Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/240/4nVkDwyCflO3LkeoXafwlTedbkU.roa
File:                     4nVkDwyCflO3LkeoXafwlTedbkU.roa (raw, json)
Hash identifier:          c4APP8K7DR88rnPWmYgfEuJXfxYT4DsvY9PvZfH01Ss=
Subject key identifier:   E2:75:64:0F:0C:82:7E:53:B7:2E:47:A8:5D:A7:F0:95:37:9D:6E:45
Certificate issuer:       /CN=B96964A7CE0A58F4AE3673F47D7A1D425BE4A07D
Certificate serial:       27
Authority key identifier: B9:69:64:A7:CE:0A:58:F4:AE:36:73:F4:7D:7A:1D:42:5B:E4:A0:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/4nVkDwyCflO3LkeoXafwlTedbkU.roa
Signing time:             Sat 03 Aug 2024 02:01:47 +0000
ROA not before:           Sat 03 Aug 2024 02:01:47 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     9597
IP address blocks:        150.60.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39 (0x27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B96964A7CE0A58F4AE3673F47D7A1D425BE4A07D
        Validity
            Not Before: Aug  3 02:01:47 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=E275640F0C827E53B72E47A85DA7F095379D6E45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:64:11:3a:81:a7:9c:8e:8a:dc:f1:06:c0:2d:
                    4e:ba:0d:41:1b:b5:ba:bf:2b:f9:a4:dd:0b:07:73:
                    30:f7:8a:32:68:1f:e1:a5:79:d5:52:7a:87:0e:75:
                    ae:2c:63:74:70:0b:0e:2d:78:2c:e5:d8:44:7d:73:
                    b2:be:69:f8:08:64:ad:02:a0:a4:53:38:f3:f7:35:
                    3b:2b:5b:9e:ca:b4:46:fc:6b:4a:a1:02:8c:1a:66:
                    04:20:aa:f6:1c:15:76:dd:aa:2c:5d:f7:09:b5:28:
                    03:03:4d:07:71:5a:89:f5:98:33:18:56:68:23:55:
                    cc:6b:dc:b2:04:cf:82:df:0c:0f:ac:eb:75:15:49:
                    37:9d:69:bc:81:38:00:74:99:18:e3:cf:95:cc:de:
                    db:bc:81:64:4e:4e:71:8e:83:bb:b0:57:37:fc:b4:
                    4e:ad:b8:a3:8d:35:97:c4:a8:4f:60:40:d9:9e:09:
                    85:10:91:08:1d:e5:55:a6:0b:bd:09:06:7a:73:2e:
                    b7:b6:2f:4d:4c:87:bd:42:db:a7:d4:fa:7f:81:eb:
                    a4:44:fe:5a:6a:ca:7d:27:2f:6d:0f:a9:83:9c:f8:
                    fb:3e:dc:2b:a4:d6:6d:e8:83:43:73:04:38:a6:40:
                    3f:49:fe:cd:19:06:0f:92:df:d3:7c:18:3b:82:b3:
                    8a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:75:64:0F:0C:82:7E:53:B7:2E:47:A8:5D:A7:F0:95:37:9D:6E:45
            X509v3 Authority Key Identifier:
                keyid:B9:69:64:A7:CE:0A:58:F4:AE:36:73:F4:7D:7A:1D:42:5B:E4:A0:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/4nVkDwyCflO3LkeoXafwlTedbkU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.60.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         61:6b:f2:79:88:93:4a:48:d5:3f:59:66:f0:51:bd:87:ef:07:
