Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/AKbXwp7F6lGBS8SR82Ryf4RM4Ks.roa
File:                     AKbXwp7F6lGBS8SR82Ryf4RM4Ks.roa (raw, json)
Hash identifier:          l2yCs1/fIG2Lrx8HDPtHdTac1GCKJDZiNfWX730kkRk=
Subject key identifier:   00:A6:D7:C2:9E:C5:EA:51:81:4B:C4:91:F3:64:72:7F:84:4C:E0:AB
Certificate issuer:       /CN=1850341C0E586CF47547FD06E54EDBE6902A0E24
Certificate serial:       3B
Authority key identifier: 18:50:34:1C:0E:58:6C:F4:75:47:FD:06:E5:4E:DB:E6:90:2A:0E:24
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GFA0HA5YbPR1R_0G5U7b5pAqDiQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/AKbXwp7F6lGBS8SR82Ryf4RM4Ks.roa
Signing time:             Thu 31 Oct 2024 01:33:26 +0000
ROA not before:           Thu 31 Oct 2024 01:33:26 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     9351
IP address blocks:        193.116.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/GFA0HA5YbPR1R_0G5U7b5pAqDiQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/GFA0HA5YbPR1R_0G5U7b5pAqDiQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GFA0HA5YbPR1R_0G5U7b5pAqDiQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59 (0x3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1850341C0E586CF47547FD06E54EDBE6902A0E24
        Validity
            Not Before: Oct 31 01:33:26 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=00A6D7C29EC5EA51814BC491F364727F844CE0AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:42:3a:09:bd:6c:d6:0a:b0:72:98:4f:e7:f7:
                    a3:82:7f:e1:a2:5a:21:c9:ea:55:34:f0:75:a0:b5:
                    ba:6e:20:e5:34:43:bc:f0:30:45:fa:97:90:a5:b9:
                    ae:3f:42:b8:c7:e6:bf:b4:82:1e:83:df:66:09:71:
                    27:19:64:9b:8c:20:af:b3:c8:72:e9:62:82:64:28:
                    c8:0f:64:29:f8:60:f7:3c:fa:e2:6b:4f:b7:41:7e:
                    a4:e2:54:bc:63:6f:af:d5:a4:22:af:66:8c:52:3e:
                    33:c5:2c:2e:f9:ae:69:c5:85:95:da:68:d2:25:78:
                    fa:21:e3:d3:b1:be:42:fc:7a:ce:49:57:03:6a:62:
                    3b:85:f6:94:5a:6a:dd:56:61:b8:34:b6:86:4c:ae:
                    be:00:1f:ea:38:78:ae:4e:31:b0:bc:22:5d:89:30:
                    f9:c4:6d:2d:2e:83:3e:ac:1b:3c:40:12:14:26:09:
                    93:84:3f:8e:00:cf:d8:d3:86:37:02:84:48:13:1f:
                    7a:0a:69:1f:0f:ec:4c:07:90:6c:b6:3c:ef:57:10:
                    92:ef:31:b5:5a:48:5d:23:00:c8:e0:36:7e:46:04:
                    64:57:3a:28:26:36:64:f9:42:26:5d:43:16:3c:9e:
                    be:de:b1:38:39:07:67:4e:ad:f0:77:63:9c:84:f9:
                    fa:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:A6:D7:C2:9E:C5:EA:51:81:4B:C4:91:F3:64:72:7F:84:4C:E0:AB
            X509v3 Authority Key Identifier:
