Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/fHnL3ZpdOP9YTDThe3uP28UwBoA.roa
File:                     fHnL3ZpdOP9YTDThe3uP28UwBoA.roa (raw, json)
Hash identifier:          Nnz1JzPtwqgJbxYKshxKIJ2bLlCCqoKABTp/7IGm4C4=
Subject key identifier:   7C:79:CB:DD:9A:5D:38:FF:58:4C:34:E1:7B:7B:8F:DB:C5:30:06:80
Certificate issuer:       /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial:       E1
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/fHnL3ZpdOP9YTDThe3uP28UwBoA.roa
Signing time:             Thu 29 Feb 2024 01:29:41 +0000
ROA not before:           Thu 29 Feb 2024 01:29:41 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     9607
IP address blocks:        211.14.24.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 225 (0xe1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
        Validity
            Not Before: Feb 29 01:29:41 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=7C79CBDD9A5D38FF584C34E17B7B8FDBC5300680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:67:e2:c8:7b:7d:1a:0b:45:c2:b0:a9:83:1b:
                    a7:1d:e5:b4:54:92:2e:35:9a:91:35:14:07:f4:f8:
                    63:00:1e:5b:67:f3:5c:7c:87:76:ab:9d:3a:97:8c:
                    97:1a:a0:a4:26:cc:70:30:6c:a1:4b:a8:5b:14:34:
                    b0:33:81:bc:a8:57:41:64:30:05:57:b6:3e:28:33:
                    4f:f3:ea:58:df:43:d4:ae:13:c9:12:69:8e:c9:0d:
                    47:9e:74:b4:9d:2e:62:74:51:3a:31:47:4a:92:fc:
                    a7:3c:86:93:6d:3f:14:9c:23:b7:d5:3a:54:f8:f7:
                    fa:27:99:45:e3:5d:6d:b2:76:60:d0:ba:d2:49:62:
                    93:d1:88:6c:83:ac:d1:5d:ff:8e:30:e1:57:c4:3c:
                    67:ae:6a:bb:58:bc:c2:f2:55:07:45:c6:e5:6c:1f:
                    fa:19:11:6a:f8:43:43:30:2e:b1:f1:69:ea:8b:ac:
                    d5:82:b2:73:a4:fc:22:ff:3e:c7:bc:37:50:24:eb:
                    f1:ae:e5:18:72:90:d8:eb:c8:50:51:91:72:77:1a:
                    40:f7:de:e7:ca:fe:11:e7:a8:3d:24:56:e7:50:c4:
                    f1:21:1c:48:27:f7:05:e0:fd:f4:8b:31:af:6c:4b:
                    d9:51:74:f3:ff:3f:fa:c9:d7:e1:de:66:d3:0e:fa:
                    5e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:79:CB:DD:9A:5D:38:FF:58:4C:34:E1:7B:7B:8F:DB:C5:30:06:80
            X509v3 Authority Key Identifier:
                keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/fHnL3ZpdOP9YTDThe3uP28UwBoA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.14.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b4:82:08:40:83:43:7f:dc:b2:a7:38:7c:47:52:4d:40:8a:e8:
         7d:bd:a5:4d:99:d6:00:a3:04:98:77:b5:bf:2d:e5:de:57:0f:
         d4:05:16:7b:aa:57:17:0a:ee:a3:cf:05:27:63:c3:ec:fc:2b:
         0b:e5:4f:56:5c:3d:52:3f:48:41:2f:82:e1:17:61:49:02:30:
         02:f7:7d:f5:be:03:21:c6:3a:e1:49:b2:62:9a:2d:71:b7:b8:
         4e:ae:5a:c7:d5:35:69:53:b4:59:4f:77:1c:a5:44:a3:16:b5:
         0c:24:8e:80:82:68:8a:bd:0f:b1:18:aa:75:52:ce:27:1e:c5:
         9e:a3:16:02:a3:a6:d7:5a:bf:7b:1b:f0:0d:b2:66:8b:ad:1b:
         b3:93:39:47:85:99:98:fe:fb:c0:ac:22:39:44:c7:4d:ae:f2:
         81:83:2a:c9:24:d8:e5:87:df:dd:19:24:52:d8:86:e2:0e:60:
         69:b8:11:4f:2f:35:e4:a0:6b:c8:c4:d4:11:58:b8:3d:76:5d:
         92:7b:82:b4:71:55:3c:60:ae:a3:04:39:5a:8c:cc:ad:64:fc:
         15:5a:46:8e:ff:98:e6:dc:25:dc:af:bb:f1:f2:68:5d:2f:59:
         2e:db:af:15:b2:70:bc:6b:da:92:47:fb:d5:0b:61:8b:fd:ea:
         2c:0c:c5:a8
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAOEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEE1
QUNBQzI5OTBCRDhGODY1NUMwQzcyMUJBQ0ZGMDMwQTU5RDFGQzAeFw0yNDAyMjkw
MTI5NDFaFw0yNTAyMTQwMTMwMDNaMDMxMTAvBgNVBAMTKDdDNzlDQkREOUE1RDM4
RkY1ODRDMzRFMTdCN0I4RkRCQzUzMDA2ODAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDMZ+LIe30aC0XCsKmDG6cd5bRUki41mpE1FAf0+GMAHltn81x8
h3arnTqXjJcaoKQmzHAwbKFLqFsUNLAzgbyoV0FkMAVXtj4oM0/z6ljfQ9SuE8kS
aY7JDUeedLSdLmJ0UToxR0qS/Kc8hpNtPxScI7fVOlT49/onmUXjXW2ydmDQutJJ
YpPRiGyDrNFd/44w4VfEPGeuartYvMLyVQdFxuVsH/oZEWr4Q0MwLrHxaeqLrNWC
snOk/CL/Pse8N1Ak6/Gu5RhykNjryFBRkXJ3GkD33ufK/hHnqD0kVudQxPEhHEgn
9wXg/fSLMa9sS9lRdPP/P/rJ1+HeZtMO+l4nAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUfHnL3ZpdOP9YTDThe3uP28UwBoAwHwYDVR0jBBgwFoAUClrKwpkL2PhlXAxy
G6z/AwpZ0fwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM1NC9DbHJLd3BrTDJQaGxYQXh5RzZ6X0F3cFowZncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9DbHJLd3BrTDJQaGxYQXh5RzZ6X0F3
cFowZncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzU0L2ZIbkwzWnBkT1A5WVREVGhlM3VQMjhVd0JvQS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAHTDhgwDQYJKoZIhvcNAQELBQADggEBALSCCECDQ3/csqc4fEdSTUCK6H29
pU2Z1gCjBJh3tb8t5d5XD9QFFnuqVxcK7qPPBSdjw+z8KwvlT1ZcPVI/SEEvguEX
YUkCMAL3ffW+AyHGOuFJsmKaLXG3uE6uWsfVNWlTtFlPdxylRKMWtQwkjoCCaIq9
D7EYqnVSzicexZ6jFgKjptdav3sb8A2yZoutG7OTOUeFmZj++8CsIjlEx02u8oGD
Kskk2OWH390ZJFLYhuIOYGm4EU8vNeSga8jE1BFYuD12XZJ7grRxVTxgrqMEOVqM
zK1k/BVaRo7/mObcJdyvu/HyaF0vWS7brxWycLxr2pJH+9ULYYv96iwMxag=
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:42 2024 by rpki-client on console-ams.rpki-client.org