Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/5yGc_VpnR8o-4fljOHGq-nlXfEY.roa
File:                     5yGc_VpnR8o-4fljOHGq-nlXfEY.roa (raw, json)
Hash identifier:          1KEaV55dXRuyumdbON+MheXs3SLkQAbi0E7tOih6a/o=
Subject key identifier:   E7:21:9C:FD:5A:67:47:CA:3E:E1:F9:63:38:71:AA:FA:79:57:7C:46
Certificate issuer:       /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial:       CC
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/5yGc_VpnR8o-4fljOHGq-nlXfEY.roa
Signing time:             Tue 01 Aug 2023 01:30:39 +0000
ROA not before:           Tue 01 Aug 2023 01:30:39 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     7530
IP address blocks:        210.231.222.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 11:53:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 204 (0xcc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
        Validity
            Not Before: Aug  1 01:30:39 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=E7219CFD5A6747CA3EE1F9633871AAFA79577C46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:7d:b6:20:3d:c0:d6:84:61:d7:a6:f3:5a:d7:
                    b9:fe:33:58:c7:5c:49:aa:28:fc:b2:41:53:55:96:
                    fb:6c:0d:79:f9:0e:5f:c6:28:5f:99:ef:94:27:0b:
                    5f:a2:e1:9d:7b:26:ba:11:28:17:59:06:3a:11:90:
                    09:9c:f6:f7:2e:f1:ed:f6:92:b1:93:b9:65:27:9a:
                    7e:9d:20:08:52:b3:6b:6c:43:f9:01:48:4f:4f:36:
                    a2:65:6c:f6:a9:df:a3:2c:0b:9b:9e:16:e0:90:42:
                    33:e2:30:90:ae:ba:7c:43:a6:f2:18:5e:72:7d:6b:
                    fd:0f:0f:ee:ee:22:e0:cc:76:d8:7a:3b:89:25:35:
                    d9:58:4f:3f:cb:07:ba:16:82:12:7d:e7:5e:d9:a8:
                    1c:4d:8a:02:25:30:43:24:54:c1:64:6a:02:ce:54:
                    76:36:ae:e4:0f:b6:bc:26:52:14:19:cd:76:ff:78:
                    03:fd:b9:2d:8b:26:ee:d8:36:50:65:00:93:c9:32:
                    07:4f:5f:3e:af:09:b4:89:7f:b5:7c:5c:b4:40:9b:
                    60:51:4d:68:8f:c3:84:fa:0d:94:a1:e3:89:e4:45:
                    92:53:18:56:93:75:be:e8:f9:cf:a2:77:e3:56:ef:
                    67:27:47:66:19:9d:56:f0:3e:c6:9b:12:5a:4d:36:
                    03:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:21:9C:FD:5A:67:47:CA:3E:E1:F9:63:38:71:AA:FA:79:57:7C:46
            X509v3 Authority Key Identifier:
                keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/5yGc_VpnR8o-4fljOHGq-nlXfEY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.231.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         70:00:05:32:e3:4c:e0:f8:f4:67:4f:a6:3e:90:aa:91:e9:19:
         8c:bf:8d:1a:b8:bc:e7:03:39:5c:84:e1:c4:84:65:81:02:74:
         e0:39:0b:60:31:fa:bd:b9:e1:fa:00:91:31:14:23:95:81:da:
         2a:94:30:e0:7c:09:d1:7f:94:5c:cd:35:6f:6d:aa:37:19:31:
         34:89:9b:12:3f:1d:66:f1:d4:78:93:d7:78:02:87:91:8f:fe:
         c9:fb:fc:12:dd:a2:cd:45:8f:b8:71:53:04:49:cf:37:5d:7f:
         85:b8:b5:80:d6:f6:23:c0:f9:f2:db:66:a2:f4:92:b3:79:24:
         ef:96:2a:bf:4f:db:98:cf:a0:87:0b:74:2b:6c:89:8f:cf:90:
         91:54:7e:bf:83:d3:a8:c5:05:c1:7c:f0:fc:9c:9c:cc:f4:22:
         e2:3f:74:c1:14:6d:8b:a4:b5:47:5b:82:cd:12:68:38:e9:2e:
         36:9d:2c:d2:7c:62:f4:2a:f8:76:63:a3:93:f5:27:a6:56:ef:
         c2:79:a7:cf:cc:ae:5d:88:19:39:c6:a2:15:f8:aa:fa:0b:aa:
         54:70:32:9b:59:11:8e:18:de:b7:85:9f:45:8c:77:4c:21:4a:
         68:de:96:00:e4:11:e5:7f:ba:06:80:a1:46:29:c7:58:ec:d4:
         47:8f:b1:93
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAMwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEE1
QUNBQzI5OTBCRDhGODY1NUMwQzcyMUJBQ0ZGMDMwQTU5RDFGQzAeFw0yMzA4MDEw
MTMwMzlaFw0yNDA3MTQwMTMwMDNaMDMxMTAvBgNVBAMTKEU3MjE5Q0ZENUE2NzQ3
Q0EzRUUxRjk2MzM4NzFBQUZBNzk1NzdDNDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDSfbYgPcDWhGHXpvNa17n+M1jHXEmqKPyyQVNVlvtsDXn5Dl/G
KF+Z75QnC1+i4Z17JroRKBdZBjoRkAmc9vcu8e32krGTuWUnmn6dIAhSs2tsQ/kB
SE9PNqJlbPap36MsC5ueFuCQQjPiMJCuunxDpvIYXnJ9a/0PD+7uIuDMdth6O4kl
NdlYTz/LB7oWghJ9517ZqBxNigIlMEMkVMFkagLOVHY2ruQPtrwmUhQZzXb/eAP9
uS2LJu7YNlBlAJPJMgdPXz6vCbSJf7V8XLRAm2BRTWiPw4T6DZSh44nkRZJTGFaT
db7o+c+id+NW72cnR2YZnVbwPsabElpNNgOXAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU5yGc/VpnR8o+4fljOHGq+nlXfEYwHwYDVR0jBBgwFoAUClrKwpkL2PhlXAxy
G6z/AwpZ0fwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM1NC9DbHJLd3BrTDJQaGxYQXh5RzZ6X0F3cFowZncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9DbHJLd3BrTDJQaGxYQXh5RzZ6X0F3
cFowZncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzU0LzV5R2NfVnBuUjhvLTRmbGpPSEdxLW5sWGZFWS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAHS594wDQYJKoZIhvcNAQELBQADggEBAHAABTLjTOD49GdPpj6QqpHpGYy/
jRq4vOcDOVyE4cSEZYECdOA5C2Ax+r254foAkTEUI5WB2iqUMOB8CdF/lFzNNW9t
qjcZMTSJmxI/HWbx1HiT13gCh5GP/sn7/BLdos1Fj7hxUwRJzzddf4W4tYDW9iPA
+fLbZqL0krN5JO+WKr9P25jPoIcLdCtsiY/PkJFUfr+D06jFBcF88PycnMz0IuI/
dMEUbYuktUdbgs0SaDjpLjadLNJ8YvQq+HZjo5P1J6ZW78J5p8/Mrl2IGTnGohX4
qvoLqlRwMptZEY4Y3reFn0WMd0whSmjelgDkEeV/ugaAoUYpx1js1EePsZM=
-----END CERTIFICATE-----
Generated at Sun Jun 16 14:31:56 2024 by rpki-client on console-ams.rpki-client.org