0HA5YbPR1R_0G5U7b5pAqDiQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/-ADKEtBGb_f1uMMcKrQiiEKHJKM.roa
Signing time:             Fri 01 Dec 2023 01:30:47 +0000
ROA not before:           Fri 01 Dec 2023 01:30:47 +0000
ROA not after:            Thu 14 Nov 2024 01:30:03 +0000
asID:                     9351
IP address blocks:        193.116.0.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/GFA0HA5YbPR1R_0G5U7b5pAqDiQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/GFA0HA5YbPR1R_0G5U7b5pAqDiQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GFA0HA5YbPR1R_0G5U7b5pAqDiQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 16 Jun 2024 13:39:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1850341C0E586CF47547FD06E54EDBE6902A0E24
        Validity
            Not Before: Dec  1 01:30:47 2023 GMT
            Not After : Nov 14 01:30:03 2024 GMT
        Subject: CN=F800CA12D0466FF7F5B8C31C2AB42288428724A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:87:0a:a4:e7:db:2f:ab:09:15:57:e7:13:e6:
                    a4:41:a4:5c:0d:d1:35:c4:17:6b:c4:71:fa:7c:8e:
                    ec:0d:a1:7c:89:45:ab:86:ae:de:75:a9:24:ea:b8:
                    9f:69:d8:a3:63:f2:f9:53:e0:c7:7b:f6:a3:ae:d2:
                    6e:b0:c2:89:c9:d9:5d:fb:19:78:b2:72:2e:d7:e2:
                    aa:5d:b8:ec:57:b7:17:d4:d6:cd:04:70:ae:fa:ff:
                    77:a6:3e:c2:eb:dc:ab:76:3c:59:b3:22:92:10:ac:
                    ab:c1:d3:58:24:a8:70:b4:89:16:1a:24:87:19:9e:
                    9e:2a:24:07:ca:69:f6:13:58:2e:c0:c4:b9:6c:72:
                    96:28:fa:98:0a:aa:5c:a3:7b:7f:cf:a2:28:64:0a:
                    d0:90:2e:d0:8f:32:76:a8:16:b6:57:e7:cf:e5:b6:
                    e7:b1:af:fb:59:54:1a:1c:db:3a:25:0d:18:6a:bb:
                    f7:b1:85:d7:6b:8d:51:16:56:f0:dd:74:65:bb:46:
                    a4:d4:55:2b:eb:2e:b4:e4:41:4c:ee:5a:a2:2b:6a:
                    d7:8c:b9:4d:9f:df:49:e6:75:84:d2:e8:47:8c:c0:
                    c1:ef:a4:10:62:e2:70:ee:47:6a:05:04:b0:91:42:
                    83:6b:99:76:e8:8d:a8:1a:5b:f0:f7:c2:07:cf:dc:
                    4f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:00:CA:12:D0:46:6F:F7:F5:B8:C3:1C:2A:B4:22:88:42:87:24:A3
            X509v3 Authority Key Identifier:
                keyid:18:50:34:1C:0E:58:6C:F4:75:47:FD:06:E5:4E:DB:E6:90:2A:0E:24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/GFA0HA5YbPR1R_0G5U7b5pAqDiQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GFA0HA5YbPR1R_0G5U7b5pAqDiQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/-ADKEtBGb_f1uMMcKrQiiEKHJKM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.116.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         0f:1b:89:e4:77:58:85:5b:0d:d1:ce:fa:d9:52:70:54:c7:ea:
