Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/o-whKfTf67tEuy29uAIU1PEwzRk.roa
File:                     o-whKfTf67tEuy29uAIU1PEwzRk.roa (raw, json)
Hash identifier:          BXN8KQ4Frh6LniaSQOptayy+OfCCrDd24Ta2l8GPns0=
Subject key identifier:   A3:EC:21:29:F4:DF:EB:BB:44:BB:2D:BD:B8:02:14:D4:F1:30:CD:19
Certificate issuer:       /CN=06FA662194FCF1EB983AB44CC913004180770D18
Certificate serial:       4F
Authority key identifier: 06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/o-whKfTf67tEuy29uAIU1PEwzRk.roa
Signing time:             Thu 31 Oct 2024 01:28:39 +0000
ROA not before:           Thu 31 Oct 2024 01:28:39 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     2514
IP address blocks:        103.2.100.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79 (0x4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06FA662194FCF1EB983AB44CC913004180770D18
        Validity
            Not Before: Oct 31 01:28:39 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=A3EC2129F4DFEBBB44BB2DBDB80214D4F130CD19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c3:b0:66:8c:06:37:30:71:a4:c3:14:2f:d4:
                    2a:df:44:cc:15:91:4a:39:79:66:5e:32:a5:27:c4:
                    47:fd:a0:d5:be:6e:fb:60:67:b9:cb:b3:34:41:f9:
                    69:6d:9b:fc:ce:96:8a:af:fa:7a:c0:c9:50:7e:59:
                    8c:3d:54:56:5b:66:ad:ed:31:41:44:b3:d9:ed:23:
                    e8:c7:02:ca:c3:84:c5:ef:72:01:2a:0d:ac:5f:06:
                    83:8e:4f:f6:9a:5b:b6:a4:25:bb:cd:49:fb:b1:5d:
                    86:3a:53:01:22:50:73:d9:13:be:3a:9e:19:e9:39:
                    54:25:c1:7f:aa:95:ae:cc:fe:e3:c0:48:ec:8e:e3:
                    30:fa:ad:3f:2e:86:53:b1:ab:30:73:cf:94:2f:f0:
                    04:9e:2f:dc:e2:0a:ff:0c:c3:32:e2:af:e9:d2:a4:
                    05:79:86:6e:17:e0:8b:c5:6e:bb:86:b1:a1:c0:1c:
                    8c:13:6f:dc:c9:5e:6e:8d:9c:10:c5:bc:8e:29:d1:
                    ca:ee:c9:10:ec:a5:1d:94:f3:27:92:75:4d:11:fd:
                    ea:d2:c4:59:52:91:f8:79:0d:3c:4c:b8:da:7b:43:
                    42:94:9d:a7:8e:d7:bf:b7:5a:55:e6:1c:b5:de:10:
                    12:dd:fe:7b:77:44:8a:12:e1:dd:d6:08:b2:8e:ed:
                    70:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:EC:21:29:F4:DF:EB:BB:44:BB:2D:BD:B8:02:14:D4:F1:30:CD:19
            X509v3 Authority Key Identifier:
                keyid:06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/o-whKfTf67tEuy29uAIU1PEwzRk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.2.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:29:1b:fd:89:c4:2a:3f:cc:9a:40:02:bf:24:19:3c:0e:67:
