Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/446/ICQItrI7FUG_wlYRpBua9FQ-sLY.roa
File:                     ICQItrI7FUG_wlYRpBua9FQ-sLY.roa (raw, json)
Hash identifier:          w9AAIkEwGA8sRuRfwE6ardUlxHa30ji+RD2mqhnvlYI=
Subject key identifier:   20:24:08:B6:B2:3B:15:41:BF:C2:56:11:A4:1B:9A:F4:54:3E:B0:B6
Certificate issuer:       /CN=93E00C1B18C6955EA04130329544B1F09BFCBFCA
Certificate serial:       24
Authority key identifier: 93:E0:0C:1B:18:C6:95:5E:A0:41:30:32:95:44:B1:F0:9B:FC:BF:CA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k-AMGxjGlV6gQTAylUSx8Jv8v8o.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/ICQItrI7FUG_wlYRpBua9FQ-sLY.roa
Signing time:             Wed 31 Jul 2024 01:32:33 +0000
ROA not before:           Wed 31 Jul 2024 01:32:33 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     9997
IP address blocks:        220.219.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/k-AMGxjGlV6gQTAylUSx8Jv8v8o.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/k-AMGxjGlV6gQTAylUSx8Jv8v8o.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k-AMGxjGlV6gQTAylUSx8Jv8v8o.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36 (0x24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93E00C1B18C6955EA04130329544B1F09BFCBFCA
        Validity
            Not Before: Jul 31 01:32:33 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=202408B6B23B1541BFC25611A41B9AF4543EB0B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:0d:1c:c3:1f:02:1f:76:02:48:57:a7:b0:01:
                    e5:2a:a9:1f:65:c7:34:30:e4:29:a0:c1:c2:d8:13:
                    37:ad:73:2f:44:97:9e:45:ce:50:e2:55:9c:70:cc:
                    d6:a4:9f:34:29:cd:0b:03:47:a9:f3:25:09:8c:60:
                    af:a1:29:1f:45:64:4f:c9:10:05:b8:20:96:55:70:
                    78:4a:1f:41:00:03:10:0f:e1:cd:83:3e:33:9a:17:
                    49:39:8e:83:85:70:a3:40:a7:79:11:98:af:1d:9c:
                    2e:40:78:82:9a:af:42:5f:22:75:4d:4f:dd:f3:6f:
                    d9:9d:a8:97:f1:b3:98:6f:90:89:58:a8:f4:d3:56:
                    09:49:52:b8:d5:b8:9c:55:87:92:36:20:1a:78:f6:
                    65:a2:3c:06:95:71:f4:ed:13:58:19:b6:77:6f:3e:
                    b0:75:b0:ae:0f:4e:a3:a4:7a:31:56:f8:08:d8:9b:
                    bb:ee:0c:cf:57:4d:ba:0d:94:a1:fa:1d:e1:20:a6:
                    31:36:69:28:32:02:71:21:8b:63:18:07:ba:3a:d5:
                    2c:b8:07:7b:73:9a:98:a3:ea:01:55:7c:43:aa:c4:
                    ef:53:7e:81:19:3c:6d:4e:cd:63:cf:c8:e6:4c:e2:
                    55:c2:91:5a:0d:9c:b5:26:9a:ae:bb:66:84:f2:95:
                    86:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:24:08:B6:B2:3B:15:41:BF:C2:56:11:A4:1B:9A:F4:54:3E:B0:B6
            X509v3 Authority Key Identifier:
