Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/440/o-JihmQ6i4aTgQi0hOJChf9qZ4A.roa
File:                     o-JihmQ6i4aTgQi0hOJChf9qZ4A.roa (raw, json)
Hash identifier:          k8jt0/NvSmtlY4j5V46ncsDvbds5YumERa2WG+gDVhI=
Subject key identifier:   A3:E2:62:86:64:3A:8B:86:93:81:08:B4:84:E2:42:85:FF:6A:67:80
Certificate issuer:       /CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
Certificate serial:       49
Authority key identifier: E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/o-JihmQ6i4aTgQi0hOJChf9qZ4A.roa
Signing time:             Mon 01 Jan 2024 01:30:52 +0000
ROA not before:           Mon 01 Jan 2024 01:30:52 +0000
ROA not after:            Sat 14 Dec 2024 01:30:03 +0000
asID:                     17676
IP address blocks:        61.193.160.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73 (0x49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
        Validity
            Not Before: Jan  1 01:30:52 2024 GMT
            Not After : Dec 14 01:30:03 2024 GMT
        Subject: CN=A3E26286643A8B86938108B484E24285FF6A6780
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b2:03:88:7c:21:75:f9:2c:12:b0:e0:3d:a6:
                    a6:dd:c1:4c:20:cf:d0:7e:a3:b6:aa:89:85:cf:96:
                    af:b3:45:c1:aa:2a:34:2a:96:a5:98:51:b0:e5:44:
                    36:62:a0:29:39:92:ca:cb:19:fa:01:fb:a6:c3:de:
                    19:95:1d:88:fd:0b:da:9f:47:14:14:ee:89:97:85:
                    32:46:8c:a5:ca:2f:ff:54:6f:5b:2f:af:d4:d4:3a:
                    a7:47:b6:29:91:df:d5:fc:a2:5a:92:c2:c8:39:93:
                    27:9e:77:e0:9f:58:7d:46:f9:a2:c7:7e:b3:d8:e2:
                    1c:f7:f0:32:a6:be:90:f3:07:30:36:af:26:7e:70:
                    6a:b6:4e:25:91:e1:0c:13:bc:ac:b0:6e:28:03:76:
                    07:b7:31:92:01:95:b3:59:b1:da:91:b0:af:a1:71:
                    b1:fc:9d:bb:c9:a7:a5:ae:87:1a:1c:ce:d9:b4:65:
                    c7:e4:b7:07:3e:6c:67:4f:13:34:57:cd:41:c7:b9:
                    09:a0:41:8e:a0:f6:5a:b0:2f:d1:98:19:6b:c5:f2:
                    49:a7:e3:82:6d:82:f3:ac:62:2d:13:e2:fe:be:03:
                    70:c2:9c:e6:1d:f8:9a:37:3a:dc:b7:c0:c5:50:af:
                    c2:22:01:a4:4a:bf:5b:59:33:eb:ae:29:0e:b9:f5:
                    9f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:E2:62:86:64:3A:8B:86:93:81:08:B4:84:E2:42:85:FF:6A:67:80
            X509v3 Authority Key Identifier:
                keyid:E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/o-JihmQ6i4aTgQi0hOJChf9qZ4A.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.193.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         95:9a:0f:c3:77:c8:99:73:7b:3e:74:1a:0f:69:aa:fb:53:55:
         9a:ba:23:c3:00:ff:34:8c:fa:81:6b:25:c9:e3:45:e6:6e:27:
         b4:05:0c:33:23:20:10:f1:43:de:27:f5:32:be:c9:5d:b8:f6:
         14:4c:78:37:c7:e9:1b:55:37:99:d2:cf:59:c2:70:b0:0c:b5:
         09:42:40:4a:9b:d2:47:24:4d:d7:2c:ee:e4:c0:c6:47:a5:5f:
         7d:8c:f8:66:30:93:8f:f2:2d:28:c8:5e:f9:8c:d7:d3:8e:17:
         41:a3:e8:25:bb:f0:f1:d5:19:af:38:65:0f:57:7b:1c:05:f3:
         38:04:6e:89:10:0b:9e:0a:1c:be:b5:5a:a9:0f:a7:1a:23:e4:
         11:da:b6:cc:1e:1a:c5:0c:71:2a:b9:36:61:da:ef:7a:29:61:
         bf:14:51:25:6d:c3:cc:dc:24:73:58:0a:6f:47:56:d9:11:80:
         cc:c5:d9:6f:f9:e3:e5:b5:81:39:d6:f9:db:e2:6e:37:54:f1:
         3b:2d:3a:5a:2c:6f:00:b7:cf:17:31:40:65:e2:18:8e:48:c7:
         ae:5b:ce:bf:cd:38:3e:8b:4d:f0:d7:ac:10:cb:d2:05:3a:a5:
         c6:09:df:17:9b:11:8e:ee:e1:32:a2:c4:f8:cc:b7:cb:7f:4a:
         20:e2:89:3f
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBSTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFNjIz
MzhERTMzMkM2RjRCOUUyNTk2RUU1REMzNzlBMjVFRkU1OENGMB4XDTI0MDEwMTAx
MzA1MloXDTI0MTIxNDAxMzAwM1owMzExMC8GA1UEAxMoQTNFMjYyODY2NDNBOEI4
NjkzODEwOEI0ODRFMjQyODVGRjZBNjc4MDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMWyA4h8IXX5LBKw4D2mpt3BTCDP0H6jtqqJhc+Wr7NFwaoqNCqW
pZhRsOVENmKgKTmSyssZ+gH7psPeGZUdiP0L2p9HFBTuiZeFMkaMpcov/1RvWy+v
1NQ6p0e2KZHf1fyiWpLCyDmTJ5534J9YfUb5osd+s9jiHPfwMqa+kPMHMDavJn5w
arZOJZHhDBO8rLBuKAN2B7cxkgGVs1mx2pGwr6Fxsfydu8mnpa6HGhzO2bRlx+S3
Bz5sZ08TNFfNQce5CaBBjqD2WrAv0ZgZa8XySafjgm2C86xiLRPi/r4DcMKc5h34
mjc63LfAxVCvwiIBpEq/W1kz664pDrn1n/MCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBSj4mKGZDqLhpOBCLSE4kKF/2pngDAfBgNVHSMEGDAWgBTmIzjeMyxvS54llu5d
w3miXv5YzzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDQwLzVpTTQzak1zYjB1ZUpaYnVYY041b2w3LVdNOC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzVpTTQzak1zYjB1ZUpaYnVYY041b2w3
LVdNOC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC80NDAvby1KaWhtUTZpNGFUZ1FpMGhPSkNoZjlxWjRBLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBT3BoDANBgkqhkiG9w0BAQsFAAOCAQEAlZoPw3fImXN7PnQaD2mq+1NVmroj
wwD/NIz6gWslyeNF5m4ntAUMMyMgEPFD3if1Mr7JXbj2FEx4N8fpG1U3mdLPWcJw
sAy1CUJASpvSRyRN1yzu5MDGR6VffYz4ZjCTj/ItKMhe+YzX044XQaPoJbvw8dUZ
rzhlD1d7HAXzOARuiRALngocvrVaqQ+nGiPkEdq2zB4axQxxKrk2YdrveilhvxRR
JW3DzNwkc1gKb0dW2RGAzMXZb/nj5bWBOdb52+JuN1TxOy06WixvALfPFzFAZeIY
jkjHrlvOv804PotN8NesEMvSBTqlxgnfF5sRju7hMqLE+My3y39KIOKJPw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:22 2024 by rpki-client on console-fra.rpki-client.org