Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/446/OJJVSrZ6R4QJrdbh2eQ0yCMkoeM.roa
File:                     OJJVSrZ6R4QJrdbh2eQ0yCMkoeM.roa (raw, json)
Hash identifier:          MPl2oKI98gV1IPfDGBEdVQBKI3nB131LIDqzNsx25gk=
Subject key identifier:   38:92:55:4A:B6:7A:47:84:09:AD:D6:E1:D9:E4:34:C8:23:24:A1:E3
Certificate issuer:       /CN=93E00C1B18C6955EA04130329544B1F09BFCBFCA
Certificate serial:       1C
Authority key identifier: 93:E0:0C:1B:18:C6:95:5E:A0:41:30:32:95:44:B1:F0:9B:FC:BF:CA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k-AMGxjGlV6gQTAylUSx8Jv8v8o.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/OJJVSrZ6R4QJrdbh2eQ0yCMkoeM.roa
Signing time:             Wed 31 Jul 2024 01:32:29 +0000
ROA not before:           Wed 31 Jul 2024 01:32:29 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     9997
IP address blocks:        61.206.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/k-AMGxjGlV6gQTAylUSx8Jv8v8o.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/k-AMGxjGlV6gQTAylUSx8Jv8v8o.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k-AMGxjGlV6gQTAylUSx8Jv8v8o.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28 (0x1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93E00C1B18C6955EA04130329544B1F09BFCBFCA
        Validity
            Not Before: Jul 31 01:32:29 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=3892554AB67A478409ADD6E1D9E434C82324A1E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:94:52:85:55:0a:5a:c6:d8:39:7f:d2:c8:79:
                    e0:b2:1b:62:7a:b3:51:1d:e4:ad:6a:08:ac:fe:02:
                    63:5f:21:06:9a:82:b3:d4:d4:f4:b0:5c:6a:ed:7a:
                    b7:e6:e3:12:44:38:96:dc:7d:4b:65:d7:38:5e:9d:
                    e9:3e:21:d5:26:b8:ea:96:ab:95:f3:58:17:db:2c:
                    70:95:c1:44:a6:9a:84:75:27:05:26:72:ce:01:cd:
                    8e:25:40:66:2f:94:52:61:01:a0:78:22:68:1c:18:
                    ce:cf:15:7d:31:68:2e:8c:01:87:58:d9:6a:7e:70:
                    17:04:3b:35:e9:7e:d4:18:46:bd:01:2f:0e:31:a9:
                    74:6f:83:d1:d0:d6:66:d0:9c:e7:68:f4:32:fc:ae:
                    7a:ef:db:d3:2d:a7:2f:cd:91:55:2b:45:12:2b:42:
                    9a:17:1f:29:ff:4d:a0:dc:c4:9d:f0:e9:3f:31:f6:
                    a6:74:61:54:13:54:76:24:40:45:ec:c4:74:74:95:
                    a9:a8:c3:9d:25:5f:39:81:2e:17:68:70:f1:b1:0a:
                    91:74:f1:23:ef:0d:06:c4:9b:0b:a0:dd:95:2d:67:
                    4d:df:78:ce:eb:6a:96:ff:92:1d:61:3f:24:57:81:
                    2c:9c:65:3d:15:86:03:59:88:11:1a:69:28:7e:5a:
                    54:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:92:55:4A:B6:7A:47:84:09:AD:D6:E1:D9:E4:34:C8:23:24:A1:E3
            X509v3 Authority Key Identifier:
