Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/311/Djlreg8OC8sK34Is8OeKLClE0jo.roa
File:                     Djlreg8OC8sK34Is8OeKLClE0jo.roa (raw, json)
Hash identifier:          3dWuK3qsCQrEFdU4cCMFkO4dOk5XFxJn5Tpx5QWiRRw=
Subject key identifier:   0E:39:6B:7A:0F:0E:0B:CB:0A:DF:82:2C:F0:E7:8A:2C:29:44:D2:3A
Certificate issuer:       /CN=A642E787390B6CE6CEE685B443F93AB3639F116C
Certificate serial:       03
Authority key identifier: A6:42:E7:87:39:0B:6C:E6:CE:E6:85:B4:43:F9:3A:B3:63:9F:11:6C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pkLnhzkLbObO5oW0Q_k6s2OfEWw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/Djlreg8OC8sK34Is8OeKLClE0jo.roa
Signing time:             Thu 26 Sep 2024 21:01:41 +0000
ROA not before:           Thu 26 Sep 2024 21:01:41 +0000
ROA not after:            Mon 15 Sep 2025 01:30:03 +0000
asID:                     9354
IP address blocks:        133.149.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/pkLnhzkLbObO5oW0Q_k6s2OfEWw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/pkLnhzkLbObO5oW0Q_k6s2OfEWw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pkLnhzkLbObO5oW0Q_k6s2OfEWw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A642E787390B6CE6CEE685B443F93AB3639F116C
        Validity
            Not Before: Sep 26 21:01:41 2024 GMT
            Not After : Sep 15 01:30:03 2025 GMT
        Subject: CN=0E396B7A0F0E0BCB0ADF822CF0E78A2C2944D23A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:46:81:dd:a7:ac:8c:1f:65:14:f9:eb:b8:22:
                    cf:8a:b5:b5:b2:5c:3e:0e:55:68:2b:34:aa:bc:56:
                    11:ec:5f:6b:ed:d0:28:4a:56:5e:30:6f:9d:51:2b:
                    81:ac:99:07:b3:fa:31:90:be:f5:0d:93:5c:f1:9b:
                    eb:71:e2:1a:5a:e2:f0:ad:48:b0:62:ae:28:83:5d:
                    2a:9b:ba:54:95:d4:a4:2b:da:e3:38:14:25:bc:9a:
                    9f:45:ca:57:46:86:09:85:9d:41:2b:9d:46:80:e4:
                    f2:25:09:aa:b1:bf:eb:58:07:53:15:22:cc:eb:ed:
                    55:71:1b:72:c6:98:b0:32:05:f6:ed:7c:22:cf:9d:
                    6f:7b:9d:43:a5:5b:10:35:eb:50:db:2e:4e:17:fd:
                    ad:83:d7:63:55:05:69:e6:d2:5b:2b:90:c7:ab:c2:
                    a2:30:ee:ae:c3:e8:0b:0a:4f:e0:f0:74:71:f7:38:
                    e3:e3:76:29:97:f8:c8:be:f9:44:a3:bb:4f:19:53:
                    f5:b7:f8:43:38:1d:8a:63:ec:b8:64:7d:22:44:08:
                    d1:bd:ef:16:cd:82:b6:5f:83:24:5a:4c:07:6e:32:
                    55:a9:f3:db:44:48:a5:cb:46:d2:07:04:49:ea:87:
                    c9:a2:6e:11:52:12:a7:f0:32:f3:1e:12:c2:65:91:
                    14:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:39:6B:7A:0F:0E:0B:CB:0A:DF:82:2C:F0:E7:8A:2C:29:44:D2:3A
            X509v3 Authority Key Identifier:
