Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/B-nPO_1kLHXKmC-Ah04SNp318h4.roa
File:                     B-nPO_1kLHXKmC-Ah04SNp318h4.roa (raw, json)
Hash identifier:          vgLrpb48LOh4dpWh1uYIwi6VZdG+LMgjYOv25HxzWtY=
Subject key identifier:   07:E9:CF:3B:FD:64:2C:75:CA:98:2F:80:87:4E:12:36:9D:F5:F2:1E
Certificate issuer:       /CN=06FA662194FCF1EB983AB44CC913004180770D18
Certificate serial:       28
Authority key identifier: 06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/B-nPO_1kLHXKmC-Ah04SNp318h4.roa
Signing time:             Thu 25 Jan 2024 01:14:28 +0000
ROA not before:           Thu 25 Jan 2024 01:14:28 +0000
ROA not after:            Tue 14 Jan 2025 01:30:02 +0000
asID:                     2514
IP address blocks:        202.239.64.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40 (0x28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06FA662194FCF1EB983AB44CC913004180770D18
        Validity
            Not Before: Jan 25 01:14:28 2024 GMT
            Not After : Jan 14 01:30:02 2025 GMT
        Subject: CN=07E9CF3BFD642C75CA982F80874E12369DF5F21E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3f:8d:24:15:78:dc:b6:4b:79:39:d8:7a:29:
                    ea:3c:80:4e:0e:c7:a6:af:b0:f7:4b:8a:06:68:31:
                    54:29:a2:b0:69:bd:65:6e:2a:9a:9b:8a:04:1a:c7:
                    69:64:7e:98:c1:84:2f:04:67:d7:2e:f7:37:7d:41:
                    a5:4d:a5:f0:eb:4d:41:19:fc:c4:1c:50:8b:6e:4f:
                    b3:f6:42:f6:71:03:a7:81:44:e2:4d:1b:55:bc:13:
                    ee:32:0a:3b:ac:e1:42:81:f2:46:6b:8c:68:c7:1b:
                    db:b9:6f:a7:de:bf:e5:5d:57:fc:c3:54:ad:91:fe:
                    da:e5:2a:82:88:35:5f:84:83:d6:1f:9f:ab:64:a1:
                    55:28:96:9f:58:72:f5:ab:3d:dc:df:ee:3f:9a:da:
                    93:1d:0b:20:fd:dc:81:f1:f6:b5:c3:f9:ba:f3:63:
                    37:33:c9:f5:f1:c4:d4:b6:db:8e:ec:3b:07:bd:ed:
                    04:c6:fa:e2:2b:92:db:8e:d7:66:07:b0:d6:3f:86:
                    07:d8:c9:57:20:bf:38:76:84:45:8b:e8:2a:c0:78:
                    2a:f0:06:32:c8:6c:4a:05:dc:df:ba:d9:0a:7f:2c:
                    a0:01:5a:5f:e7:d7:a1:0a:e4:2c:ba:5a:91:2a:67:
                    48:4b:68:a0:92:16:33:0f:50:60:c4:5c:4b:cb:fd:
                    37:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:E9:CF:3B:FD:64:2C:75:CA:98:2F:80:87:4E:12:36:9D:F5:F2:1E
            X509v3 Authority Key Identifier:
                keyid:06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/B-nPO_1kLHXKmC-Ah04SNp318h4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.239.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         84:e3:71:57:c8:db:57:19:7b:bc:49:98:fc:b7:4b:40:5e:5d:
