Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/tScTorGllCuTb4a1IxX1JXDpj6g.roa
File:                     tScTorGllCuTb4a1IxX1JXDpj6g.roa (raw, json)
Hash identifier:          D9hoBL7ixFc4rHgS3Opj+KLeKnt7EO3W/Q/u9KXPG94=
Subject key identifier:   B5:27:13:A2:B1:A5:94:2B:93:6F:86:B5:23:15:F5:25:70:E9:8F:A8
Certificate issuer:       /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial:       1C
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/tScTorGllCuTb4a1IxX1JXDpj6g.roa
Signing time:             Wed 10 Jan 2024 01:02:59 +0000
ROA not before:           Wed 10 Jan 2024 01:02:59 +0000
ROA not after:            Sat 14 Dec 2024 01:30:03 +0000
asID:                     2514
IP address blocks:        157.120.0.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 05:56:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28 (0x1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
        Validity
            Not Before: Jan 10 01:02:59 2024 GMT
            Not After : Dec 14 01:30:03 2024 GMT
        Subject: CN=B52713A2B1A5942B936F86B52315F52570E98FA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e6:c1:88:dd:78:62:c9:dc:b8:e0:3d:8e:a5:
                    63:06:7d:90:d2:4d:5a:06:15:67:72:b7:53:43:1e:
                    7b:a3:93:1a:21:15:4a:60:7b:01:1d:59:f2:1d:c7:
                    44:5d:ec:9f:e9:15:c1:13:93:ca:d8:98:4f:1f:9a:
                    10:eb:df:1e:37:39:5c:b6:05:e4:40:7f:ce:5e:19:
                    8b:1a:45:ad:cb:7e:08:47:3e:9b:79:50:ad:78:79:
                    f5:b3:3c:c1:97:e2:28:27:8b:3f:79:4d:55:94:79:
                    92:16:ba:51:8a:00:c7:bf:73:fd:bc:04:50:cc:5a:
                    cd:a3:0f:c7:9e:b1:9f:b5:20:97:8a:86:46:50:5c:
                    0e:d1:a2:9e:f9:88:ff:44:2e:ec:f1:f7:d9:d7:c6:
                    32:00:36:9f:24:0e:cc:88:88:54:91:7d:ec:f0:45:
                    67:3c:3e:05:b0:5a:8c:5a:6e:01:ba:fa:e2:88:9f:
                    0a:66:23:7f:2a:a5:8e:c6:07:a4:78:97:c4:17:91:
                    5c:db:b0:43:4f:0e:d2:b7:64:1d:05:9c:88:60:be:
                    e6:6f:0c:a1:df:9c:66:5a:bf:64:78:6b:c1:54:87:
                    c3:74:e3:a3:5b:57:71:6d:18:84:c0:68:0b:90:9d:
                    f4:c3:8b:75:e1:4e:4f:20:d2:40:24:bd:d1:43:bb:
                    9a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:27:13:A2:B1:A5:94:2B:93:6F:86:B5:23:15:F5:25:70:E9:8F:A8
            X509v3 Authority Key Identifier:
                keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/tScTorGllCuTb4a1IxX1JXDpj6g.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.120.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         7e:44:63:03:40:50:75:e2:f9:5e:fd:e3:2d:d1:3d:2f:87:da:
