Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/BgJP1i3yHikhsaH2VTK9n9IOV70.roa
File:                     BgJP1i3yHikhsaH2VTK9n9IOV70.roa (raw, json)
Hash identifier:          jtOTamzCjjHLqRUdUFdH5ub97dnumckbnk/w9Bj9/O0=
Subject key identifier:   06:02:4F:D6:2D:F2:1E:29:21:B1:A1:F6:55:32:BD:9F:D2:0E:57:BD
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       0152
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BgJP1i3yHikhsaH2VTK9n9IOV70.roa
Signing time:             Thu 31 Oct 2024 01:30:49 +0000
ROA not before:           Thu 31 Oct 2024 01:30:49 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     2527
IP address blocks:        210.156.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 338 (0x152)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Oct 31 01:30:49 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=06024FD62DF21E2921B1A1F65532BD9FD20E57BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:cd:fa:e3:dc:b7:26:0c:51:78:74:6f:99:5e:
                    ef:17:95:e0:f6:30:93:6b:c7:c4:c9:c8:45:77:74:
                    07:81:22:a9:73:05:af:4b:37:a4:2b:10:08:9b:d3:
                    83:e8:ca:ac:b8:7a:f8:05:95:60:31:bc:95:99:9d:
                    23:4e:c6:12:55:33:3b:36:07:cb:22:bd:21:42:b4:
                    21:9e:f1:79:2e:53:c9:c7:44:50:2f:0c:85:22:da:
                    8f:07:5c:dc:53:03:d8:a3:76:3f:05:b2:db:86:6a:
                    1c:ad:5e:9b:a5:2e:96:1e:78:84:ed:85:d1:75:24:
                    82:b9:e8:2f:90:c8:ae:d8:8a:bd:c3:2f:fd:4c:69:
                    55:94:d8:e2:a6:e7:36:0b:73:2a:49:f5:85:eb:63:
                    c0:50:52:a8:63:a9:dd:05:ee:ca:84:97:c0:39:89:
                    37:5f:a8:12:8a:63:7f:64:55:3e:91:72:01:c3:3a:
                    50:6c:02:b8:2b:de:08:94:56:f7:6d:b8:ea:17:7a:
                    ec:bf:06:49:d1:32:b6:fb:99:36:3b:6a:17:a6:9e:
                    bc:93:ca:a5:e6:ad:a2:16:43:fa:c5:cc:65:c1:55:
                    ed:6b:99:76:c7:00:28:ef:27:e2:77:20:5c:00:61:
                    34:9d:73:f6:89:66:49:13:48:cc:15:de:27:44:15:
                    fc:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:02:4F:D6:2D:F2:1E:29:21:B1:A1:F6:55:32:BD:9F:D2:0E:57:BD
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BgJP1i3yHikhsaH2VTK9n9IOV70.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.156.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         05:39:91:96:76:c6:d4:49:71:83:90:fb:36:21:4d:5e:30:da:
         c6:c7:43:2f:4c:e3:a2:ad:1b:45:6e:05:ca:03:ef:65:e6:3e:
         1b:e1:00:9c:10:a7:d0:97:97:f2:e9:f6:63:e1:a8:76:3a:45:
         91:72:9c:98:42:9f:8c:66:2e:ab:6e:ee:48:a1:cf:ff:44:09:
         d6:d4:22:c5:50:2d:4c:4e:cc:66:1d:cf:af:44:e5:bd:b5:1b:
         5c:71:ce:52:fe:70:9f:80:17:dd:22:fb:66:a5:1e:25:f2:1e:
         ff:9a:e1:7f:51:9a:e6:48:ee:f5:e4:34:c1:74:c1:5e:8e:c4:
         1b:d9:cf:16:d3:37:35:d9:99:11:0e:26:71:2c:bc:9c:e0:07:
         be:58:92:92:28:7b:44:83:09:e6:d3:32:fa:08:74:97:80:8e:
         b3:7e:70:61:8d:20:2d:38:ef:cd:54:97:27:40:6e:f5:1c:3c:
         a8:25:8e:c2:c6:77:43:0a:09:3a:d2:e8:df:6c:b2:44:1b:25:
         9d:9c:68:e9:3b:a4:3a:82:c4:8c:b9:cb:bd:77:43:dd:98:1e:
         12:03:25:ec:fc:10:db:39:9e:37:23:7f:07:b9:6a:2b:6e:65:
         05:4e:91:e9:41:1f:a4:d1:3d:a9:5f:71:bd:80:3b:55:46:64:
         4c:ab:95:e8
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgICAVIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDk1
QTE4MkZBMThENDU4MjMzMjg0QUE4REM4OEJEMDc1RTVENzAyRDAeFw0yNDEwMzEw
MTMwNDlaFw0yNTEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDA2MDI0RkQ2MkRGMjFF
MjkyMUIxQTFGNjU1MzJCRDlGRDIwRTU3QkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD1zfrj3LcmDFF4dG+ZXu8XleD2MJNrx8TJyEV3dAeBIqlzBa9L
N6QrEAib04Poyqy4evgFlWAxvJWZnSNOxhJVMzs2B8sivSFCtCGe8XkuU8nHRFAv
DIUi2o8HXNxTA9ijdj8FstuGahytXpulLpYeeITthdF1JIK56C+QyK7Yir3DL/1M
aVWU2OKm5zYLcypJ9YXrY8BQUqhjqd0F7sqEl8A5iTdfqBKKY39kVT6RcgHDOlBs
Argr3giUVvdtuOoXeuy/BknRMrb7mTY7ahemnryTyqXmraIWQ/rFzGXBVe1rmXbH
ACjvJ+J3IFwAYTSdc/aJZkkTSMwV3idEFfzhAgMBAAGjggIiMIICHjAdBgNVHQ4E
FgQUBgJP1i3yHikhsaH2VTK9n9IOV70wHwYDVR0jBBgwFoAUCVoYL6GNRYIzKEqo
3Ii9B15dcC0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg
WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzQzL0NWb1lMNkdOUllJektFcW8zSWk5QjE1ZGNDMC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0NWb1lMNkdOUllJektFcW8zSWk5QjE1
ZGNDMC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG6BggrBgEFBQcBCwSBrTCBqjBgBggr
BgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC80My9CZ0pQMWkzeUhpa2hzYUgyVlRLOW45SU9WNzAucm9hMEYG
CCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJk
cC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQE0pygMA0GCSqGSIb3DQEBCwUAA4IBAQAFOZGWdsbUSXGDkPs2IU1eMNrGx0Mv
TOOirRtFbgXKA+9l5j4b4QCcEKfQl5fy6fZj4ah2OkWRcpyYQp+MZi6rbu5Ioc//
RAnW1CLFUC1MTsxmHc+vROW9tRtccc5S/nCfgBfdIvtmpR4l8h7/muF/UZrmSO71
5DTBdMFejsQb2c8W0zc12ZkRDiZxLLyc4Ae+WJKSKHtEgwnm0zL6CHSXgI6zfnBh
jSAtOO/NVJcnQG71HDyoJY7CxndDCgk60ujfbLJEGyWdnGjpO6Q6gsSMucu9d0Pd
mB4SAyXs/BDbOZ43I38HuWorbmUFTpHpQR+k0T2pX3G9gDtVRmRMq5Xo
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:20:40 2025 by rpki-client