Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/4zg1wuFnP13kMHnbhY3exxa-PxE.roa
File:                     4zg1wuFnP13kMHnbhY3exxa-PxE.roa (raw, json)
Hash identifier:          Hpi1X7+kSK0UmzbnVH6Y+P5Ki223eHKIKlsEYny5cVI=
Subject key identifier:   E3:38:35:C2:E1:67:3F:5D:E4:30:79:DB:85:8D:DE:C7:16:BE:3F:11
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       0121
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/4zg1wuFnP13kMHnbhY3exxa-PxE.roa
Signing time:             Fri 01 Dec 2023 01:31:56 +0000
ROA not before:           Fri 01 Dec 2023 01:31:56 +0000
ROA not after:            Thu 14 Nov 2024 01:30:03 +0000
asID:                     2527
IP address blocks:        121.101.64.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Jul 2024 10:51:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 289 (0x121)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Dec  1 01:31:56 2023 GMT
            Not After : Nov 14 01:30:03 2024 GMT
        Subject: CN=E33835C2E1673F5DE43079DB858DDEC716BE3F11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:af:39:c8:03:b4:fd:a7:52:ca:af:5f:a4:04:
                    73:9d:ae:9a:a8:e2:93:c1:f6:9b:17:00:97:f0:b3:
                    f0:56:14:7a:1f:36:7c:ea:63:28:da:a0:cf:c5:6f:
                    1b:83:b2:38:6f:60:55:fa:07:b1:e8:b1:49:ae:c8:
                    5e:3b:d7:ad:ab:9c:7d:53:df:01:5f:0d:2d:8f:98:
                    3e:7a:74:ea:9d:82:52:f2:cd:66:56:40:71:6f:ee:
                    b1:6a:cd:4f:69:f9:8d:03:4f:05:47:c3:c6:fb:1e:
                    81:3c:5f:a2:80:61:64:5f:a5:61:3c:95:ab:d8:02:
                    ae:60:63:2d:9f:b3:4e:3f:41:dd:4e:5b:ba:9c:f4:
                    80:07:71:da:b9:34:60:96:2f:aa:13:09:df:45:2e:
                    ec:15:9d:7a:48:c4:68:27:c7:b2:59:bf:50:89:43:
                    dc:79:4d:5a:27:4a:3a:e1:97:ad:cf:2a:e0:23:86:
                    a7:d2:53:59:e4:77:18:cc:24:7a:1c:c9:c6:84:1a:
                    a4:c3:39:5f:18:f5:fa:2b:57:60:45:a1:a8:67:28:
                    23:16:66:66:45:7a:06:96:d1:14:bc:fd:b2:29:8e:
                    9d:dd:00:ac:7b:cc:65:1a:89:f7:d2:e7:1e:3f:4d:
                    9c:5e:49:db:17:01:6d:75:17:6c:94:fe:dc:2c:9b:
                    9b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:38:35:C2:E1:67:3F:5D:E4:30:79:DB:85:8D:DE:C7:16:BE:3F:11
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/4zg1wuFnP13kMHnbhY3exxa-PxE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.101.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         10:63:3a:93:e2:3e:f6:a5:fd:ce:f4:0f:d4:0c:a4:d6:7d:fe:
         8e:3b:6b:ed:54:72:00:e2:a1:fd:82:7e:5c:58:17:8b:dd:cf:
         39:cb:34:64:71:47:ae:1a:95:e7:07:7d:90:22:50:70:92:46:
         3c:92:d7:d9:88:6f:e6:23:65:8f:35:ed:92:e7:69:83:44:39:
         f2:ec:b6:b4:5e:33:ce:31:ad:95:55:86:0b:a5:30:aa:11:5c:
         1f:91:8b:bd:54:c2:d0:0d:d3:3a:93:58:3d:e7:7b:a5:ee:15:
         4f:e4:3a:b8:3b:53:15:b2:af:07:3b:73:c2:ca:4b:e3:a6:c5:
         70:65:d0:95:5c:1a:fc:45:43:7a:be:65:f2:30:ca:cc:86:2e:
         26:17:9e:d3:37:1e:f7:7e:a3:6c:62:39:bb:ec:d2:92:4f:d8:
         42:0b:76:92:74:29:cb:eb:3f:f6:c0:bf:a0:ea:a1:76:18:63:
         5f:e9:ae:6c:ed:28:7f:66:30:21:91:b9:45:c1:e5:95:d0:b8:
         62:8e:ac:b7:fa:df:ee:c7:15:7a:ec:55:89:46:7f:5a:15:75:
         66:a3:0f:0f:54:50:c6:b2:fa:21:c5:44:de:25:44:61:0e:3f:
         ba:99:93:08:b0:0d:82:dd:a6:e2:5a:6b:29:23:a8:07:fe:b0:
         5e:ac:16:c5
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgICASEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDk1
QTE4MkZBMThENDU4MjMzMjg0QUE4REM4OEJEMDc1RTVENzAyRDAeFw0yMzEyMDEw
MTMxNTZaFw0yNDExMTQwMTMwMDNaMDMxMTAvBgNVBAMTKEUzMzgzNUMyRTE2NzNG
NURFNDMwNzlEQjg1OERERUM3MTZCRTNGMTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDOrznIA7T9p1LKr1+kBHOdrpqo4pPB9psXAJfws/BWFHofNnzq
YyjaoM/FbxuDsjhvYFX6B7HosUmuyF47162rnH1T3wFfDS2PmD56dOqdglLyzWZW
QHFv7rFqzU9p+Y0DTwVHw8b7HoE8X6KAYWRfpWE8lavYAq5gYy2fs04/Qd1OW7qc
9IAHcdq5NGCWL6oTCd9FLuwVnXpIxGgnx7JZv1CJQ9x5TVonSjrhl63PKuAjhqfS
U1nkdxjMJHocycaEGqTDOV8Y9forV2BFoahnKCMWZmZFegaW0RS8/bIpjp3dAKx7
zGUaiffS5x4/TZxeSdsXAW11F2yU/twsm5t7AgMBAAGjggIiMIICHjAdBgNVHQ4E
FgQU4zg1wuFnP13kMHnbhY3exxa+PxEwHwYDVR0jBBgwFoAUCVoYL6GNRYIzKEqo
3Ii9B15dcC0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg
WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzQzL0NWb1lMNkdOUllJektFcW8zSWk5QjE1ZGNDMC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0NWb1lMNkdOUllJektFcW8zSWk5QjE1
ZGNDMC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG6BggrBgEFBQcBCwSBrTCBqjBgBggr
BgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC80My80emcxd3VGblAxM2tNSG5iaFkzZXh4YS1QeEUucm9hMEYG
CCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJk
cC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQGeWVAMA0GCSqGSIb3DQEBCwUAA4IBAQAQYzqT4j72pf3O9A/UDKTWff6OO2vt
VHIA4qH9gn5cWBeL3c85yzRkcUeuGpXnB32QIlBwkkY8ktfZiG/mI2WPNe2S52mD
RDny7La0XjPOMa2VVYYLpTCqEVwfkYu9VMLQDdM6k1g953ul7hVP5Dq4O1MVsq8H
O3PCykvjpsVwZdCVXBr8RUN6vmXyMMrMhi4mF57TNx73fqNsYjm77NKST9hCC3aS
dCnL6z/2wL+g6qF2GGNf6a5s7Sh/ZjAhkblFweWV0Lhijqy3+t/uxxV67FWJRn9a
FXVmow8PVFDGsvohxUTeJURhDj+6mZMIsA2C3abiWmspI6gH/rBerBbF
-----END CERTIFICATE-----
Generated at Fri Jun 28 05:29:00 2024 by rpki-client on console-ams.rpki-client.org