         62:5e:9b:49:d5:a2:e3:de:94:16:2c:2c:a8:3e:3f:d8:cf:d7:
         2e:f5:71:2f:42:73:45:a2:59:74:57:81:91:4b:d8:c3:f5:c6:
         ba:4b:18:8e:f8:5c:a0:73:2a:6d:3c:98:64:9a:25:da:a4:71:
         e0:ee:70:d3:f6:19:08:63:ac:eb:f6:36:4a:87:47:fe:8e:5d:
         b5:5d:8f:50:15:72:e7:8e:31:a5:cd:13:b8:e3:57:c9:10:fd:
         50:33:24:73:d3:22:e0:fc:79:24:27:25:e3:f2:6c:8e:60:0c:
         23:d7:6b:c7:4b:a4:ea:6a:90:21:a7:c7:f1:75:ad:3f:61:78:
         00:90:e1:b7:7d:73:96:bf:94:1b:fd:26:35:3a:4a:8f:10:79:
         cf:8f:e0:fe:33:e5:75:97:76:6a:bc:43:2e:1d:34:8a:76:de:
         0b:ed:d2:6f:e1:6f:bf:7b:db:f4:be:e8:8a:92:33:4c:ca:ff:
         a2:f7:29:b9:bf:fe:5d:e5:e6:b0:8a:42:34:9d:6c:0d:88:97:
         6f:8f:91:0d:3c:c1:c4:62:bb:89:13:88:55:2d:7e:47:2b:20:
         a9:db:72:e1:a6:7f:0c:7f:e2:94:ee:fc:66:5b:ea:3b:68:7c:
         51:0d:32:fc
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIBJzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCOTY5
NjRBN0NFMEE1OEY0QUUzNjczRjQ3RDdBMUQ0MjVCRTRBMDdEMB4XDTI0MDgwMzAy
MDE0N1oXDTI1MDcxNTAxMzAwMlowMzExMC8GA1UEAxMoRTI3NTY0MEYwQzgyN0U1
M0I3MkU0N0E4NURBN0YwOTUzNzlENkU0NTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAL5kETqBp5yOitzxBsAtTroNQRu1ur8r+aTdCwdzMPeKMmgf4aV5
1VJ6hw51rixjdHALDi14LOXYRH1zsr5p+AhkrQKgpFM48/c1Oytbnsq0RvxrSqEC
jBpmBCCq9hwVdt2qLF33CbUoAwNNB3FaifWYMxhWaCNVzGvcsgTPgt8MD6zrdRVJ
N51pvIE4AHSZGOPPlcze27yBZE5OcY6Du7BXN/y0Tq24o401l8SoT2BA2Z4JhRCR
CB3lVaYLvQkGenMut7YvTUyHvULbp9T6f4HrpET+WmrKfScvbQ+pg5z4+z7cK6TW
beiDQ3MEOKZAP0n+zRkGD5Lf03wYO4KzikUCAwEAAaOCAiMwggIfMB0GA1UdDgQW
BBTidWQPDIJ+U7cuR6hdp/CVN51uRTAfBgNVHSMEGDAWgBS5aWSnzgpY9K42c/R9
eh1CW+SgfTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjQwL3VXbGtwODRLV1BTdU5uUDBmWG9kUWx2a29IMC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3VXbGtwODRLV1BTdU5uUDBmWG9kUWx2
a29IMC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8yNDAvNG5Wa0R3eUNmbE8zTGtlb1hhZndsVGVkYmtVLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEw
BQMDAJY8MA0GCSqGSIb3DQEBCwUAA4IBAQBha/J5iJNKSNU/WWbwUb2H7wdiXptJ
1aLj3pQWLCyoPj/Yz9cu9XEvQnNFoll0V4GRS9jD9ca6SxiO+FygcyptPJhkmiXa
pHHg7nDT9hkIY6zr9jZKh0f+jl21XY9QFXLnjjGlzRO441fJEP1QMyRz0yLg/Hkk
JyXj8myOYAwj12vHS6TqapAhp8fxda0/YXgAkOG3fXOWv5Qb/SY1OkqPEHnPj+D+
M+V1l3ZqvEMuHTSKdt4L7dJv4W+/e9v0vuiKkjNMyv+i9ym5v/5d5eawikI0nWwN
iJdvj5ENPMHEYruJE4hVLX5HKyCp23Lhpn8Mf+KU7vxmW+o7aHxRDTL8
-----END CERTIFICATE-----
Generated at Fri Nov 22 15:23:56 2024 by rpki-client on console-fra.rpki-client.org