Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/240/tyCXyQ22n_yg1H-TDrVKeCoBBdk.roa
File:                     tyCXyQ22n_yg1H-TDrVKeCoBBdk.roa (raw, json)
Hash identifier:          WsDS2gqzcHwsxY5vqkN2xETLfyvamS2g1IaNSj+sQek=
Subject key identifier:   B7:20:97:C9:0D:B6:9F:FC:A0:D4:7F:93:0E:B5:4A:78:2A:01:05:D9
Certificate issuer:       /CN=B96964A7CE0A58F4AE3673F47D7A1D425BE4A07D
Certificate serial:       21
Authority key identifier: B9:69:64:A7:CE:0A:58:F4:AE:36:73:F4:7D:7A:1D:42:5B:E4:A0:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/tyCXyQ22n_yg1H-TDrVKeCoBBdk.roa
Signing time:             Sat 03 Aug 2024 02:01:45 +0000
ROA not before:           Sat 03 Aug 2024 02:01:45 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     9597
IP address blocks:        103.197.12.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33 (0x21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B96964A7CE0A58F4AE3673F47D7A1D425BE4A07D
        Validity
            Not Before: Aug  3 02:01:45 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=B72097C90DB69FFCA0D47F930EB54A782A0105D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:fb:9f:a6:f9:fc:28:dd:7d:df:fa:8f:a5:32:
                    7d:bf:8c:13:3e:48:eb:d4:55:eb:bc:83:24:89:6c:
                    10:6c:6b:c9:72:4d:22:ba:c3:a2:69:cd:24:9b:23:
                    32:13:2e:8c:ba:88:56:91:47:38:8e:28:ce:3e:b2:
                    95:de:13:ba:88:15:30:75:ff:38:6f:54:77:ba:b3:
                    61:1b:b7:26:26:06:21:d0:61:48:0a:b4:95:d0:0e:
                    f2:b8:93:45:ed:88:c6:2e:d4:e0:b5:24:a9:83:6f:
                    09:dc:61:a3:70:8d:f9:e8:62:d0:e6:aa:50:e1:d5:
                    9e:28:4e:9d:3d:ef:93:02:53:77:f3:17:4e:4f:6d:
                    67:ba:56:02:50:2b:f2:67:33:92:89:f3:69:7e:a3:
                    a2:56:1c:9a:42:f3:08:23:df:a4:0a:6f:f2:5c:4e:
                    c9:9b:4b:2c:9c:ec:82:29:c7:43:16:82:2e:02:8f:
                    a4:ad:64:2e:d7:10:da:f7:11:64:c9:51:d7:53:d7:
                    00:9a:54:23:18:cd:ec:08:15:4c:2e:d6:12:d6:6a:
                    76:03:9a:86:f8:80:27:09:97:a2:0d:87:8c:7f:e1:
                    d1:ae:1e:b1:47:86:b3:b3:b9:2b:9f:bb:3f:d9:15:
                    6d:71:7c:c7:d4:d5:a9:b4:a1:0f:80:77:6e:47:68:
                    5d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:20:97:C9:0D:B6:9F:FC:A0:D4:7F:93:0E:B5:4A:78:2A:01:05:D9
            X509v3 Authority Key Identifier:
                keyid:B9:69:64:A7:CE:0A:58:F4:AE:36:73:F4:7D:7A:1D:42:5B:E4:A0:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/tyCXyQ22n_yg1H-TDrVKeCoBBdk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.197.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a8:b8:02:1c:f9:6a:d7:8f:ec:3c:00:ae:95:75:74:ad:1c:6e:
         a4:1f:9c:b9:88:a0:76:96:a3:a4:47:aa:b5:32:fd:d2:44:12:
         a9:5a:a4:58:a7:4c:f8:b9:d6:2d:76:20:f4:f4:3f:5c:fd:c0:
         14:c3:96:e1:7e:c8:86:f4:f8:d3:98:ae:d5:f2:a2:1a:a5:26:
         c3:f4:bf:17:98:20:90:d1:eb:63:2f:86:e4:1f:23:98:7b:8c:
         c9:b3:7c:bc:90:01:67:10:7d:32:23:ab:f2:73:49:8a:9c:94:
         89:2b:29:c0:7b:5e:88:a5:e1:52:ff:db:b8:05:ea:ef:b8:45:
         11:ca:53:a3:13:d2:fb:1b:81:7d:b0:c0:b0:ee:2d:af:ea:be:
         36:ad:d1:ef:36:a6:1d:7c:a3:2b:f3:70:5e:24:75:70:08:31:
         d1:e1:33:d7:e5:07:f7:8d:b1:bd:bc:a7:cf:c6:67:e1:0c:f2:
         d1:91:72:39:7d:54:f9:50:f2:cf:66:91:45:81:f9:c4:d4:87:
         57:86:7a:1e:2d:5c:f6:5f:4d:e5:46:0a:94:ae:a4:3c:96:97:
         19:48:81:71:74:8e:33:14:4f:80:6e:1f:16:35:7d:5c:55:8c:
         99:01:3b:d8:ad:14:50:9a:3e:ba:5c:c5:34:5a:42:b1:da:9b:
         b6:79:5a:ab
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBITANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCOTY5
NjRBN0NFMEE1OEY0QUUzNjczRjQ3RDdBMUQ0MjVCRTRBMDdEMB4XDTI0MDgwMzAy
MDE0NVoXDTI1MDcxNTAxMzAwMlowMzExMC8GA1UEAxMoQjcyMDk3QzkwREI2OUZG
Q0EwRDQ3RjkzMEVCNTRBNzgyQTAxMDVEOTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJ77n6b5/Cjdfd/6j6Uyfb+MEz5I69RV67yDJIlsEGxryXJNIrrD
omnNJJsjMhMujLqIVpFHOI4ozj6yld4TuogVMHX/OG9Ud7qzYRu3JiYGIdBhSAq0
ldAO8riTRe2Ixi7U4LUkqYNvCdxho3CN+ehi0OaqUOHVnihOnT3vkwJTd/MXTk9t
Z7pWAlAr8mczkonzaX6jolYcmkLzCCPfpApv8lxOyZtLLJzsginHQxaCLgKPpK1k
LtcQ2vcRZMlR11PXAJpUIxjN7AgVTC7WEtZqdgOahviAJwmXog2HjH/h0a4esUeG
s7O5K5+7P9kVbXF8x9TVqbShD4B3bkdoXWECAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBS3IJfJDbaf/KDUf5MOtUp4KgEF2TAfBgNVHSMEGDAWgBS5aWSnzgpY9K42c/R9
eh1CW+SgfTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjQwL3VXbGtwODRLV1BTdU5uUDBmWG9kUWx2a29IMC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3VXbGtwODRLV1BTdU5uUDBmWG9kUWx2
a29IMC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8yNDAvdHlDWHlRMjJuX3lnMUgtVERyVktlQ29CQmRrLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAmfFDDANBgkqhkiG9w0BAQsFAAOCAQEAqLgCHPlq14/sPACulXV0rRxupB+c
uYigdpajpEeqtTL90kQSqVqkWKdM+LnWLXYg9PQ/XP3AFMOW4X7IhvT405iu1fKi
GqUmw/S/F5ggkNHrYy+G5B8jmHuMybN8vJABZxB9MiOr8nNJipyUiSspwHteiKXh
Uv/buAXq77hFEcpToxPS+xuBfbDAsO4tr+q+Nq3R7zamHXyjK/NwXiR1cAgx0eEz
1+UH942xvbynz8Zn4Qzy0ZFyOX1U+VDyz2aRRYH5xNSHV4Z6Hi1c9l9N5UYKlK6k
PJaXGUiBcXSOMxRPgG4fFjV9XFWMmQE72K0UUJo+ulzFNFpCsdqbtnlaqw==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:24:44 2025 by rpki-client