Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/JNWDbp7zohxAFGulNiwLi_zM0SI.roa
File:                     JNWDbp7zohxAFGulNiwLi_zM0SI.roa (raw, json)
Hash identifier:          5I0+bOd6i0rmA8D+j13ufc05r7nImtIcKV0zAXN2X+U=
Subject key identifier:   24:D5:83:6E:9E:F3:A2:1C:40:14:6B:A5:36:2C:0B:8B:FC:CC:D1:22
Certificate issuer:       /CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Certificate serial:       72
Authority key identifier: 04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/JNWDbp7zohxAFGulNiwLi_zM0SI.roa
Signing time:             Fri 01 Dec 2023 01:30:13 +0000
ROA not before:           Fri 01 Dec 2023 01:30:13 +0000
ROA not after:            Thu 14 Nov 2024 01:30:03 +0000
asID:                     2527
IP address blocks:        147.192.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Jul 2024 10:51:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114 (0x72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
        Validity
            Not Before: Dec  1 01:30:13 2023 GMT
            Not After : Nov 14 01:30:03 2024 GMT
        Subject: CN=24D5836E9EF3A21C40146BA5362C0B8BFCCCD122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d1:79:e4:5f:62:19:3f:92:d3:7e:ce:f9:d1:
                    98:49:ec:7b:55:40:42:d6:e1:c9:83:25:87:75:60:
                    2f:33:52:b1:cc:db:36:ef:f1:1c:49:f0:b5:90:59:
                    19:f6:ef:91:70:12:9e:d7:55:3e:74:25:b6:eb:ed:
                    f4:af:80:51:bf:cb:00:e3:5e:43:6b:35:dc:53:fe:
                    a9:f9:02:74:a5:8f:68:cd:b0:0d:ec:ca:69:32:7f:
                    f1:e3:1c:5a:9a:3f:8f:57:b7:d8:25:01:c6:c3:f7:
                    99:50:1b:ba:8f:13:3e:8d:c9:13:38:c1:c9:f7:da:
                    ab:58:f8:96:c0:79:6a:0a:2b:4a:ae:91:26:08:f4:
                    d9:c4:d1:b2:73:cc:08:a9:1d:16:28:65:bb:70:ce:
                    2c:89:ed:ad:5e:7d:52:7f:75:6f:4f:7a:89:37:79:
                    da:94:5c:5c:99:9e:75:05:41:9e:00:e1:84:4e:82:
                    fd:34:a0:b0:b6:4b:54:ee:a6:25:88:5e:af:f7:1b:
                    9a:b8:16:26:e9:6d:0c:f7:b9:01:64:06:b8:a6:12:
                    ec:5c:1c:61:83:c4:63:e7:4f:c1:8e:65:a0:41:ba:
                    c2:12:dc:49:ad:8a:2b:11:bb:ef:1b:81:d5:ad:76:
                    64:56:4c:6e:b9:76:47:d0:e8:97:4e:87:d0:b1:8a:
                    9e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:D5:83:6E:9E:F3:A2:1C:40:14:6B:A5:36:2C:0B:8B:FC:CC:D1:22
            X509v3 Authority Key Identifier:
                keyid:04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/JNWDbp7zohxAFGulNiwLi_zM0SI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.192.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         15:d4:dc:52:56:e9:fb:6b:12:6a:2b:a8:47:2f:06:bc:7a:9a:
