Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/373/uf-jW-qAaKNKkusehJ7qqyvPhvg.roa
File:                     uf-jW-qAaKNKkusehJ7qqyvPhvg.roa (raw, json)
Hash identifier:          qQG9CJ5PzbfjZIVXBVwmzQg+gh9Metbovfkizwtuzyw=
Subject key identifier:   B9:FF:A3:5B:EA:80:68:A3:4A:92:EB:1E:84:9E:EA:AB:2B:CF:86:F8
Certificate issuer:       /CN=89CF5C2AFA5B576577351C4199018D44CDC2D6DA
Certificate serial:       35
Authority key identifier: 89:CF:5C:2A:FA:5B:57:65:77:35:1C:41:99:01:8D:44:CD:C2:D6:DA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/uf-jW-qAaKNKkusehJ7qqyvPhvg.roa
Signing time:             Sun 30 Jun 2024 01:32:32 +0000
ROA not before:           Sun 30 Jun 2024 01:32:32 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     9615
IP address blocks:        210.1.144.0/20 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53 (0x35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89CF5C2AFA5B576577351C4199018D44CDC2D6DA
        Validity
            Not Before: Jun 30 01:32:32 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=B9FFA35BEA8068A34A92EB1E849EEAAB2BCF86F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f2:9e:cb:7b:fc:8a:11:9b:39:76:66:64:db:
                    5f:7a:02:16:25:fa:43:df:f8:61:6c:34:4a:ac:6e:
                    ea:1e:38:df:8a:55:e7:1f:a2:a8:8e:6c:1d:92:75:
                    eb:d1:60:70:b5:51:6e:16:e1:d0:f5:9a:13:64:27:
                    57:a4:c9:1f:d9:b1:31:7d:5e:9a:5e:a1:cf:c8:4b:
                    d6:a9:0f:e4:4d:aa:c3:21:e1:05:31:53:6a:82:f5:
                    3f:dc:4a:42:20:d3:c9:e0:dd:7a:7a:7d:f1:f0:51:
                    58:8f:c9:e8:8f:3d:3e:63:83:b3:f7:17:5d:0b:f3:
                    02:5b:4f:7d:f9:db:04:9e:ac:81:89:c9:b4:df:27:
                    c7:0f:43:3b:62:34:81:67:9e:c2:63:2d:3a:4f:95:
                    5f:cc:f3:a2:3e:0a:b5:d4:72:66:4b:62:f0:30:80:
                    bc:8d:f3:bd:c8:f1:58:df:ea:f0:2e:60:0c:4e:1a:
                    b9:3f:d5:8b:23:79:87:eb:87:b0:8d:ed:c1:42:89:
                    84:05:5b:17:89:20:33:18:d0:e5:e8:02:a2:3e:7d:
                    fa:f4:90:cc:f1:2b:7c:fa:01:c5:5e:59:3e:64:27:
                    97:ec:2b:d4:9b:3d:ec:a2:52:20:e0:a8:98:76:00:
                    0d:48:3a:27:19:a9:cf:df:24:aa:04:43:2e:89:51:
                    7e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:FF:A3:5B:EA:80:68:A3:4A:92:EB:1E:84:9E:EA:AB:2B:CF:86:F8
            X509v3 Authority Key Identifier:
                keyid:89:CF:5C:2A:FA:5B:57:65:77:35:1C:41:99:01:8D:44:CD:C2:D6:DA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/uf-jW-qAaKNKkusehJ7qqyvPhvg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.1.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         88:fc:a1:3e:b0:f0:9c:de:45:dd:ad:3d:1e:de:01:01:0c:24:
         33:33:4e:25:be:b8:a6:ab:ad:b1:2b:03:42:50:ee:65:38:b0:
         7e:13:f0:18:ff:39:46:3b:fb:6c:92:af:30:fd:7b:89:28:e4:
         a6:93:aa:a4:f0:f1:28:e5:6b:9e:a5:07:a8:ba:cb:c6:09:f1:
         96:ed:cb:56:45:da:30:a1:90:e2:d9:4b:97:d9:21:a2:92:b9:
         66:14:7a:99:16:ef:10:b5:5e:1c:27:f6:d3:8e:9e:92:3a:1f:
         09:90:a3:36:17:5c:eb:a5:25:05:cc:01:04:89:a9:1b:bf:1a:
         f5:4f:f0:8b:85:65:f9:47:f5:52:a8:74:3c:0b:e9:5e:e7:d7:
         a6:0f:83:4a:a1:88:68:9b:60:9f:d2:16:9c:37:74:57:c8:21:
         cb:58:12:34:7e:2c:41:e1:c7:c7:11:ae:39:ed:3d:fe:dc:0a:
         67:28:4e:44:3c:f7:28:3f:15:22:1b:e4:6f:1e:0c:30:be:f1:
         b8:1b:f4:b4:24:ac:32:2f:78:be:b1:39:19:e3:db:0b:74:3c:
         5c:d1:35:d8:f2:2d:38:e4:17:72:bd:4a:7d:e8:af:e8:ec:09:
         1c:db:dc:26:9c:68:dd:c6:e4:b9:7b:ac:14:a0:56:bd:d4:76:
         da:a1:7c:d4
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBNTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4OUNG
NUMyQUZBNUI1NzY1NzczNTFDNDE5OTAxOEQ0NENEQzJENkRBMB4XDTI0MDYzMDAx
MzIzMloXDTI1MDYyNDEwNDY0NVowMzExMC8GA1UEAxMoQjlGRkEzNUJFQTgwNjhB
MzRBOTJFQjFFODQ5RUVBQUIyQkNGODZGODCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANnynst7/IoRmzl2ZmTbX3oCFiX6Q9/4YWw0Sqxu6h4434pV5x+i
qI5sHZJ169FgcLVRbhbh0PWaE2QnV6TJH9mxMX1eml6hz8hL1qkP5E2qwyHhBTFT
aoL1P9xKQiDTyeDdenp98fBRWI/J6I89PmODs/cXXQvzAltPffnbBJ6sgYnJtN8n
xw9DO2I0gWeewmMtOk+VX8zzoj4KtdRyZkti8DCAvI3zvcjxWN/q8C5gDE4auT/V
iyN5h+uHsI3twUKJhAVbF4kgMxjQ5egCoj59+vSQzPErfPoBxV5ZPmQnl+wr1Js9
7KJSIOComHYADUg6Jxmpz98kqgRDLolRfi8CAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBS5/6Nb6oBoo0qS6x6EnuqrK8+G+DAfBgNVHSMEGDAWgBSJz1wq+ltXZXc1HEGZ
AY1EzcLW2jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzczL2ljOWNLdnBiVjJWM05SeEJtUUdOUk0zQzF0by5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2ljOWNLdnBiVjJWM05SeEJtUUdOUk0z
QzF0by5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zNzMvdWYtalctcUFhS05La3VzZWhKN3FxeXZQaHZnLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBNIBkDANBgkqhkiG9w0BAQsFAAOCAQEAiPyhPrDwnN5F3a09Ht4BAQwkMzNO
Jb64pqutsSsDQlDuZTiwfhPwGP85Rjv7bJKvMP17iSjkppOqpPDxKOVrnqUHqLrL
xgnxlu3LVkXaMKGQ4tlLl9khopK5ZhR6mRbvELVeHCf2046ekjofCZCjNhdc66Ul
BcwBBImpG78a9U/wi4Vl+Uf1Uqh0PAvpXufXpg+DSqGIaJtgn9IWnDd0V8ghy1gS
NH4sQeHHxxGuOe09/twKZyhORDz3KD8VIhvkbx4MML7xuBv0tCSsMi94vrE5GePb
C3Q8XNE12PItOOQXcr1Kfeiv6OwJHNvcJpxo3cbkuXusFKBWvdR22qF81A==
-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:43 2024 by rpki-client on console-ams.rpki-client.org