         5c:d3:58:e9:51:0f:9e:7b:29:0d:32:2b:30:70:5e:cb:01:5b:
         70:1a:7a:d3:c1:06:bb:f5:14:62:ee:a6:c0:53:36:2b:0d:6d:
         9c:1c:ee:7a:82:73:57:ec:b4:21:ec:08:c4:b0:2a:84:0f:32:
         78:89:15:17:c5:80:e1:64:d4:b7:53:4d:cd:2d:b7:b6:0d:00:
         bc:ed:4e:2c:fd:16:ed:cd:79:bb:24:25:22:b2:19:76:9f:ea:
         4f:22:56:2f:21:fb:6c:53:14:d4:55:4c:97:e3:0b:a7:65:5a:
         1b:cb:42:10:41:1a:1c:0f:c2:8a:d3:97:21:ec:f2:b5:c5:eb:
         3c:9e:f1:ed:7c:11:a0:57:4c:5a:7c:40:b8:44:8e:a7:89:aa:
         36:10:9b:ff:2c:32:ce:22:3e:1a:47:66:57:26:03:8d:45:71:
         a8:55:8d:f7:2f:eb:e2:f0:50:c7:55:7d:59:f0:c1:ba:de:3a:
         f4:cb:a5:da:98:13:82:95:54:07:85:c7:dc:b3:64:09:5c:61:
         e2:25:00:22:2b:11:f6:91:d0:ef:98:8f:6c:9d:8f:ea:9e:21:
         06:e1:7a:01:d2:3e:f4:c8:7d:5e:c5:dd:bc:ae:d5:a0:3e:f0:
         10:89:17:1d
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIBKDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwNkZB
NjYyMTk0RkNGMUVCOTgzQUI0NENDOTEzMDA0MTgwNzcwRDE4MB4XDTI0MDEyNTAx
MTQyOFoXDTI1MDExNDAxMzAwMlowMzExMC8GA1UEAxMoMDdFOUNGM0JGRDY0MkM3
NUNBOTgyRjgwODc0RTEyMzY5REY1RjIxRTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALc/jSQVeNy2S3k52Hop6jyATg7Hpq+w90uKBmgxVCmisGm9ZW4q
mpuKBBrHaWR+mMGELwRn1y73N31BpU2l8OtNQRn8xBxQi25Ps/ZC9nEDp4FE4k0b
VbwT7jIKO6zhQoHyRmuMaMcb27lvp96/5V1X/MNUrZH+2uUqgog1X4SD1h+fq2Sh
VSiWn1hy9as93N/uP5rakx0LIP3cgfH2tcP5uvNjNzPJ9fHE1Lbbjuw7B73tBMb6
4iuS247XZgew1j+GB9jJVyC/OHaERYvoKsB4KvAGMshsSgXc37rZCn8soAFaX+fX
oQrkLLpakSpnSEtooJIWMw9QYMRcS8v9NwcCAwEAAaOCAiIwggIeMB0GA1UdDgQW
BBQH6c87/WQsdcqYL4CHThI2nfXyHjAfBgNVHSMEGDAWgBQG+mYhlPzx65g6tEzJ
EwBBgHcNGDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY
oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjkvQnZwbUlaVDg4ZXVZT3JSTXlSTUFRWUIzRFJnLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvQnZwbUlaVDg4ZXVZT3JSTXlSTUFRWUIz
RFJnLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgboGCCsGAQUFBwELBIGtMIGqMGAGCCsG
AQUFBzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzI5L0ItblBPXzFrTEhYS21DLUFoMDRTTnAzMThoNC5yb2EwRgYI
KwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRw
L2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAbK70AwDQYJKoZIhvcNAQELBQADggEBAITjcVfI21cZe7xJmPy3S0BeXVzTWOlR
D557KQ0yKzBwXssBW3AaetPBBrv1FGLupsBTNisNbZwc7nqCc1fstCHsCMSwKoQP
MniJFRfFgOFk1LdTTc0tt7YNALztTiz9Fu3NebskJSKyGXaf6k8iVi8h+2xTFNRV
TJfjC6dlWhvLQhBBGhwPworTlyHs8rXF6zye8e18EaBXTFp8QLhEjqeJqjYQm/8s
Ms4iPhpHZlcmA41FcahVjfcv6+LwUMdVfVnwwbreOvTLpdqYE4KVVAeFx9yzZAlc
YeIlACIrEfaR0O+Yj2ydj+qeIQbhegHSPvTIfV7F3byu1aA+8BCJFx0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 14:56:15 2024 by rpki-client on console-fra.rpki-client.org