         3c:5a:47:76:dd:ed:37:30:cd:d8:6c:0d:53:78:bd:e3:46:b5:
         cb:51:20:23:fa:17:fb:e9:1f:2a:fc:b5:a0:a5:7e:b1:9b:74:
         9c:f9:4e:fe:9f:2e:92:ca:c8:1a:34:e2:dc:eb:14:15:f7:66:
         8c:b3:a1:63:5e:dd:0e:d9:5f:01:43:d5:3a:d7:28:78:5e:7a:
         f5:08:bf:01:e6:16:c9:b5:68:7e:82:3c:86:9c:a1:a9:77:73:
         41:e1:08:bc:ee:62:95:00:db:01:00:59:ea:02:00:7a:cc:3d:
         c6:3d:f9:04:c4:c9:6b:a8:3a:56:eb:c9:ac:f0:0c:9a:bb:75:
         76:b5:fc:86:5f:b9:cf:59:0f:04:33:97:44:64:95:4d:b1:35:
         e0:65:c9:4b:4a:55:c4:d9:22:20:fa:0a:67:e0:3c:67:ff:bf:
         3f:2a:f5:c6:b1:dd:bf:67:4f:93:67:fa:62:63:e4:f6:58:be:
         96:4f:5d:42:1d:a9:d2:4e:e8:cc:25:55:71:a9:08:ae:d7:36:
         56:82:be:3e:3a:ae:b9:ea:13:08:ca:87:c5:5c:00:4f:27:31:
         27:f6:d2:41:fc:27:de:4f:b4:ca:23:22:d7:3e:c9:92:1f:bf:
         f8:cb:f5:1b
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIBcjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwNENB
N0YzNUFGMUE4RjUyNTc1QTlGRUZGRjIxQzRBNDcwODBEREZBMB4XDTIzMTIwMTAx
MzAxM1oXDTI0MTExNDAxMzAwM1owMzExMC8GA1UEAxMoMjRENTgzNkU5RUYzQTIx
QzQwMTQ2QkE1MzYyQzBCOEJGQ0NDRDEyMjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAL/ReeRfYhk/ktN+zvnRmEnse1VAQtbhyYMlh3VgLzNSsczbNu/x
HEnwtZBZGfbvkXASntdVPnQltuvt9K+AUb/LAONeQ2s13FP+qfkCdKWPaM2wDezK
aTJ/8eMcWpo/j1e32CUBxsP3mVAbuo8TPo3JEzjByffaq1j4lsB5agorSq6RJgj0
2cTRsnPMCKkdFihlu3DOLIntrV59Un91b096iTd52pRcXJmedQVBngDhhE6C/TSg
sLZLVO6mJYher/cbmrgWJultDPe5AWQGuKYS7FwcYYPEY+dPwY5loEG6whLcSa2K
KxG77xuB1a12ZFZMbrl2R9Dol06H0LGKniUCAwEAAaOCAiEwggIdMB0GA1UdDgQW
BBQk1YNunvOiHEAUa6U2LAuL/MzRIjAfBgNVHSMEGDAWgBQEyn81rxqPUldan+//
IcSkcIDd+jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY
oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDMvQk1wX05hOGFqMUpYV3Bfdl95SEVwSENBM2ZvLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvQk1wX05hOGFqMUpYV3Bfdl95SEVwSENB
M2ZvLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgboGCCsGAQUFBwELBIGtMIGqMGAGCCsG
AQUFBzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzQzL0pOV0RicDd6b2h4QUZHdWxOaXdMaV96TTBTSS5yb2EwRgYI
KwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRw
L2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwCTwDANBgkqhkiG9w0BAQsFAAOCAQEAFdTcUlbp+2sSaiuoRy8GvHqaPFpHdt3t
NzDN2GwNU3i940a1y1EgI/oX++kfKvy1oKV+sZt0nPlO/p8uksrIGjTi3OsUFfdm
jLOhY17dDtlfAUPVOtcoeF569Qi/AeYWybVofoI8hpyhqXdzQeEIvO5ilQDbAQBZ
6gIAesw9xj35BMTJa6g6VuvJrPAMmrt1drX8hl+5z1kPBDOXRGSVTbE14GXJS0pV
xNkiIPoKZ+A8Z/+/Pyr1xrHdv2dPk2f6YmPk9li+lk9dQh2p0k7ozCVVcakIrtc2
VoK+PjquueoTCMqHxVwATycxJ/bSQfwn3k+0yiMi1z7Jkh+/+Mv1Gw==
-----END CERTIFICATE-----
Generated at Fri Jun 28 05:29:00 2024 by rpki-client on console-ams.rpki-client.org