                keyid:93:E0:0C:1B:18:C6:95:5E:A0:41:30:32:95:44:B1:F0:9B:FC:BF:CA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/k-AMGxjGlV6gQTAylUSx8Jv8v8o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k-AMGxjGlV6gQTAylUSx8Jv8v8o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/OJJVSrZ6R4QJrdbh2eQ0yCMkoeM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.206.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         62:b4:3f:79:1e:bd:bb:06:a4:03:0f:eb:94:5f:62:0f:19:d7:
         63:a5:08:8d:00:4b:38:10:3a:15:17:f7:88:7d:18:85:f1:85:
         7d:36:26:c7:04:e7:c1:36:3d:78:8c:08:7a:4a:c0:a2:bd:ec:
         45:a1:42:4c:02:37:4a:08:3c:c9:4b:a0:b5:89:ab:03:19:5b:
         0d:c3:49:87:40:12:f1:cf:e9:76:40:64:d4:4d:04:9a:f7:e2:
         40:15:c5:29:45:f0:48:47:97:e5:a6:19:48:93:9f:d4:d5:9b:
         7b:2c:53:11:bc:c5:18:0d:27:98:35:50:19:36:0a:fd:3c:72:
         26:7b:f4:ee:ed:07:f8:1f:f5:51:8e:c3:d9:3e:48:61:9a:36:
         b9:4e:88:3a:9a:5d:73:54:2e:69:de:b2:3e:17:94:17:27:b3:
         09:63:ee:16:2d:da:2f:5a:c3:4c:b0:f5:d9:f9:28:a7:70:00:
         30:65:90:9d:17:96:bb:9b:78:60:c5:94:e4:1c:0a:97:14:e1:
         1d:73:f2:9a:28:25:55:45:03:87:79:4d:1a:02:2a:9a:b2:7a:
         bd:07:e3:5a:b8:6f:a2:30:a2:fb:79:0f:37:ee:6a:b7:d8:52:
         7a:5f:c3:c6:b9:8a:19:a3:16:55:2d:f5:68:ac:67:b7:2d:9e:
         ad:d6:36:74
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBHDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5M0Uw
MEMxQjE4QzY5NTVFQTA0MTMwMzI5NTQ0QjFGMDlCRkNCRkNBMB4XDTI0MDczMTAx
MzIyOVoXDTI1MDcxNTAxMzAwMlowMzExMC8GA1UEAxMoMzg5MjU1NEFCNjdBNDc4
NDA5QURENkUxRDlFNDM0QzgyMzI0QTFFMzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKWUUoVVClrG2Dl/0sh54LIbYnqzUR3krWoIrP4CY18hBpqCs9TU
9LBcau16t+bjEkQ4ltx9S2XXOF6d6T4h1Sa46parlfNYF9sscJXBRKaahHUnBSZy
zgHNjiVAZi+UUmEBoHgiaBwYzs8VfTFoLowBh1jZan5wFwQ7Nel+1BhGvQEvDjGp
dG+D0dDWZtCc52j0Mvyueu/b0y2nL82RVStFEitCmhcfKf9NoNzEnfDpPzH2pnRh
VBNUdiRARezEdHSVqajDnSVfOYEuF2hw8bEKkXTxI+8NBsSbC6DdlS1nTd94zutq
lv+SHWE/JFeBLJxlPRWGA1mIERppKH5aVEkCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBQ4klVKtnpHhAmt1uHZ5DTIIySh4zAfBgNVHSMEGDAWgBST4AwbGMaVXqBBMDKV
RLHwm/y/yjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDQ2L2stQU1HeGpHbFY2Z1FUQXlsVVN4OEp2OHY4by5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2stQU1HeGpHbFY2Z1FUQXlsVVN4OEp2
OHY4by5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC80NDYvT0pKVlNyWjZSNFFKcmRiaDJlUTB5Q01rb2VNLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBD3O8DANBgkqhkiG9w0BAQsFAAOCAQEAYrQ/eR69uwakAw/rlF9iDxnXY6UI
jQBLOBA6FRf3iH0YhfGFfTYmxwTnwTY9eIwIekrAor3sRaFCTAI3Sgg8yUugtYmr
AxlbDcNJh0AS8c/pdkBk1E0EmvfiQBXFKUXwSEeX5aYZSJOf1NWbeyxTEbzFGA0n
mDVQGTYK/TxyJnv07u0H+B/1UY7D2T5IYZo2uU6IOppdc1Quad6yPheUFyezCWPu
Fi3aL1rDTLD12fkop3AAMGWQnReWu5t4YMWU5BwKlxThHXPymiglVUUDh3lNGgIq
mrJ6vQfjWrhvojCi+3kPN+5qt9hSel/DxrmKGaMWVS31aKxnty2erdY2dA==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:06:23 2025 by rpki-client