         fd:d9:dd:39:f1:16:ec:77:09:9b:a5:76:b4:9e:1b:9c:5b:c4:
         9b:9f:8a:ae:3b:4a:e2:89:4a:68:82:15:76:98:24:60:f6:bc:
         48:b1:31:9f:4a:fe:73:33:65:8c:a3:81:15:c9:d6:d7:e4:5f:
         78:27:a1:00:6c:7b:f8:2a:cc:0d:72:ce:1e:a1:4a:91:b2:c6:
         0b:99:27:ec:4a:b2:dc:9f:9d:5a:3b:96:76:8c:01:7d:55:10:
         5f:a1:94:fd:89:3c:02:fc:da:62:f8:d1:34:88:38:4f:18:2f:
         40:8a:48:99:70:bc:c6:14:82:29:9f:d1:2f:0e:42:33:a8:98:
         01:e1:2c:60:88:fa:e3:dd:a9:b8:fb:3d:c5:14:0e:bd:d4:52:
         e5:24:2d:00:1b:3b:ac:0b:be:7f:5a:7f:6b:47:c0:f5:63:fa:
         78:0d:99:f8:07:fb:ef:82:85:cb:dc:64:ba:d2:20:36:40:8b:
         a2:c7:c9:01:4f:d8:2d:ba:81:fe:78:08:80:e7:e7:d7:ba:2c:
         d7:d0:08:5f:ef:f4:df:65:be:1f:0a:85:71:a7:30:1d:7c:ed:
         7c:a9:fb:27:77:f4:09:4b:d8:0a:41:d5:f7:cd:32:e5:8c:5e:
         69:08:80:ce
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIBTzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwNkZB
NjYyMTk0RkNGMUVCOTgzQUI0NENDOTEzMDA0MTgwNzcwRDE4MB4XDTI0MTAzMTAx
MjgzOVoXDTI1MTAxNTAxMzAwMlowMzExMC8GA1UEAxMoQTNFQzIxMjlGNERGRUJC
QjQ0QkIyREJEQjgwMjE0RDRGMTMwQ0QxOTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJrDsGaMBjcwcaTDFC/UKt9EzBWRSjl5Zl4ypSfER/2g1b5u+2Bn
ucuzNEH5aW2b/M6Wiq/6esDJUH5ZjD1UVltmre0xQUSz2e0j6McCysOExe9yASoN
rF8Gg45P9ppbtqQlu81J+7FdhjpTASJQc9kTvjqeGek5VCXBf6qVrsz+48BI7I7j
MPqtPy6GU7GrMHPPlC/wBJ4v3OIK/wzDMuKv6dKkBXmGbhfgi8Vuu4axocAcjBNv
3Mlebo2cEMW8jinRyu7JEOylHZTzJ5J1TRH96tLEWVKR+HkNPEy42ntDQpSdp47X
v7daVeYctd4QEt3+e3dEihLh3dYIso7tcBECAwEAAaOCAiIwggIeMB0GA1UdDgQW
BBSj7CEp9N/ru0S7Lb24AhTU8TDNGTAfBgNVHSMEGDAWgBQG+mYhlPzx65g6tEzJ
EwBBgHcNGDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY
oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjkvQnZwbUlaVDg4ZXVZT3JSTXlSTUFRWUIzRFJnLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvQnZwbUlaVDg4ZXVZT3JSTXlSTUFRWUIz
RFJnLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgboGCCsGAQUFBwELBIGtMIGqMGAGCCsG
AQUFBzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzI5L28td2hLZlRmNjd0RXV5Mjl1QUlVMVBFd3pSay5yb2EwRgYI
KwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRw
L2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAJnAmQwDQYJKoZIhvcNAQELBQADggEBAAYpG/2JxCo/zJpAAr8kGTwOZ/3Z3Tnx
Fux3CZuldrSeG5xbxJufiq47SuKJSmiCFXaYJGD2vEixMZ9K/nMzZYyjgRXJ1tfk
X3gnoQBse/gqzA1yzh6hSpGyxguZJ+xKstyfnVo7lnaMAX1VEF+hlP2JPAL82mL4
0TSIOE8YL0CKSJlwvMYUgimf0S8OQjOomAHhLGCI+uPdqbj7PcUUDr3UUuUkLQAb
O6wLvn9af2tHwPVj+ngNmfgH+++ChcvcZLrSIDZAi6LHyQFP2C26gf54CIDn59e6
LNfQCF/v9N9lvh8KhXGnMB187Xyp+yd39AlL2ApB1ffNMuWMXmkIgM4=
-----END CERTIFICATE-----
Generated at Fri Nov 22 15:23:57 2024 by rpki-client on console-fra.rpki-client.org