Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/p0sVKT9H_CrRbh9MeUsCSAzDIzk.roa
File:                     p0sVKT9H_CrRbh9MeUsCSAzDIzk.roa (raw, json)
Hash identifier:          Qvx98UdrehrdYxzNyDeZhGbUAauszlAZyI7IKseL6lY=
Subject key identifier:   A7:4B:15:29:3F:47:FC:2A:D1:6E:1F:4C:79:4B:02:48:0C:C3:23:39
Certificate issuer:       /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial:       D2
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/p0sVKT9H_CrRbh9MeUsCSAzDIzk.roa
Signing time:             Tue 01 Aug 2023 01:30:41 +0000
ROA not before:           Tue 01 Aug 2023 01:30:41 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     7530
IP address blocks:        210.231.216.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 11:53:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 210 (0xd2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
        Validity
            Not Before: Aug  1 01:30:41 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=A74B15293F47FC2AD16E1F4C794B02480CC32339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:0f:5d:e5:11:9d:df:2e:54:52:1e:40:c7:16:
                    27:eb:53:27:6e:c2:a1:dd:4a:18:72:5b:83:b6:a1:
                    60:fc:0a:3e:66:4e:82:fc:a4:b7:f1:29:f9:80:55:
                    65:b6:29:c0:12:51:a3:e7:6a:af:82:1f:fd:57:44:
                    24:9b:ed:4f:e8:c3:a7:39:09:9a:44:30:6b:b1:5f:
                    64:c6:26:5e:d5:4f:6c:2a:f6:67:45:d0:64:39:49:
                    79:f6:f7:49:85:b4:ea:97:ab:2f:31:e6:cb:ad:fe:
                    30:fb:aa:c5:4f:4d:34:3f:61:40:d7:fc:f1:bb:3b:
                    2e:00:cb:f0:ec:05:c7:32:8b:7e:d7:a0:b1:57:65:
                    67:58:26:87:75:7b:62:3b:ca:99:b9:d9:ea:8a:82:
                    7d:91:82:fa:90:5d:bc:fd:75:e9:bf:ea:4f:a5:5a:
                    de:02:e5:50:5f:b1:63:3e:ea:bf:20:e0:43:b9:ae:
                    23:ca:a5:6a:2c:ff:f0:1a:8e:98:01:1b:4e:dc:ab:
                    0e:64:8a:c9:4d:8d:e1:5e:20:10:81:12:d7:65:e3:
                    3c:7c:77:a9:36:87:7a:b5:35:6e:89:15:dc:32:e7:
                    bd:25:2d:f9:df:fe:17:78:37:8e:32:29:4a:33:ec:
                    2b:c0:70:7a:ed:e7:a8:2a:0a:64:df:9f:07:c6:31:
                    7b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:4B:15:29:3F:47:FC:2A:D1:6E:1F:4C:79:4B:02:48:0C:C3:23:39
            X509v3 Authority Key Identifier:
                keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/p0sVKT9H_CrRbh9MeUsCSAzDIzk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.231.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7b:1f:5c:32:a8:23:32:fb:c4:1c:7e:0d:7c:0c:43:84:4c:13:
         9c:f5:33:78:02:df:89:17:7d:61:e0:99:51:0f:94:35:ef:bd:
         f8:a5:b7:ae:4a:70:72:0b:45:fd:74:3f:a7:d4:06:25:25:dd:
         35:2d:f5:1a:df:29:51:00:b8:e0:06:83:67:62:0a:a0:50:cf:
         a1:e6:ce:21:ba:d1:56:dc:ba:99:c4:81:36:db:32:e4:8f:2b:
         b5:25:a1:47:40:94:83:4e:9b:07:21:f1:14:20:7c:31:f0:f9:
         f9:9e:f7:e0:56:4a:5a:71:20:33:4f:c6:64:b1:ad:83:88:7a:
         d0:e9:e9:bb:15:6e:58:da:3b:16:9e:b6:a6:91:06:2d:45:40:
         4b:88:30:57:2d:8c:7b:61:e7:02:b5:10:69:92:b7:b2:ac:48:
         c1:a2:39:dd:7c:e4:0d:ed:02:2d:d2:67:79:bd:5d:ff:11:7b:
         5c:5d:a8:cf:42:b7:90:86:56:9b:a0:9b:9f:37:d1:3d:a8:1f:
         bf:52:d4:a1:f0:ac:28:6a:43:5f:ef:81:b4:85:81:61:4a:89:
         0c:8d:fe:b8:1f:97:97:c7:c6:bb:d8:ec:24:51:17:e1:4a:5b:
         81:50:1f:dd:4d:92:4e:c9:c4:a7:2c:c7:4e:fc:01:ef:43:e3:
         b5:ac:7f:9a
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICANIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEE1
QUNBQzI5OTBCRDhGODY1NUMwQzcyMUJBQ0ZGMDMwQTU5RDFGQzAeFw0yMzA4MDEw
MTMwNDFaFw0yNDA3MTQwMTMwMDNaMDMxMTAvBgNVBAMTKEE3NEIxNTI5M0Y0N0ZD
MkFEMTZFMUY0Qzc5NEIwMjQ4MENDMzIzMzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDtD13lEZ3fLlRSHkDHFifrUyduwqHdShhyW4O2oWD8Cj5mToL8
pLfxKfmAVWW2KcASUaPnaq+CH/1XRCSb7U/ow6c5CZpEMGuxX2TGJl7VT2wq9mdF
0GQ5SXn290mFtOqXqy8x5sut/jD7qsVPTTQ/YUDX/PG7Oy4Ay/DsBccyi37XoLFX
ZWdYJod1e2I7ypm52eqKgn2RgvqQXbz9dem/6k+lWt4C5VBfsWM+6r8g4EO5riPK
pWos//AajpgBG07cqw5kislNjeFeIBCBEtdl4zx8d6k2h3q1NW6JFdwy570lLfnf
/hd4N44yKUoz7CvAcHrt56gqCmTfnwfGMXsbAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUp0sVKT9H/CrRbh9MeUsCSAzDIzkwHwYDVR0jBBgwFoAUClrKwpkL2PhlXAxy
G6z/AwpZ0fwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM1NC9DbHJLd3BrTDJQaGxYQXh5RzZ6X0F3cFowZncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9DbHJLd3BrTDJQaGxYQXh5RzZ6X0F3
cFowZncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzU0L3Awc1ZLVDlIX0NyUmJoOU1lVXNDU0F6REl6ay5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAPS59gwDQYJKoZIhvcNAQELBQADggEBAHsfXDKoIzL7xBx+DXwMQ4RME5z1
M3gC34kXfWHgmVEPlDXvvfilt65KcHILRf10P6fUBiUl3TUt9RrfKVEAuOAGg2di
CqBQz6HmziG60VbcupnEgTbbMuSPK7UloUdAlINOmwch8RQgfDHw+fme9+BWSlpx
IDNPxmSxrYOIetDp6bsVbljaOxaetqaRBi1FQEuIMFctjHth5wK1EGmSt7KsSMGi
Od185A3tAi3SZ3m9Xf8Re1xdqM9Ct5CGVpugm5830T2oH79S1KHwrChqQ1/vgbSF
gWFKiQyN/rgfl5fHxrvY7CRRF+FKW4FQH91Nkk7JxKcsx078Ae9D47Wsf5o=
-----END CERTIFICATE-----
Generated at Sun Jun 16 14:31:56 2024 by rpki-client on console-ams.rpki-client.org