         6a:44:45:f7:9b:eb:9e:ef:16:05:31:d6:b3:e9:ef:2d:f7:65:
         f1:d4:66:42:13:89:82:7e:99:cc:e3:5c:4e:c4:9e:ed:fb:b6:
         41:63:9c:a4:3d:0f:af:5b:90:d9:4b:b2:63:d1:8c:c0:59:de:
         70:5d:7e:92:39:63:51:f0:ca:5c:5b:d1:f1:2e:9f:d5:97:e8:
         f5:72:80:74:8b:b3:8b:fb:ad:b5:1d:fb:cb:67:74:4b:96:27:
         42:b7:04:bb:ef:10:dd:30:ad:c7:21:e0:c8:a3:3f:98:99:bf:
         7d:7c:e4:30:4e:44:17:97:b4:17:f3:50:56:f4:c5:da:18:ce:
         d4:21:1b:1e:63:95:95:26:24:58:bb:7d:36:4f:9e:17:43:d9:
         f9:bd:f9:b1:10:0d:76:c7:c2:13:dc:9b:c9:ff:dc:c3:2f:d0:
         b7:08:5f:46:88:85:2b:44:57:3f:f3:31:da:5a:5f:94:2d:59:
         e8:d8:00:6a:18:1f:d1:e0:48:27:fc:59:83:3c:48:87:59:c5:
         14:17:f5:78:8c:d5:76:28:e3:a6:b6:f2:5d:6c:8e:34:53:e7:
         d3:05:90:1e:78:99:dc:c5:e4:ff:97:7f:6d:5c:2b:0c:c4:29:
         ed:f5:8d:29
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBLDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxODUw
MzQxQzBFNTg2Q0Y0NzU0N0ZEMDZFNTRFREJFNjkwMkEwRTI0MB4XDTIzMTIwMTAx
MzA0N1oXDTI0MTExNDAxMzAwM1owMzExMC8GA1UEAxMoRjgwMENBMTJEMDQ2NkZG
N0Y1QjhDMzFDMkFCNDIyODg0Mjg3MjRBMzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAK6HCqTn2y+rCRVX5xPmpEGkXA3RNcQXa8Rx+nyO7A2hfIlFq4au
3nWpJOq4n2nYo2Py+VPgx3v2o67SbrDCicnZXfsZeLJyLtfiql247Fe3F9TWzQRw
rvr/d6Y+wuvcq3Y8WbMikhCsq8HTWCSocLSJFhokhxmeniokB8pp9hNYLsDEuWxy
lij6mAqqXKN7f8+iKGQK0JAu0I8ydqgWtlfnz+W257Gv+1lUGhzbOiUNGGq797GF
12uNURZW8N10ZbtGpNRVK+sutORBTO5aoitq14y5TZ/fSeZ1hNLoR4zAwe+kEGLi
cO5HagUEsJFCg2uZduiNqBpb8PfCB8/cT08CAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBT4AMoS0EZv9/W4wxwqtCKIQockozAfBgNVHSMEGDAWgBQYUDQcDlhs9HVH/Qbl
TtvmkCoOJDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjM0L0dGQTBIQTVZYlBSMVJfMEc1VTdiNXBBcURpUS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0dGQTBIQTVZYlBSMVJfMEc1VTdiNXBB
cURpUS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8yMzQvLUFES0V0QkdiX2YxdU1NY0tyUWlpRUtISktNLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBcF0ADANBgkqhkiG9w0BAQsFAAOCAQEADxuJ5HdYhVsN0c762VJwVMfqakRF
95vrnu8WBTHWs+nvLfdl8dRmQhOJgn6ZzONcTsSe7fu2QWOcpD0Pr1uQ2UuyY9GM
wFnecF1+kjljUfDKXFvR8S6f1Zfo9XKAdIuzi/uttR37y2d0S5YnQrcEu+8Q3TCt
xyHgyKM/mJm/fXzkME5EF5e0F/NQVvTF2hjO1CEbHmOVlSYkWLt9Nk+eF0PZ+b35
sRANdsfCE9ybyf/cwy/QtwhfRoiFK0RXP/Mx2lpflC1Z6NgAahgf0eBIJ/xZgzxI
h1nFFBf1eIzVdijjprbyXWyONFPn0wWQHniZ3MXk/5d/bVwrDMQp7fWNKQ==
-----END CERTIFICATE-----
Generated at Mon Jun 10 10:26:08 2024 by rpki-client on console-fra.rpki-client.org