                keyid:93:E0:0C:1B:18:C6:95:5E:A0:41:30:32:95:44:B1:F0:9B:FC:BF:CA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/k-AMGxjGlV6gQTAylUSx8Jv8v8o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k-AMGxjGlV6gQTAylUSx8Jv8v8o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/ICQItrI7FUG_wlYRpBua9FQ-sLY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.219.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         05:4f:be:b9:e1:29:b5:fd:6c:3f:a5:e3:da:91:97:e7:c4:a9:
         a1:a9:ef:70:0f:08:ab:c2:4e:e4:f5:9b:5e:f6:11:5b:32:5a:
         53:cf:ce:cb:2d:4d:63:d7:07:49:16:83:19:90:52:20:e9:ad:
         e2:c7:99:2a:9a:c2:91:ff:c4:47:2c:d9:fc:ee:d0:9b:e0:d5:
         b8:2f:3d:2b:30:40:da:65:bf:19:db:6b:69:25:72:de:16:45:
         d2:81:37:5b:92:fd:56:bc:36:86:f5:7d:92:96:50:37:cd:b3:
         43:87:c3:13:86:ca:e3:cb:d6:0f:4b:d9:b0:5e:88:4a:1a:03:
         1f:25:f4:af:99:8d:76:98:d3:87:39:82:e3:32:50:43:49:65:
         79:ed:0e:68:69:2a:a9:08:65:0c:b9:72:63:5f:84:a2:98:15:
         97:cd:bc:93:16:d7:a9:5b:9f:5c:70:e0:40:24:44:40:b9:95:
         a9:10:4f:9d:f1:e5:58:2a:9a:8c:2d:b7:d1:07:97:2d:7e:4b:
         4a:30:91:47:89:4c:4a:c1:b1:87:58:4d:7b:69:6d:8c:ae:6b:
         41:30:5d:26:23:e9:46:c9:80:98:a6:8e:79:be:04:b2:a3:85:
         2e:4c:86:5b:35:7f:97:ce:7a:0e:ec:85:31:eb:00:c0:67:ea:
         9d:b2:80:d0
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIBJDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5M0Uw
MEMxQjE4QzY5NTVFQTA0MTMwMzI5NTQ0QjFGMDlCRkNCRkNBMB4XDTI0MDczMTAx
MzIzM1oXDTI1MDcxNTAxMzAwMlowMzExMC8GA1UEAxMoMjAyNDA4QjZCMjNCMTU0
MUJGQzI1NjExQTQxQjlBRjQ1NDNFQjBCNjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOgNHMMfAh92AkhXp7AB5SqpH2XHNDDkKaDBwtgTN61zL0SXnkXO
UOJVnHDM1qSfNCnNCwNHqfMlCYxgr6EpH0VkT8kQBbggllVweEofQQADEA/hzYM+
M5oXSTmOg4Vwo0CneRGYrx2cLkB4gpqvQl8idU1P3fNv2Z2ol/GzmG+QiVio9NNW
CUlSuNW4nFWHkjYgGnj2ZaI8BpVx9O0TWBm2d28+sHWwrg9Oo6R6MVb4CNibu+4M
z1dNug2Uofod4SCmMTZpKDICcSGLYxgHujrVLLgHe3OamKPqAVV8Q6rE71N+gRk8
bU7NY8/I5kziVcKRWg2ctSaarrtmhPKVhp8CAwEAAaOCAiMwggIfMB0GA1UdDgQW
BBQgJAi2sjsVQb/CVhGkG5r0VD6wtjAfBgNVHSMEGDAWgBST4AwbGMaVXqBBMDKV
RLHwm/y/yjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDQ2L2stQU1HeGpHbFY2Z1FUQXlsVVN4OEp2OHY4by5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2stQU1HeGpHbFY2Z1FUQXlsVVN4OEp2
OHY4by5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC80NDYvSUNRSXRySTdGVUdfd2xZUnBCdWE5RlEtc0xZLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEw
BQMDANzbMA0GCSqGSIb3DQEBCwUAA4IBAQAFT7654Sm1/Ww/pePakZfnxKmhqe9w
Dwirwk7k9Zte9hFbMlpTz87LLU1j1wdJFoMZkFIg6a3ix5kqmsKR/8RHLNn87tCb
4NW4Lz0rMEDaZb8Z22tpJXLeFkXSgTdbkv1WvDaG9X2SllA3zbNDh8MThsrjy9YP
S9mwXohKGgMfJfSvmY12mNOHOYLjMlBDSWV57Q5oaSqpCGUMuXJjX4SimBWXzbyT
FtepW59ccOBAJERAuZWpEE+d8eVYKpqMLbfRB5ctfktKMJFHiUxKwbGHWE17aW2M
rmtBMF0mI+lGyYCYpo55vgSyo4UuTIZbNX+XznoO7IUx6wDAZ+qdsoDQ
-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:14 2024 by rpki-client on console-fra.rpki-client.org