Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/WpaCvl94AB4Mm5FaDFys_8DXe24.roa
File:                     WpaCvl94AB4Mm5FaDFys_8DXe24.roa (raw, json)
Hash identifier:          477j2pHJIvTksycnhJv7i/zxHiCAGm1LeI4a47fj444=
Subject key identifier:   5A:96:82:BE:5F:78:00:1E:0C:9B:91:5A:0C:5C:AC:FF:C0:D7:7B:6E
Certificate issuer:       /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial:       E6
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/WpaCvl94AB4Mm5FaDFys_8DXe24.roa
Signing time:             Thu 29 Feb 2024 01:29:43 +0000
ROA not before:           Thu 29 Feb 2024 01:29:43 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     9607
IP address blocks:        203.141.52.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 230 (0xe6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
        Validity
            Not Before: Feb 29 01:29:43 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=5A9682BE5F78001E0C9B915A0C5CACFFC0D77B6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ea:cb:13:3d:8d:ee:5b:66:7c:4f:cd:1f:11:
                    be:96:9a:af:5f:b8:0b:9b:85:b0:a7:a7:83:df:36:
                    a0:d0:da:e9:12:da:a5:45:b0:48:02:bf:54:a5:f1:
                    45:85:14:18:31:12:c1:d5:64:2d:1a:7e:e9:68:78:
                    93:94:8b:d0:67:96:ef:64:1c:7b:40:be:81:6f:ac:
                    e9:7e:05:43:73:49:6e:15:cb:75:81:7c:46:db:1f:
                    9a:c9:84:1b:34:f9:cb:f8:7a:20:5f:dc:04:4b:9a:
                    21:56:47:eb:8b:b7:12:f0:a2:4d:5c:4f:71:c2:d4:
                    e7:e1:a5:04:47:f1:fc:0d:53:c9:8e:42:06:a3:37:
                    b3:2d:b7:74:e5:45:af:6e:3a:89:44:0b:31:dc:c2:
                    38:6b:b6:88:c2:2a:32:ac:da:0e:b9:26:bd:45:9b:
                    fd:96:09:87:4e:b0:99:6f:4a:22:e8:2e:8a:b1:48:
                    22:60:a3:32:57:e9:65:81:af:ef:fa:79:3a:13:7a:
                    a5:4c:e0:28:45:27:63:ec:dc:2c:f0:27:98:a5:d3:
                    66:29:3b:67:3c:b9:43:19:85:53:b5:de:fb:4f:59:
                    ef:73:5b:0b:e1:21:49:ff:f9:da:ea:53:60:cd:a5:
                    74:98:04:74:22:88:66:cb:c3:22:8e:d7:23:3e:66:
                    5c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:96:82:BE:5F:78:00:1E:0C:9B:91:5A:0C:5C:AC:FF:C0:D7:7B:6E
            X509v3 Authority Key Identifier:
                keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/WpaCvl94AB4Mm5FaDFys_8DXe24.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.141.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         97:e8:25:54:44:27:1e:ac:83:7d:35:89:ec:fb:ea:fd:58:93:
         5f:2b:45:e7:50:6f:4a:56:30:d4:e9:8b:9a:1d:4c:44:bd:1b:
         a3:7b:6c:d2:33:e0:04:bf:a7:26:a6:12:68:38:4b:5f:7e:8a:
         51:9a:07:cd:e8:b5:1f:83:3e:81:3d:3c:82:2b:c4:07:2d:ef:
         4e:ef:89:fb:ef:08:97:e7:3f:28:ba:af:e3:e7:3c:1c:a1:40:
         6c:d5:72:20:d9:9d:80:2d:90:61:08:6d:c7:43:cb:c1:5b:07:
         35:87:09:6f:f4:d9:33:32:62:3e:3e:f1:ab:6d:ee:d6:ac:6e:
         b5:fc:b5:b9:18:7f:c7:10:41:4b:51:27:39:0c:da:27:86:82:
         43:1f:75:ad:7f:d7:96:f9:b1:5e:03:95:fe:84:dc:7c:77:c4:
         23:3b:56:5e:9c:ed:0a:5c:60:76:18:d5:55:cf:98:d5:b5:1a:
         6c:40:8d:5c:75:e7:25:6e:a1:f6:29:54:e0:cb:9e:40:4c:ed:
         a8:04:52:2e:3d:c2:c6:4d:3b:25:87:8b:70:b4:ba:31:3e:c2:
         7e:bd:02:05:3f:ba:de:1c:09:e2:86:46:a8:c0:6c:0d:55:41:
         28:93:3d:21:d4:2e:2b:3a:ce:ed:58:07:de:d1:a7:d4:0f:e6:
         62:97:90:f7
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAOYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEE1
QUNBQzI5OTBCRDhGODY1NUMwQzcyMUJBQ0ZGMDMwQTU5RDFGQzAeFw0yNDAyMjkw
MTI5NDNaFw0yNTAyMTQwMTMwMDNaMDMxMTAvBgNVBAMTKDVBOTY4MkJFNUY3ODAw
MUUwQzlCOTE1QTBDNUNBQ0ZGQzBENzdCNkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCz6ssTPY3uW2Z8T80fEb6Wmq9fuAubhbCnp4PfNqDQ2ukS2qVF
sEgCv1Sl8UWFFBgxEsHVZC0afuloeJOUi9Bnlu9kHHtAvoFvrOl+BUNzSW4Vy3WB
fEbbH5rJhBs0+cv4eiBf3ARLmiFWR+uLtxLwok1cT3HC1OfhpQRH8fwNU8mOQgaj
N7Mtt3TlRa9uOolECzHcwjhrtojCKjKs2g65Jr1Fm/2WCYdOsJlvSiLoLoqxSCJg
ozJX6WWBr+/6eToTeqVM4ChFJ2Ps3CzwJ5il02YpO2c8uUMZhVO13vtPWe9zWwvh
IUn/+drqU2DNpXSYBHQiiGbLwyKO1yM+ZlzXAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUWpaCvl94AB4Mm5FaDFys/8DXe24wHwYDVR0jBBgwFoAUClrKwpkL2PhlXAxy
G6z/AwpZ0fwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM1NC9DbHJLd3BrTDJQaGxYQXh5RzZ6X0F3cFowZncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9DbHJLd3BrTDJQaGxYQXh5RzZ6X0F3
cFowZncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzU0L1dwYUN2bDk0QUI0TW01RmFERnlzXzhEWGUyNC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAHLjTQwDQYJKoZIhvcNAQELBQADggEBAJfoJVREJx6sg301iez76v1Yk18r
RedQb0pWMNTpi5odTES9G6N7bNIz4AS/pyamEmg4S19+ilGaB83otR+DPoE9PIIr
xAct707vifvvCJfnPyi6r+PnPByhQGzVciDZnYAtkGEIbcdDy8FbBzWHCW/02TMy
Yj4+8att7tasbrX8tbkYf8cQQUtRJzkM2ieGgkMfda1/15b5sV4Dlf6E3Hx3xCM7
Vl6c7QpcYHYY1VXPmNW1GmxAjVx15yVuofYpVODLnkBM7agEUi49wsZNOyWHi3C0
ujE+wn69AgU/ut4cCeKGRqjAbA1VQSiTPSHULis6zu1YB97Rp9QP5mKXkPc=
-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:38 2024 by rpki-client on console-ams.rpki-client.org