Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/rA9Q4-JPXJVwQrJ2b1Q-UpcQgRU.roa
File:                     rA9Q4-JPXJVwQrJ2b1Q-UpcQgRU.roa (raw, json)
Hash identifier:          JGyQkWn5LqbrgKRPLYkMPAe9VuguVAJLyTqoEY68Jdk=
Subject key identifier:   AC:0F:50:E3:E2:4F:5C:95:70:42:B2:76:6F:54:3E:52:97:10:81:15
Certificate issuer:       /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial:       60
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/rA9Q4-JPXJVwQrJ2b1Q-UpcQgRU.roa
Signing time:             Thu 31 Oct 2024 01:28:40 +0000
ROA not before:           Thu 31 Oct 2024 01:28:40 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     2514
IP address blocks:        107.153.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96 (0x60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
        Validity
            Not Before: Oct 31 01:28:40 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=AC0F50E3E24F5C957042B2766F543E5297108115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6d:f0:55:54:98:80:91:4b:c5:ca:5f:52:15:
                    70:ab:17:e6:6f:86:ec:f1:18:97:92:e8:45:37:ac:
                    f5:79:80:b7:05:62:a7:74:13:e3:4a:0c:59:11:c3:
                    cc:0b:45:88:fe:cb:97:d2:f1:f9:b6:f8:82:97:11:
                    ca:78:a8:ea:18:9f:c8:e2:4d:bc:41:ed:fa:e6:76:
                    e2:c0:69:60:be:87:96:c1:11:c4:23:79:b1:28:86:
                    69:cc:ef:ad:a3:ad:92:ed:14:9f:4c:6a:e3:58:c4:
                    21:70:f5:85:48:11:55:06:1a:f7:2a:3a:88:f6:f6:
                    d8:69:c5:be:70:80:9a:73:3f:e5:3c:0a:e6:20:81:
                    9c:1c:e7:14:68:69:d0:02:20:8e:8e:54:b0:7b:75:
                    2d:f7:c2:83:e3:04:5e:89:f2:05:a3:16:fd:0e:c4:
                    c4:73:6b:66:38:94:24:6e:cc:d6:35:e3:b8:99:9f:
                    4e:da:73:be:f7:5e:68:a8:10:57:71:b5:fd:57:0f:
                    7e:67:37:f9:03:30:69:ad:8c:da:57:87:53:02:41:
                    1c:f6:22:9d:c5:fd:91:74:6c:b0:67:2e:1c:40:ca:
                    80:3e:a4:28:c0:37:59:2c:4d:6b:0a:86:94:89:e4:
                    40:e3:f9:3a:79:7d:83:3c:54:e7:b2:94:7f:13:7d:
                    30:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:0F:50:E3:E2:4F:5C:95:70:42:B2:76:6F:54:3E:52:97:10:81:15
            X509v3 Authority Key Identifier:
                keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/rA9Q4-JPXJVwQrJ2b1Q-UpcQgRU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.153.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         9f:ef:e4:12:49:1f:f0:de:ee:7c:68:16:b8:1a:6a:90:22:ac:
         7c:9c:47:6c:46:c8:8e:66:42:2a:da:7a:90:2b:a3:f1:c5:9b:
         30:f6:ce:e3:b4:9c:4c:1f:8d:be:0f:21:8d:a1:82:22:77:c9:
         38:e7:31:9b:4b:7a:87:40:fd:0d:02:1b:80:47:25:5b:ca:4c:
         58:55:ed:a3:25:65:5c:2f:58:67:19:88:00:82:eb:85:e8:d6:
         07:3c:51:c4:7f:fc:7a:c8:9c:50:1f:55:f6:f0:63:a0:1f:bf:
         0e:df:47:b2:ea:fd:13:33:58:ac:4e:d4:d4:91:2f:81:40:25:
         41:e3:d0:45:fe:04:e1:48:59:7b:72:49:3a:95:21:1c:eb:05:
         21:49:3d:32:d6:0d:7c:74:67:07:12:c8:9f:04:ea:c3:ca:42:
         12:2a:12:87:d6:04:57:e2:89:39:6d:90:ac:fd:ca:4d:03:fc:
         ac:e3:c5:13:a5:13:fc:b5:e4:3c:2b:06:73:c4:ba:c9:eb:91:
         07:4e:5c:48:35:62:ea:c6:8a:f6:20:aa:f4:73:eb:d8:30:92:
         a0:3a:2b:2c:89:88:40:bb:2e:88:84:dd:69:2b:f8:ea:32:9f:
         8b:ae:5e:0c:c3:e8:44:f2:57:83:85:d4:73:34:b6:69:72:41:
         5a:23:75:b3
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIBYDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEMTQw
MEFCODlCNkQ3MkY3REI0MjRGNEFBQThDQ0ZGNjQzOEQzRDRBMB4XDTI0MTAzMTAx
Mjg0MFoXDTI1MTAxNTAxMzAwMlowMzExMC8GA1UEAxMoQUMwRjUwRTNFMjRGNUM5
NTcwNDJCMjc2NkY1NDNFNTI5NzEwODExNTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALRt8FVUmICRS8XKX1IVcKsX5m+G7PEYl5LoRTes9XmAtwVip3QT
40oMWRHDzAtFiP7Ll9Lx+bb4gpcRynio6hifyOJNvEHt+uZ24sBpYL6HlsERxCN5
sSiGaczvraOtku0Un0xq41jEIXD1hUgRVQYa9yo6iPb22GnFvnCAmnM/5TwK5iCB
nBznFGhp0AIgjo5UsHt1LffCg+MEXonyBaMW/Q7ExHNrZjiUJG7M1jXjuJmfTtpz
vvdeaKgQV3G1/VcPfmc3+QMwaa2M2leHUwJBHPYincX9kXRssGcuHEDKgD6kKMA3
WSxNawqGlInkQOP5Onl9gzxU57KUfxN9MMECAwEAAaOCAiEwggIdMB0GA1UdDgQW
BBSsD1Dj4k9clXBCsnZvVD5SlxCBFTAfBgNVHSMEGDAWgBTRQAq4m21y99tCT0qq
jM/2Q409SjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY
oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjkvMFVBS3VKdHRjdmZiUWs5S3FvelA5a09OUFVvLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMFVBS3VKdHRjdmZiUWs5S3FvelA5a09O
UFVvLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgboGCCsGAQUFBwELBIGtMIGqMGAGCCsG
AQUFBzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzI5L3JBOVE0LUpQWEpWd1FySjJiMVEtVXBjUWdSVS5yb2EwRgYI
KwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRw
L2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwBrmTANBgkqhkiG9w0BAQsFAAOCAQEAn+/kEkkf8N7ufGgWuBpqkCKsfJxHbEbI
jmZCKtp6kCuj8cWbMPbO47ScTB+Nvg8hjaGCInfJOOcxm0t6h0D9DQIbgEclW8pM
WFXtoyVlXC9YZxmIAILrhejWBzxRxH/8esicUB9V9vBjoB+/Dt9Hsur9EzNYrE7U
1JEvgUAlQePQRf4E4UhZe3JJOpUhHOsFIUk9MtYNfHRnBxLInwTqw8pCEioSh9YE
V+KJOW2QrP3KTQP8rOPFE6UT/LXkPCsGc8S6yeuRB05cSDVi6saK9iCq9HPr2DCS
oDorLImIQLsuiITdaSv46jKfi65eDMPoRPJXg4XUczS2aXJBWiN1sw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:29 2024 by rpki-client on console-ams.rpki-client.org