Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/_8NhqdbNltw1YaT6-qRFOdDWxyo.roa
File:                     _8NhqdbNltw1YaT6-qRFOdDWxyo.roa (raw, json)
Hash identifier:          GVmmeLaRe51tr34bYFLAllFz4ne48mYEbUGSBvJzu9E=
Subject key identifier:   FF:C3:61:A9:D6:CD:96:DC:35:61:A4:FA:FA:A4:45:39:D0:D6:C7:2A
Certificate issuer:       /CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
Certificate serial:       44
Authority key identifier: F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_8NhqdbNltw1YaT6-qRFOdDWxyo.roa
Signing time:             Wed 15 May 2024 08:31:54 +0000
ROA not before:           Wed 15 May 2024 08:31:54 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     9605
IP address blocks:        160.249.64.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68 (0x44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
        Validity
            Not Before: May 15 08:31:54 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=FFC361A9D6CD96DC3561A4FAFAA44539D0D6C72A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:64:16:1d:ee:da:53:16:ca:48:32:0e:df:33:
                    2c:98:b6:f3:6c:61:1e:46:dd:17:fa:32:01:52:8c:
                    3a:d2:3d:1c:b8:d4:47:db:d5:f4:f4:32:38:7f:38:
                    67:2b:ab:d6:51:9d:4a:60:bb:6b:37:92:98:be:20:
                    b7:d8:40:5f:61:79:23:8a:46:dd:36:10:aa:07:93:
                    f9:b7:0f:4d:9d:62:15:9f:f3:53:24:89:8a:4d:9b:
                    5e:5f:af:2a:3c:0a:0b:34:7b:c3:e2:f6:f4:d1:c1:
                    e0:86:57:54:41:d0:29:b8:88:d4:10:e9:7a:83:4e:
                    e9:f8:a2:37:63:6d:5a:30:60:32:f8:7b:25:ae:00:
                    7c:32:9d:83:f1:38:cf:b2:d5:57:6c:4e:8a:25:29:
                    14:56:79:80:fc:af:3a:9c:09:79:56:76:65:5f:d7:
                    9f:3f:21:de:97:fc:5e:64:fa:2b:21:54:1c:89:dd:
                    79:b5:c3:a1:86:f3:17:5e:85:cc:90:aa:6b:1c:f1:
                    8f:db:0b:09:19:15:ef:94:eb:74:60:b0:c8:ae:19:
                    bd:71:26:71:49:f5:68:09:5f:61:ff:6c:c0:e2:b2:
                    a5:ab:0d:7e:b4:0c:4f:6d:20:88:99:a1:bf:e5:b9:
                    c8:c6:28:51:b3:32:2e:98:79:db:bf:1a:2c:60:2c:
                    f4:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:C3:61:A9:D6:CD:96:DC:35:61:A4:FA:FA:A4:45:39:D0:D6:C7:2A
            X509v3 Authority Key Identifier:
                keyid:F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_8NhqdbNltw1YaT6-qRFOdDWxyo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.249.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2a:59:3c:ff:11:3d:e5:93:a9:55:48:f5:61:75:f0:6a:65:02:
         67:91:0f:c4:f7:95:11:25:60:fb:8d:44:84:ad:aa:3a:86:a2:
         f4:d5:e1:fd:d7:50:1c:11:c2:a8:bd:26:6a:c2:b1:31:9b:a4:
         94:70:c5:b4:c0:ae:2b:e5:25:84:75:6b:e2:0a:de:32:a9:9c:
         f6:5e:72:ae:2e:25:ad:e7:aa:4b:8d:73:a3:ef:c0:c2:af:eb:
         ca:0c:8f:f3:ad:26:e1:85:5b:df:c3:7f:17:77:a0:71:d7:56:
         97:0e:6e:52:7c:12:1c:c4:51:6d:5b:5f:29:ba:80:67:10:dd:
         fc:74:b1:a2:98:a8:b9:d6:91:d7:da:55:c6:1c:8a:66:a9:85:
         29:8a:e6:71:1a:c1:22:80:b2:40:75:cb:e3:a0:24:a3:98:31:
         9c:4d:72:e2:a5:e2:82:06:0b:12:4b:aa:74:5c:72:c0:47:0a:
         aa:55:93:f0:20:6f:93:43:3f:ed:85:b6:61:2b:1a:b0:b6:c3:
         09:f7:8d:c1:15:e5:83:6d:33:76:3b:a5:f2:d3:e8:15:32:b1:
         17:95:dd:30:6a:e6:0d:6d:8b:12:d3:1c:cb:54:1c:2f:8e:92:
         c4:02:9c:bd:3f:94:c4:1d:77:57:1b:69:c2:c4:77:2e:50:5b:
         70:06:92:32
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBRDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGODlF
MEYxNUMxRTIwRTE5MUFBRjE3Mjg4RjZFMzBGRjAxODY5QTZFMB4XDTI0MDUxNTA4
MzE1NFoXDTI1MDUxNTAxMzAwM1owMzExMC8GA1UEAxMoRkZDMzYxQTlENkNEOTZE
QzM1NjFBNEZBRkFBNDQ1MzlEMEQ2QzcyQTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOhkFh3u2lMWykgyDt8zLJi282xhHkbdF/oyAVKMOtI9HLjUR9vV
9PQyOH84Zyur1lGdSmC7azeSmL4gt9hAX2F5I4pG3TYQqgeT+bcPTZ1iFZ/zUySJ
ik2bXl+vKjwKCzR7w+L29NHB4IZXVEHQKbiI1BDpeoNO6fiiN2NtWjBgMvh7Ja4A
fDKdg/E4z7LVV2xOiiUpFFZ5gPyvOpwJeVZ2ZV/Xnz8h3pf8XmT6KyFUHIndebXD
oYbzF16FzJCqaxzxj9sLCRkV75TrdGCwyK4ZvXEmcUn1aAlfYf9swOKypasNfrQM
T20giJmhv+W5yMYoUbMyLph5278aLGAs9LsCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBT/w2Gp1s2W3DVhpPr6pEU50NbHKjAfBgNVHSMEGDAWgBT4ng8VweIOGRqvFyiP
bjD/AYaabjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzA5Ly1KNFBGY0hpRGhrYXJ4Y29qMjR3X3dHR21tNC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLy1KNFBGY0hpRGhrYXJ4Y29qMjR3X3dH
R21tNC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zMDkvXzhOaHFkYk5sdHcxWWFUNi1xUkZPZERXeHlvLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBKD5QDANBgkqhkiG9w0BAQsFAAOCAQEAKlk8/xE95ZOpVUj1YXXwamUCZ5EP
xPeVESVg+41EhK2qOoai9NXh/ddQHBHCqL0masKxMZuklHDFtMCuK+UlhHVr4gre
Mqmc9l5yri4lreeqS41zo+/Awq/rygyP860m4YVb38N/F3egcddWlw5uUnwSHMRR
bVtfKbqAZxDd/HSxopioudaR19pVxhyKZqmFKYrmcRrBIoCyQHXL46Ako5gxnE1y
4qXiggYLEkuqdFxywEcKqlWT8CBvk0M/7YW2YSsasLbDCfeNwRXlg20zdjul8tPo
FTKxF5XdMGrmDW2LEtMcy1QcL46SxAKcvT+UxB13VxtpwsR3LlBbcAaSMg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:40 2024 by rpki-client on console-ams.rpki-client.org