         66:80:2d:7e:ae:14:bb:b7:f6:35:8d:17:2b:e3:a6:08:34:60:
         8d:43:08:f0:c7:e2:89:80:3d:c9:43:eb:bc:45:a8:58:91:b4:
         2c:f0:a1:2b:91:54:6d:3d:af:d4:6b:97:cd:8d:df:db:3a:e5:
         43:82:fd:6e:31:78:68:31:79:de:dd:38:d6:b7:ca:66:1a:c7:
         c5:0b:e8:b1:f2:5e:c9:43:66:43:92:5b:37:0e:06:78:a1:5c:
         9a:46:65:8a:22:bc:33:44:f1:b5:8c:f7:ed:41:d4:d2:95:7e:
         35:7f:ba:3c:d1:61:c6:98:34:51:ea:88:92:e7:b7:eb:f7:b0:
         81:25:e3:7f:b3:9e:19:94:8c:0b:cc:76:33:83:a9:4b:14:ca:
         d3:df:b0:b8:ac:0c:49:90:3f:c1:fd:c0:74:e9:07:1f:72:78:
         26:3d:d8:30:36:13:8d:36:9c:ef:28:2c:ee:c8:8e:c6:62:cd:
         61:b1:04:d3:df:b4:e8:c9:95:18:2e:ff:d6:2c:97:0a:87:f7:
         6d:69:c9:54:02:0b:76:6f:fb:bf:94:22:2c:26:56:ff:ae:9d:
         41:0d:be:5a:ef:53:0f:2f:0a:46:b7:66:8c:cd:b2:ba:fe:22:
         ae:cc:0f:7f
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIBHDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEMTQw
MEFCODlCNkQ3MkY3REI0MjRGNEFBQThDQ0ZGNjQzOEQzRDRBMB4XDTI0MDExMDAx
MDI1OVoXDTI0MTIxNDAxMzAwM1owMzExMC8GA1UEAxMoQjUyNzEzQTJCMUE1OTQy
QjkzNkY4NkI1MjMxNUY1MjU3MEU5OEZBODCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALvmwYjdeGLJ3LjgPY6lYwZ9kNJNWgYVZ3K3U0Mee6OTGiEVSmB7
AR1Z8h3HRF3sn+kVwROTytiYTx+aEOvfHjc5XLYF5EB/zl4ZixpFrct+CEc+m3lQ
rXh59bM8wZfiKCeLP3lNVZR5kha6UYoAx79z/bwEUMxazaMPx56xn7Ugl4qGRlBc
DtGinvmI/0Qu7PH32dfGMgA2nyQOzIiIVJF97PBFZzw+BbBajFpuAbr64oifCmYj
fyqljsYHpHiXxBeRXNuwQ08O0rdkHQWciGC+5m8Mod+cZlq/ZHhrwVSHw3Tjo1tX
cW0YhMBoC5Cd9MOLdeFOTyDSQCS90UO7mpECAwEAAaOCAiIwggIeMB0GA1UdDgQW
BBS1JxOisaWUK5NvhrUjFfUlcOmPqDAfBgNVHSMEGDAWgBTRQAq4m21y99tCT0qq
jM/2Q409SjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY
oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjkvMFVBS3VKdHRjdmZiUWs5S3FvelA5a09OUFVvLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMFVBS3VKdHRjdmZiUWs5S3FvelA5a09O
UFVvLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgboGCCsGAQUFBwELBIGtMIGqMGAGCCsG
AQUFBzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzI5L3RTY1RvckdsbEN1VGI0YTFJeFgxSlhEcGo2Zy5yb2EwRgYI
KwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRw
L2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAadeAAwDQYJKoZIhvcNAQELBQADggEBAH5EYwNAUHXi+V794y3RPS+H2maALX6u
FLu39jWNFyvjpgg0YI1DCPDH4omAPclD67xFqFiRtCzwoSuRVG09r9Rrl82N39s6
5UOC/W4xeGgxed7dONa3ymYax8UL6LHyXslDZkOSWzcOBnihXJpGZYoivDNE8bWM
9+1B1NKVfjV/ujzRYcaYNFHqiJLnt+v3sIEl43+znhmUjAvMdjODqUsUytPfsLis
DEmQP8H9wHTpBx9yeCY92DA2E402nO8oLO7IjsZizWGxBNPftOjJlRgu/9YslwqH
921pyVQCC3Zv+7+UIiwmVv+unUENvlrvUw8vCka3ZozNsrr+Iq7MD38=
-----END CERTIFICATE-----
Generated at Thu Jun 6 15:06:33 2024 by rpki-client on console-ams.rpki-client.org