Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/YIPpOKTWJ4m4O8CysHr1b3q0FvI.roa
File:                     YIPpOKTWJ4m4O8CysHr1b3q0FvI.roa (raw, json)
Hash identifier:          4yCEv8/TyuH71dBgCWtO+PS58wz8SlWAwKr+93MYeag=
Subject key identifier:   60:83:E9:38:A4:D6:27:89:B8:3B:C0:B2:B0:7A:F5:6F:7A:B4:16:F2
Certificate issuer:       /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial:       D9
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/YIPpOKTWJ4m4O8CysHr1b3q0FvI.roa
Signing time:             Fri 01 Dec 2023 01:29:16 +0000
ROA not before:           Fri 01 Dec 2023 01:29:16 +0000
ROA not after:            Thu 14 Nov 2024 01:30:03 +0000
asID:                     59099
IP address blocks:        210.231.216.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 217 (0xd9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
        Validity
            Not Before: Dec  1 01:29:16 2023 GMT
            Not After : Nov 14 01:30:03 2024 GMT
        Subject: CN=6083E938A4D62789B83BC0B2B07AF56F7AB416F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e4:0c:55:d0:2a:62:3d:32:ab:29:45:66:7a:
                    9f:2f:a5:9e:97:fc:94:16:a7:0a:69:f5:e7:4a:bb:
                    11:33:e3:67:9e:68:13:6c:53:46:42:c0:89:7c:9b:
                    e1:e6:ad:8c:40:34:ee:52:ff:2c:ca:35:2b:83:a5:
                    90:7c:ab:14:ae:40:6e:b3:40:72:2e:d6:2d:dd:82:
                    72:e8:5f:8b:73:42:e1:0c:66:2d:1e:b0:36:88:bf:
                    e0:96:ea:a9:04:f2:a8:a5:d9:d2:e6:96:1d:8a:82:
                    c1:bb:5e:df:b9:41:48:11:4a:7d:54:94:b3:a8:05:
                    2c:6a:d7:d0:4b:60:9d:af:66:96:0b:67:2a:34:b8:
                    6a:4c:12:c7:80:97:bd:dc:02:e7:8d:41:3e:4d:04:
                    6b:e9:c7:9b:a9:96:3a:af:4e:89:00:79:8f:49:33:
                    27:be:72:64:6b:fe:a4:b7:3f:5f:fc:54:41:a3:e2:
                    d4:fa:97:5e:b2:7c:f2:bb:99:41:6a:58:5f:64:5f:
                    8c:f9:a7:8f:a0:99:e6:75:c2:2d:13:c7:01:4b:e5:
                    3a:7a:a9:e2:13:bf:1e:75:6e:3c:e8:b8:55:20:1f:
                    d8:b3:e6:7b:7b:b0:d5:08:4f:53:57:94:b2:f5:ea:
                    02:b2:80:9f:43:40:d2:76:68:d0:ee:c5:7d:5e:b0:
                    b2:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:83:E9:38:A4:D6:27:89:B8:3B:C0:B2:B0:7A:F5:6F:7A:B4:16:F2
            X509v3 Authority Key Identifier:
                keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/YIPpOKTWJ4m4O8CysHr1b3q0FvI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.231.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:2d:56:f0:db:6f:64:e3:d6:d5:5c:87:c9:38:b1:58:38:a8:
         1b:c3:2f:4b:ae:57:9d:5c:91:2f:bd:ce:e7:d1:2b:51:e8:86:
         a4:6a:bf:fc:16:9f:b1:9c:38:bf:e2:d7:6f:c0:57:08:1b:5a:
         ef:38:54:cb:b5:bd:ff:a9:5c:42:51:5c:e2:e8:a4:c1:af:2c:
         94:5e:5c:e5:8a:9f:b2:fa:d7:16:1e:1a:cb:3c:f7:58:08:ed:
         35:44:c7:23:68:0f:f6:68:25:27:87:79:54:5c:8b:1f:d6:7c:
         4d:b0:dc:51:98:e4:3a:b5:82:42:7f:2f:c7:03:89:fc:a6:e8:
         0c:fc:d6:25:28:dd:a4:cb:7a:61:a3:3c:2f:52:84:0d:08:1f:
         9d:77:8a:ff:9e:53:9a:18:9d:62:33:8b:ad:f6:2c:17:f7:8e:
         cb:1d:35:4e:20:ca:cf:c3:ff:67:2b:58:05:83:8d:1f:54:75:
         93:80:4e:ac:f0:bc:14:0e:a0:cf:0b:53:25:67:17:26:d7:99:
         6a:01:39:d2:32:67:58:7a:c5:d0:70:3d:e0:17:77:e1:74:09:
         3f:c5:df:60:87:81:88:2b:04:30:6c:3a:9f:0d:73:7f:0a:3d:
         c4:98:57:38:55:fd:a9:39:63:40:37:c8:5d:12:6b:a8:62:08:
         43:9f:b9:27
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICANkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEE1
QUNBQzI5OTBCRDhGODY1NUMwQzcyMUJBQ0ZGMDMwQTU5RDFGQzAeFw0yMzEyMDEw
MTI5MTZaFw0yNDExMTQwMTMwMDNaMDMxMTAvBgNVBAMTKDYwODNFOTM4QTRENjI3
ODlCODNCQzBCMkIwN0FGNTZGN0FCNDE2RjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCw5AxV0CpiPTKrKUVmep8vpZ6X/JQWpwpp9edKuxEz42eeaBNs
U0ZCwIl8m+HmrYxANO5S/yzKNSuDpZB8qxSuQG6zQHIu1i3dgnLoX4tzQuEMZi0e
sDaIv+CW6qkE8qil2dLmlh2KgsG7Xt+5QUgRSn1UlLOoBSxq19BLYJ2vZpYLZyo0
uGpMEseAl73cAueNQT5NBGvpx5upljqvTokAeY9JMye+cmRr/qS3P1/8VEGj4tT6
l16yfPK7mUFqWF9kX4z5p4+gmeZ1wi0TxwFL5Tp6qeITvx51bjzouFUgH9iz5nt7
sNUIT1NXlLL16gKygJ9DQNJ2aNDuxX1esLJxAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUYIPpOKTWJ4m4O8CysHr1b3q0FvIwHwYDVR0jBBgwFoAUClrKwpkL2PhlXAxy
G6z/AwpZ0fwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM1NC9DbHJLd3BrTDJQaGxYQXh5RzZ6X0F3cFowZncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9DbHJLd3BrTDJQaGxYQXh5RzZ6X0F3
cFowZncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzU0L1lJUHBPS1RXSjRtNE84Q3lzSHIxYjNxMEZ2SS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBALS59gwDQYJKoZIhvcNAQELBQADggEBAGYtVvDbb2Tj1tVch8k4sVg4qBvD
L0uuV51ckS+9zufRK1HohqRqv/wWn7GcOL/i12/AVwgbWu84VMu1vf+pXEJRXOLo
pMGvLJReXOWKn7L61xYeGss891gI7TVExyNoD/ZoJSeHeVRcix/WfE2w3FGY5Dq1
gkJ/L8cDifym6Az81iUo3aTLemGjPC9ShA0IH513iv+eU5oYnWIzi632LBf3jssd
NU4gys/D/2crWAWDjR9UdZOATqzwvBQOoM8LUyVnFybXmWoBOdIyZ1h6xdBwPeAX
d+F0CT/F32CHgYgrBDBsOp8Nc38KPcSYVzhV/ak5Y0A3yF0Sa6hiCEOfuSc=
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:49 2024 by rpki-client on console-fra.rpki-client.org