Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/qxuf75ohqJXFoW7bY9MHJTJ4ioY.roa
File:                     qxuf75ohqJXFoW7bY9MHJTJ4ioY.roa (raw, json)
Hash identifier:          zkyLhKLiTbcK5HfzgnjDkuMtrs5bYOZ7M9RhZp8btlI=
Subject key identifier:   AB:1B:9F:EF:9A:21:A8:95:C5:A1:6E:DB:63:D3:07:25:32:78:8A:86
Certificate issuer:       /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Certificate serial:       8E
Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/qxuf75ohqJXFoW7bY9MHJTJ4ioY.roa
Signing time:             Tue 30 Apr 2024 01:31:11 +0000
ROA not before:           Tue 30 Apr 2024 01:31:11 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9351
IP address blocks:        124.110.160.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 142 (0x8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
        Validity
            Not Before: Apr 30 01:31:11 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=AB1B9FEF9A21A895C5A16EDB63D3072532788A86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a1:53:eb:95:3d:73:f8:0a:b8:74:96:ea:cd:
                    0c:4a:1c:f7:26:17:e4:8f:91:9f:7b:db:d3:c5:2b:
                    07:aa:04:f7:8f:09:ce:f1:e6:c8:34:02:40:49:93:
                    4b:cf:38:f8:d0:56:1d:b5:e1:27:8c:f0:7c:c8:3e:
                    d6:8d:dc:e0:df:36:02:97:40:84:3d:ca:1c:a2:e3:
                    49:35:3b:a7:c0:63:60:64:b3:50:08:4f:18:0d:58:
                    ea:93:2d:8f:c6:7f:6c:0d:0e:a3:27:70:7a:cb:6d:
                    5f:47:37:21:40:a7:40:88:1c:33:5e:8d:5d:cc:f0:
                    ec:77:a6:71:e3:c4:15:4a:48:a1:e0:db:fd:35:f5:
                    71:00:75:b9:1e:4c:b9:f6:11:b2:48:12:5b:00:a1:
                    30:63:79:af:35:a2:84:e5:ba:c4:a6:8e:2b:08:3f:
                    f1:20:87:f9:ed:03:5e:01:2d:2d:f3:14:0d:e6:2e:
                    b1:a2:88:fe:40:9f:83:b5:ac:31:1a:9d:d8:29:01:
                    b8:72:c3:6b:83:d2:46:dd:7e:51:a5:e9:17:dd:58:
                    cb:77:a0:1a:3a:12:fa:a9:de:10:4f:0b:32:f1:53:
                    a9:97:86:33:bc:3d:0a:3d:21:fb:50:ed:78:5e:31:
                    eb:d2:77:97:14:33:46:1d:c9:19:5d:59:ae:db:f4:
                    6c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:1B:9F:EF:9A:21:A8:95:C5:A1:6E:DB:63:D3:07:25:32:78:8A:86
            X509v3 Authority Key Identifier:
                keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/qxuf75ohqJXFoW7bY9MHJTJ4ioY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.110.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         45:b6:8c:fa:10:3a:c6:ef:c7:43:c0:93:73:4b:dd:98:ef:ba:
         64:ad:f4:01:c9:19:3c:0d:42:38:45:c9:fc:87:ce:e4:6c:d1:
         49:bc:97:78:ad:2d:81:e5:8a:0d:ec:63:ad:b7:52:42:2e:7e:
         14:50:6a:31:94:e7:4e:8d:7a:27:ab:5c:8a:24:0a:cf:a6:ce:
         30:1c:83:bf:0e:a2:93:0b:a2:43:84:85:76:a7:31:e5:b1:ab:
         09:36:11:6e:7e:ff:16:36:c6:a1:a3:a2:ed:ee:b7:91:a3:fe:
         e0:d5:71:2e:ec:bc:44:c4:16:75:5c:93:18:77:2d:4d:05:b5:
         2d:d4:5d:16:eb:6d:5e:9b:09:42:96:fa:af:5d:e6:23:27:a1:
         e5:61:1e:b1:de:6e:ce:25:f3:5e:51:51:8a:ba:c8:2b:60:f4:
         10:cc:47:c3:c9:59:6e:af:1b:bc:4c:0a:37:04:e2:9d:f3:ee:
         6c:5a:71:43:0c:cc:db:35:69:12:f9:8e:06:6d:df:d9:56:a8:
         29:b7:52:13:15:95:6d:50:93:06:f4:72:93:2c:c7:6b:5c:8b:
         05:b7:28:1d:65:0e:be:99:04:da:bc:1e:bb:f2:9e:15:3c:83:
         ca:cf:91:89:87:c3:9e:93:16:6f:0e:08:be:19:d8:9f:c1:a7:
         a5:74:43:ca
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAI4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNTAw
RUYzNThCQ0JFMTRBMzU4Q0E0RUVFNDFCNEU5MERDOTIzRTlEMjAeFw0yNDA0MzAw
MTMxMTFaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEFCMUI5RkVGOUEyMUE4
OTVDNUExNkVEQjYzRDMwNzI1MzI3ODhBODYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDKoVPrlT1z+Aq4dJbqzQxKHPcmF+SPkZ9729PFKweqBPePCc7x
5sg0AkBJk0vPOPjQVh214SeM8HzIPtaN3ODfNgKXQIQ9yhyi40k1O6fAY2Bks1AI
TxgNWOqTLY/Gf2wNDqMncHrLbV9HNyFAp0CIHDNejV3M8Ox3pnHjxBVKSKHg2/01
9XEAdbkeTLn2EbJIElsAoTBjea81ooTlusSmjisIP/Egh/ntA14BLS3zFA3mLrGi
iP5An4O1rDEandgpAbhyw2uD0kbdflGl6RfdWMt3oBo6Evqp3hBPCzLxU6mXhjO8
PQo9IftQ7XheMevSd5cUM0YdyRldWa7b9GxHAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUqxuf75ohqJXFoW7bY9MHJTJ4ioYwHwYDVR0jBBgwFoAUUA7zWLy+FKNYyk7u
QbTpDckj6dIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzIzNC9VQTd6V0x5LUZLTll5azd1UWJUcERja2o2ZEkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9VQTd6V0x5LUZLTll5azd1UWJUcERj
a2o2ZEkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMjM0L3F4dWY3NW9ocUpYRm9XN2JZOU1ISlRKNGlvWS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAV8bqAwDQYJKoZIhvcNAQELBQADggEBAEW2jPoQOsbvx0PAk3NL3ZjvumSt
9AHJGTwNQjhFyfyHzuRs0Um8l3itLYHlig3sY623UkIufhRQajGU506NeierXIok
Cs+mzjAcg78OopMLokOEhXanMeWxqwk2EW5+/xY2xqGjou3ut5Gj/uDVcS7svETE
FnVckxh3LU0FtS3UXRbrbV6bCUKW+q9d5iMnoeVhHrHebs4l815RUYq6yCtg9BDM
R8PJWW6vG7xMCjcE4p3z7mxacUMMzNs1aRL5jgZt39lWqCm3UhMVlW1Qkwb0cpMs
x2tciwW3KB1lDr6ZBNq8HrvynhU8g8rPkYmHw56TFm8OCL4Z2J/Bp6V0Q8o=
-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:05 2024 by rpki-client on console-fra.rpki-client.org