                keyid:18:50:34:1C:0E:58:6C:F4:75:47:FD:06:E5:4E:DB:E6:90:2A:0E:24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/GFA0HA5YbPR1R_0G5U7b5pAqDiQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GFA0HA5YbPR1R_0G5U7b5pAqDiQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/AKbXwp7F6lGBS8SR82Ryf4RM4Ks.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.116.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         4e:f7:d1:9e:7a:c2:a7:8e:a7:65:1d:0f:f7:88:c6:a5:a5:ee:
         53:fd:f8:86:10:96:88:99:0e:4c:fd:fe:04:93:04:a3:cd:46:
         13:81:84:3e:90:37:9e:a0:80:1d:d4:07:ff:59:74:e5:e9:a6:
         6d:b9:36:58:fc:4a:80:f7:67:d5:2c:35:9e:7f:0e:ff:f2:c8:
         c1:ff:75:cc:9d:c3:af:46:81:67:8f:92:33:94:a8:b7:09:a9:
         17:82:9b:9a:88:f7:b3:27:d0:32:47:ad:7e:dc:d6:c4:76:ba:
         70:e4:1f:46:01:5c:db:0f:00:ad:a9:2c:35:ad:83:11:4b:c4:
         a5:b0:2d:7f:ac:f5:02:d9:c3:83:9d:30:6e:ac:c5:e9:87:bf:
         7b:59:80:65:ac:ab:ea:57:eb:60:7f:44:38:75:0a:38:e6:13:
         e8:5c:87:29:2e:91:a6:e4:e2:ac:df:21:d5:2d:3f:0b:91:91:
         cd:31:f2:70:49:e3:cb:58:3a:bc:fd:68:9c:9b:64:be:52:8b:
         9e:b1:57:b6:c9:89:dc:de:8d:91:0a:ea:75:3c:49:9a:4d:14:
         0a:f2:e5:11:52:a1:f2:5e:d3:5b:53:ff:fd:4e:67:db:22:c0:
         ce:3e:6d:d6:83:ae:38:e1:82:61:8b:2f:8e:ff:56:c9:89:81:
         9e:cb:71:0a
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBOzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxODUw
MzQxQzBFNTg2Q0Y0NzU0N0ZEMDZFNTRFREJFNjkwMkEwRTI0MB4XDTI0MTAzMTAx
MzMyNloXDTI1MTAxNTAxMzAwMlowMzExMC8GA1UEAxMoMDBBNkQ3QzI5RUM1RUE1
MTgxNEJDNDkxRjM2NDcyN0Y4NDRDRTBBQjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAK9COgm9bNYKsHKYT+f3o4J/4aJaIcnqVTTwdaC1um4g5TRDvPAw
RfqXkKW5rj9CuMfmv7SCHoPfZglxJxlkm4wgr7PIculigmQoyA9kKfhg9zz64mtP
t0F+pOJUvGNvr9WkIq9mjFI+M8UsLvmuacWFldpo0iV4+iHj07G+Qvx6zklXA2pi
O4X2lFpq3VZhuDS2hkyuvgAf6jh4rk4xsLwiXYkw+cRtLS6DPqwbPEASFCYJk4Q/
jgDP2NOGNwKESBMfegppHw/sTAeQbLY871cQku8xtVpIXSMAyOA2fkYEZFc6KCY2
ZPlCJl1DFjyevt6xODkHZ06t8HdjnIT5+u0CAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBQAptfCnsXqUYFLxJHzZHJ/hEzgqzAfBgNVHSMEGDAWgBQYUDQcDlhs9HVH/Qbl
TtvmkCoOJDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjM0L0dGQTBIQTVZYlBSMVJfMEc1VTdiNXBBcURpUS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0dGQTBIQTVZYlBSMVJfMEc1VTdiNXBB
cURpUS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8yMzQvQUtiWHdwN0Y2bEdCUzhTUjgyUnlmNFJNNEtzLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBcF0ADANBgkqhkiG9w0BAQsFAAOCAQEATvfRnnrCp46nZR0P94jGpaXuU/34
hhCWiJkOTP3+BJMEo81GE4GEPpA3nqCAHdQH/1l05emmbbk2WPxKgPdn1Sw1nn8O
//LIwf91zJ3Dr0aBZ4+SM5SotwmpF4Kbmoj3syfQMketftzWxHa6cOQfRgFc2w8A
raksNa2DEUvEpbAtf6z1AtnDg50wbqzF6Ye/e1mAZayr6lfrYH9EOHUKOOYT6FyH
KS6RpuTirN8h1S0/C5GRzTHycEnjy1g6vP1onJtkvlKLnrFXtsmJ3N6NkQrqdTxJ
mk0UCvLlEVKh8l7TW1P//U5n2yLAzj5t1oOuOOGCYYsvjv9WyYmBnstxCg==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:22 2025 by rpki-client