                keyid:A6:42:E7:87:39:0B:6C:E6:CE:E6:85:B4:43:F9:3A:B3:63:9F:11:6C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/pkLnhzkLbObO5oW0Q_k6s2OfEWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pkLnhzkLbObO5oW0Q_k6s2OfEWw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/Djlreg8OC8sK34Is8OeKLClE0jo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.149.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9a:ab:80:ea:99:32:55:e6:21:58:a9:d3:73:68:ee:7c:29:c2:
         fc:60:de:9d:77:10:82:02:e9:42:88:77:56:db:58:85:cc:82:
         d6:ac:13:71:ff:98:5d:ab:00:dc:4e:4a:62:ac:e0:a2:6b:ff:
         cc:7c:25:cd:51:69:eb:d9:5e:d8:89:44:7c:4e:91:bb:0b:e8:
         5e:12:d2:9e:c0:f1:ae:e9:08:18:cd:40:bf:8f:2f:2d:20:29:
         bc:80:6d:13:f0:c5:7c:9a:58:fd:b5:fc:01:1d:ff:f6:67:1b:
         65:f8:15:58:7d:3c:e7:39:d0:52:66:56:43:32:0a:9f:40:c7:
         b8:ff:67:51:7d:95:88:59:78:f5:e4:b7:63:d8:b7:02:2c:97:
         df:ed:e9:4c:47:81:fa:5b:3a:43:e3:a0:0e:e5:eb:c8:09:9c:
         a4:ff:dd:41:27:99:65:2b:aa:bd:a2:96:e5:a9:2c:c4:4f:13:
         16:18:70:62:2d:7a:16:29:bc:96:cf:d0:39:21:a1:5c:fd:08:
         63:c8:53:29:3d:04:68:36:72:ad:e4:2a:a7:9d:83:8c:03:96:
         d7:6e:94:31:71:e9:e5:d2:7d:cf:76:c8:c6:45:c3:19:48:f5:
         f9:51:54:cc:58:81:95:72:7e:20:1e:5b:d6:64:cc:b1:4c:88:
         03:8a:e8:c2
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBNjQy
RTc4NzM5MEI2Q0U2Q0VFNjg1QjQ0M0Y5M0FCMzYzOUYxMTZDMB4XDTI0MDkyNjIx
MDE0MVoXDTI1MDkxNTAxMzAwM1owMzExMC8GA1UEAxMoMEUzOTZCN0EwRjBFMEJD
QjBBREY4MjJDRjBFNzhBMkMyOTQ0RDIzQTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOVGgd2nrIwfZRT567giz4q1tbJcPg5VaCs0qrxWEexfa+3QKEpW
XjBvnVErgayZB7P6MZC+9Q2TXPGb63HiGlri8K1IsGKuKINdKpu6VJXUpCva4zgU
Jbyan0XKV0aGCYWdQSudRoDk8iUJqrG/61gHUxUizOvtVXEbcsaYsDIF9u18Is+d
b3udQ6VbEDXrUNsuThf9rYPXY1UFaebSWyuQx6vCojDursPoCwpP4PB0cfc44+N2
KZf4yL75RKO7TxlT9bf4QzgdimPsuGR9IkQI0b3vFs2Ctl+DJFpMB24yVanz20RI
pctG0gcESeqHyaJuEVISp/Ay8x4SwmWRFMMCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBQOOWt6Dw4Lywrfgizw54osKUTSOjAfBgNVHSMEGDAWgBSmQueHOQts5s7mhbRD
+TqzY58RbDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzExL3BrTG5oemtMYk9iTzVvVzBRX2s2czJPZkVXdy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3BrTG5oemtMYk9iTzVvVzBRX2s2czJP
ZkVXdy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zMTEvRGpscmVnOE9DOHNLMzRJczhPZUtMQ2xFMGpvLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBIWVUDANBgkqhkiG9w0BAQsFAAOCAQEAmquA6pkyVeYhWKnTc2jufCnC/GDe
nXcQggLpQoh3VttYhcyC1qwTcf+YXasA3E5KYqzgomv/zHwlzVFp69le2IlEfE6R
uwvoXhLSnsDxrukIGM1Av48vLSApvIBtE/DFfJpY/bX8AR3/9mcbZfgVWH085znQ
UmZWQzIKn0DHuP9nUX2ViFl49eS3Y9i3AiyX3+3pTEeB+ls6Q+OgDuXryAmcpP/d
QSeZZSuqvaKW5aksxE8TFhhwYi16Fim8ls/QOSGhXP0IY8hTKT0EaDZyreQqp52D
jAOW126UMXHp5dJ9z3bIxkXDGUj1+VFUzFiBlXJ+IB5b1mTMsUyIA4rowg==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:31:09 2025 by rpki-client