Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/fOqSaVMOVoNB0JY6wqHJkmWcXz4.roa
File:                     fOqSaVMOVoNB0JY6wqHJkmWcXz4.roa (raw, json)
Hash identifier:          uANyV4hpxyRbnuIgNGmNvpLPfUrJbdiAurduZqONSLA=
Subject key identifier:   7C:EA:92:69:53:0E:56:83:41:D0:96:3A:C2:A1:C9:92:65:9C:5F:3E
Certificate issuer:       /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Certificate serial:       7B
Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/fOqSaVMOVoNB0JY6wqHJkmWcXz4.roa
Signing time:             Mon 01 Jan 2024 01:28:20 +0000
ROA not before:           Mon 01 Jan 2024 01:28:20 +0000
ROA not after:            Sat 14 Dec 2024 01:30:03 +0000
asID:                     9351
IP address blocks:        124.40.96.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123 (0x7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
        Validity
            Not Before: Jan  1 01:28:20 2024 GMT
            Not After : Dec 14 01:30:03 2024 GMT
        Subject: CN=7CEA9269530E568341D0963AC2A1C992659C5F3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:22:d2:d7:c9:0f:b9:84:6a:db:85:55:ad:42:
                    c7:1f:fe:6d:56:73:45:dc:25:89:21:93:cd:fa:65:
                    46:ae:c2:e6:7a:7a:ea:3a:7a:77:c5:dc:1a:ac:2e:
                    ca:2d:76:1e:f1:1b:31:be:69:9c:ab:4c:82:ac:ff:
                    63:54:ef:5a:60:b5:96:4f:df:66:57:d9:62:35:0c:
                    09:71:b7:3f:0f:9c:6b:ba:35:47:61:34:11:59:dd:
                    ec:43:fa:69:64:96:0b:27:9e:b6:f2:80:bb:67:2f:
                    96:ff:e4:5a:49:58:3b:04:d0:10:90:f7:10:ec:74:
                    61:0f:d1:ca:ce:85:f7:50:d6:0b:bf:39:87:52:83:
                    90:ea:de:97:eb:0c:4a:a4:ad:1c:d6:bb:be:c1:70:
                    f0:20:b6:ff:25:80:f6:e3:67:81:c4:9d:96:90:da:
                    70:b0:91:f8:b3:9a:ac:cb:43:0c:a5:a6:c0:d9:da:
                    f1:31:84:0a:bf:5e:fe:60:09:88:39:e3:a5:a2:67:
                    40:8e:b6:af:78:cc:8d:69:31:6a:2b:6a:5e:75:3d:
                    ec:44:da:f0:c3:24:6b:4d:01:1a:79:3b:21:2d:3b:
                    5c:22:64:64:d1:7d:39:86:41:24:b8:da:42:88:21:
                    28:61:cd:cf:56:21:d5:7e:c1:48:30:a7:d0:6e:48:
                    19:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:EA:92:69:53:0E:56:83:41:D0:96:3A:C2:A1:C9:92:65:9C:5F:3E
            X509v3 Authority Key Identifier:
                keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/fOqSaVMOVoNB0JY6wqHJkmWcXz4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.40.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b5:ff:8f:af:ed:c5:e3:bb:04:55:0e:ea:1a:c6:ba:91:88:b7:
         18:0d:1d:31:dd:e9:c4:55:30:17:97:2b:2b:0b:ef:53:2a:01:
         01:7d:41:ff:69:86:d5:4b:91:53:97:51:7c:f7:6d:03:07:42:
         af:ba:48:42:62:20:5d:97:0a:30:ff:f4:c0:3c:01:c2:65:e7:
         fe:f3:e8:26:1d:58:69:fd:c4:d6:4a:44:51:96:16:7f:e3:6b:
         a5:71:a2:d8:33:ef:57:b0:a3:a3:70:13:c6:d2:38:c2:e3:be:
         1c:4f:65:44:c5:84:e2:64:84:5d:57:0f:5f:08:54:2c:4b:e5:
         6c:96:fd:b4:71:5b:ce:c3:10:f7:8e:9c:76:c4:ef:96:ca:d0:
         fe:d5:b6:74:9c:72:88:83:d3:62:d7:8d:e0:99:7e:a4:e1:e6:
         54:34:88:67:48:70:8b:db:de:ae:d6:30:a0:ce:b2:79:15:2d:
         df:ad:da:9c:1e:84:2f:78:5d:cf:58:cd:06:eb:65:90:df:a5:
         c5:2f:82:28:74:aa:03:ae:e0:3d:3b:26:67:db:e6:19:9c:cd:
         3f:54:7f:d3:71:c2:0b:d5:9f:f1:9b:e3:f7:0b:e8:06:9c:0e:
         6c:d3:f8:7b:ca:d3:3c:18:d4:da:14:71:1f:42:89:26:a8:24:
         7d:74:d1:7c
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBezANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1MDBF
RjM1OEJDQkUxNEEzNThDQTRFRUU0MUI0RTkwREM5MjNFOUQyMB4XDTI0MDEwMTAx
MjgyMFoXDTI0MTIxNDAxMzAwM1owMzExMC8GA1UEAxMoN0NFQTkyNjk1MzBFNTY4
MzQxRDA5NjNBQzJBMUM5OTI2NTlDNUYzRTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALQi0tfJD7mEatuFVa1Cxx/+bVZzRdwliSGTzfplRq7C5np66jp6
d8XcGqwuyi12HvEbMb5pnKtMgqz/Y1TvWmC1lk/fZlfZYjUMCXG3Pw+ca7o1R2E0
EVnd7EP6aWSWCyeetvKAu2cvlv/kWklYOwTQEJD3EOx0YQ/Rys6F91DWC785h1KD
kOrel+sMSqStHNa7vsFw8CC2/yWA9uNngcSdlpDacLCR+LOarMtDDKWmwNna8TGE
Cr9e/mAJiDnjpaJnQI62r3jMjWkxaitqXnU97ETa8MMka00BGnk7IS07XCJkZNF9
OYZBJLjaQoghKGHNz1Yh1X7BSDCn0G5IGSUCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBR86pJpUw5Wg0HQljrCocmSZZxfPjAfBgNVHSMEGDAWgBRQDvNYvL4Uo1jKTu5B
tOkNySPp0jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjM0L1VBN3pXTHktRktOWXlrN3VRYlRwRGNrajZkSS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1VBN3pXTHktRktOWXlrN3VRYlRwRGNr
ajZkSS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8yMzQvZk9xU2FWTU9Wb05CMEpZNndxSEprbVdjWHo0LnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBHwoYDANBgkqhkiG9w0BAQsFAAOCAQEAtf+Pr+3F47sEVQ7qGsa6kYi3GA0d
Md3pxFUwF5crKwvvUyoBAX1B/2mG1UuRU5dRfPdtAwdCr7pIQmIgXZcKMP/0wDwB
wmXn/vPoJh1Yaf3E1kpEUZYWf+NrpXGi2DPvV7Cjo3ATxtI4wuO+HE9lRMWE4mSE
XVcPXwhULEvlbJb9tHFbzsMQ946cdsTvlsrQ/tW2dJxyiIPTYteN4Jl+pOHmVDSI
Z0hwi9vertYwoM6yeRUt363anB6EL3hdz1jNButlkN+lxS+CKHSqA67gPTsmZ9vm
GZzNP1R/03HCC9Wf8Zvj9wvoBpwObNP4e8rTPBjU2hRxH0KJJqgkfXTRfA==
-----END CERTIFICATE-----
Generated at Thu May 30 03:08:52 2024 by rpki-client on console-fra.rpki-client.org