Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/PLC0scQPEF2O7oT7JL4d1dbu0Lg.roa
File:                     PLC0scQPEF2O7oT7JL4d1dbu0Lg.roa (raw, json)
Hash identifier:          P4/lh5io1e+OYBnI23K9qwzIpzANRd5CJMOGinjKz0s=
Subject key identifier:   3C:B0:B4:B1:C4:0F:10:5D:8E:EE:84:FB:24:BE:1D:D5:D6:EE:D0:B8
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0262
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/PLC0scQPEF2O7oT7JL4d1dbu0Lg.roa
Signing time:             Fri 31 May 2024 01:37:37 +0000
ROA not before:           Fri 31 May 2024 01:37:37 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     10013
IP address blocks:        61.120.208.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:58:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 610 (0x262)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: May 31 01:37:37 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=3CB0B4B1C40F105D8EEE84FB24BE1DD5D6EED0B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:38:bf:fd:a7:4c:ec:4f:bf:41:29:72:92:00:
                    67:cf:4b:9e:a4:4b:7f:e9:a4:ee:42:15:f3:b2:2a:
                    9c:d6:45:52:e8:ae:3f:fd:86:7d:db:6d:f0:a8:2b:
                    5e:af:ac:c9:56:b9:ac:4f:0d:2f:e5:c8:81:5f:b5:
                    53:be:8b:87:65:15:3c:86:56:bd:01:42:11:5e:76:
                    80:5e:bd:1b:91:71:a2:28:e1:a8:09:56:6f:68:f2:
                    5e:69:1a:5d:27:0e:3d:0d:be:14:e4:3f:5e:62:25:
                    c6:a0:8f:43:1d:96:14:89:0c:ef:92:0d:73:3c:bf:
                    7d:b5:05:da:d4:91:5f:66:95:86:7a:8a:7c:49:32:
                    f5:8a:a9:f5:4c:12:b7:51:9b:07:d8:2e:81:b8:8b:
                    ec:06:37:45:4d:f8:57:0f:77:b3:d1:a7:c2:bc:49:
                    cd:62:f0:50:19:10:a3:48:48:fc:92:72:04:5e:c9:
                    98:db:4c:ab:7e:63:4b:42:ef:4c:9f:55:88:21:1f:
                    7f:c6:39:ba:e4:9e:5f:8b:51:de:d4:0d:19:39:48:
                    b0:47:26:79:aa:6d:21:a6:59:cc:ca:1b:5d:6d:e4:
                    e6:54:11:a2:0c:2d:dc:b8:55:cd:37:dc:93:ed:33:
                    88:83:01:34:a9:1a:38:fb:68:20:c7:a2:89:88:a5:
                    f6:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:B0:B4:B1:C4:0F:10:5D:8E:EE:84:FB:24:BE:1D:D5:D6:EE:D0:B8
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/PLC0scQPEF2O7oT7JL4d1dbu0Lg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.120.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:c3:69:28:6e:1a:65:38:bf:5c:ca:43:80:d8:b3:98:d6:7f:
         98:6a:86:78:0e:12:1c:76:30:db:cc:68:96:a2:ae:04:88:7f:
         2d:2b:3b:b7:b1:58:a2:41:5e:d8:e3:42:63:92:a1:06:da:d9:
         b5:46:75:1d:a3:e0:a6:ce:f9:f3:59:31:ce:d3:b6:27:e1:8c:
         28:70:ff:e6:30:ca:08:e3:02:16:2a:21:65:74:6d:a3:35:7f:
         4e:3b:a9:a1:7f:e9:2a:10:b4:f6:0c:6e:6b:81:c2:85:92:da:
         2a:63:94:3d:77:e4:9c:14:08:c7:04:af:3c:3b:2b:40:fa:f6:
         02:6e:49:28:3d:54:4d:48:cd:8e:50:32:05:f2:71:e7:c4:70:
         66:4d:35:0d:18:3e:62:c7:3e:5b:e2:47:d7:16:d7:ff:61:f5:
         d1:3b:a2:f0:0b:0e:ef:4e:1e:16:d8:cc:2e:12:39:84:3f:ac:
         c7:d3:86:20:75:0a:a2:6b:6e:c8:dd:ed:85:fa:0d:ad:0c:64:
         44:72:38:fc:7a:5b:9f:b5:ad:84:ad:c6:fa:09:cc:ee:b4:5c:
         d2:0c:82:2c:a5:2c:9a:b3:90:8b:db:bb:e8:c5:77:0f:96:a2:
         e3:f7:80:c2:7b:e6:cb:9c:81:40:c1:37:19:8a:6c:de:d0:8f:
         5e:36:42:8b
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAmIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMEQ3
MTI1QUU0Q0VBRTEzMzVGRTVENDI5QUEwMzBDRTkwNzBERjE5QzAeFw0yNDA1MzEw
MTM3MzdaFw0yNTA1MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDNDQjBCNEIxQzQwRjEw
NUQ4RUVFODRGQjI0QkUxREQ1RDZFRUQwQjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDHOL/9p0zsT79BKXKSAGfPS56kS3/ppO5CFfOyKpzWRVLorj/9
hn3bbfCoK16vrMlWuaxPDS/lyIFftVO+i4dlFTyGVr0BQhFedoBevRuRcaIo4agJ
Vm9o8l5pGl0nDj0NvhTkP15iJcagj0MdlhSJDO+SDXM8v321BdrUkV9mlYZ6inxJ
MvWKqfVMErdRmwfYLoG4i+wGN0VN+FcPd7PRp8K8Sc1i8FAZEKNISPyScgReyZjb
TKt+Y0tC70yfVYghH3/GObrknl+LUd7UDRk5SLBHJnmqbSGmWczKG11t5OZUEaIM
Ldy4Vc033JPtM4iDATSpGjj7aCDHoomIpfYhAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUPLC0scQPEF2O7oT7JL4d1dbu0LgwHwYDVR0jBBgwFoAUDXElrkzq4TNf5dQp
qgMM6QcN8ZwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzM5NC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZRY044WncuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9EWEVscmt6cTRUTmY1ZFFwcWdNTTZR
Y044WncuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzk0L1BMQzBzY1FQRUYyTzdvVDdKTDRkMWRidTBMZy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAI9eNAwDQYJKoZIhvcNAQELBQADggEBACjDaShuGmU4v1zKQ4DYs5jWf5hq
hngOEhx2MNvMaJairgSIfy0rO7exWKJBXtjjQmOSoQba2bVGdR2j4KbO+fNZMc7T
tifhjChw/+YwygjjAhYqIWV0baM1f047qaF/6SoQtPYMbmuBwoWS2ipjlD135JwU
CMcErzw7K0D69gJuSSg9VE1IzY5QMgXycefEcGZNNQ0YPmLHPlviR9cW1/9h9dE7
ovALDu9OHhbYzC4SOYQ/rMfThiB1CqJrbsjd7YX6Da0MZERyOPx6W5+1rYStxvoJ
zO60XNIMgiylLJqzkIvbu+jFdw+WouP3gMJ75sucgUDBNxmKbN7Qj142Qos=
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:21:26 2024 by rpki-client on console-ams.rpki-client.org