Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/446/bEoUWlifyYrf2rL6jY6nlPZlWb4.roa
File:                     bEoUWlifyYrf2rL6jY6nlPZlWb4.roa (raw, json)
Hash identifier:          UON+lig4hCTW+5PLqUs2IZCypq7Ga52sPxxEyTjPcj0=
Subject key identifier:   6C:4A:14:5A:58:9F:C9:8A:DF:DA:B2:FA:8D:8E:A7:94:F6:65:59:BE
Certificate issuer:       /CN=93E00C1B18C6955EA04130329544B1F09BFCBFCA
Certificate serial:       21
Authority key identifier: 93:E0:0C:1B:18:C6:95:5E:A0:41:30:32:95:44:B1:F0:9B:FC:BF:CA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k-AMGxjGlV6gQTAylUSx8Jv8v8o.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/bEoUWlifyYrf2rL6jY6nlPZlWb4.roa
Signing time:             Wed 31 Jul 2024 01:32:31 +0000
ROA not before:           Wed 31 Jul 2024 01:32:31 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     9997
IP address blocks:        202.211.80.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/k-AMGxjGlV6gQTAylUSx8Jv8v8o.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/k-AMGxjGlV6gQTAylUSx8Jv8v8o.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k-AMGxjGlV6gQTAylUSx8Jv8v8o.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33 (0x21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93E00C1B18C6955EA04130329544B1F09BFCBFCA
        Validity
            Not Before: Jul 31 01:32:31 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=6C4A145A589FC98ADFDAB2FA8D8EA794F66559BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1b:f7:10:62:16:0e:69:26:0f:f4:fa:f0:6b:
                    9a:96:b3:81:8b:74:b6:f8:66:07:83:24:e2:a3:2b:
                    42:91:b6:b4:33:ad:34:e8:da:0f:39:13:67:7d:c0:
                    ad:eb:fe:52:f3:87:76:8b:79:26:28:72:a8:df:32:
                    35:fd:25:a9:27:af:19:9b:70:df:4f:d6:e2:4d:cf:
                    fd:8a:86:14:b5:66:43:cf:0c:81:7d:7a:e4:99:48:
                    e2:12:b2:9a:c9:9e:60:f1:4d:ef:5f:72:86:c8:fc:
                    0b:f6:96:ee:28:94:d7:80:21:c3:cd:e7:16:97:72:
                    e2:20:92:0d:5e:e9:99:47:47:e9:39:13:9c:25:19:
                    de:6d:7c:59:a8:21:f7:bb:de:08:64:7a:21:ca:ae:
                    02:53:dc:b6:0c:18:00:b7:5a:b0:77:02:31:42:2c:
                    3e:54:4c:db:bc:34:ce:9f:26:d2:93:41:7c:bd:74:
                    79:d3:3f:77:97:e7:ee:6e:20:c7:a4:c2:ac:b5:09:
                    3f:5d:8c:15:00:08:02:ff:58:65:ba:13:6b:10:fa:
                    46:81:c7:38:51:9c:df:17:c2:0b:6f:50:df:3a:f8:
                    13:c6:9a:ed:64:d1:40:1c:e5:75:ca:37:90:9a:9f:
                    e8:cc:09:df:07:2b:34:07:a7:22:4a:70:37:80:59:
                    33:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:4A:14:5A:58:9F:C9:8A:DF:DA:B2:FA:8D:8E:A7:94:F6:65:59:BE
            X509v3 Authority Key Identifier:
                keyid:93:E0:0C:1B:18:C6:95:5E:A0:41:30:32:95:44:B1:F0:9B:FC:BF:CA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/k-AMGxjGlV6gQTAylUSx8Jv8v8o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k-AMGxjGlV6gQTAylUSx8Jv8v8o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/bEoUWlifyYrf2rL6jY6nlPZlWb4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.211.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         87:10:4a:e0:17:c0:a3:3a:c1:91:77:a7:db:0a:f9:15:87:c6:
         a0:e2:c9:e7:c3:cc:06:f6:76:03:42:44:c3:30:42:5a:c2:a0:
         60:5f:f9:1f:64:c6:0b:86:a3:85:ca:cf:37:8f:9a:3a:4a:ea:
         1a:0b:77:1a:e6:c9:f4:0e:03:84:5f:f8:6b:84:7b:ca:72:43:
         10:cb:4b:7d:7f:e3:4a:d8:62:1d:3b:3f:69:cf:99:4f:48:9d:
         89:a0:45:57:88:50:9c:51:e0:f1:07:03:08:29:72:44:28:c5:
         52:91:2b:91:a0:f6:da:c3:ef:44:a5:e4:56:7a:51:0d:28:41:
         85:9e:54:7a:dc:11:19:e6:b3:d7:70:d2:f8:7e:a4:6c:82:d4:
         ed:33:b3:61:69:ce:58:e2:77:13:18:52:4c:a2:a4:19:59:b1:
         d6:76:92:2c:df:b4:41:e7:42:c4:6b:2d:60:12:68:6e:35:30:
         1f:f7:c0:08:14:18:ce:dc:87:17:9c:ce:71:a6:15:81:17:f3:
         98:71:25:d5:4d:87:d8:82:85:da:02:1b:0e:1c:44:02:43:9d:
         2a:3d:74:ed:0c:48:79:fb:f1:2a:09:fb:2f:1c:ba:6a:f7:2d:
         85:3a:2e:45:6c:e6:46:54:90:f2:5a:47:ef:91:b7:b6:b8:05:
         07:3c:d5:a1
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBITANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5M0Uw
MEMxQjE4QzY5NTVFQTA0MTMwMzI5NTQ0QjFGMDlCRkNCRkNBMB4XDTI0MDczMTAx
MzIzMVoXDTI1MDcxNTAxMzAwMlowMzExMC8GA1UEAxMoNkM0QTE0NUE1ODlGQzk4
QURGREFCMkZBOEQ4RUE3OTRGNjY1NTlCRTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAL8b9xBiFg5pJg/0+vBrmpazgYt0tvhmB4Mk4qMrQpG2tDOtNOja
DzkTZ33Arev+UvOHdot5JihyqN8yNf0lqSevGZtw30/W4k3P/YqGFLVmQ88MgX16
5JlI4hKymsmeYPFN719yhsj8C/aW7iiU14Ahw83nFpdy4iCSDV7pmUdH6TkTnCUZ
3m18Wagh97veCGR6IcquAlPctgwYALdasHcCMUIsPlRM27w0zp8m0pNBfL10edM/
d5fn7m4gx6TCrLUJP12MFQAIAv9YZboTaxD6RoHHOFGc3xfCC29Q3zr4E8aa7WTR
QBzldco3kJqf6MwJ3wcrNAenIkpwN4BZM60CAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBRsShRaWJ/Jit/asvqNjqeU9mVZvjAfBgNVHSMEGDAWgBST4AwbGMaVXqBBMDKV
RLHwm/y/yjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDQ2L2stQU1HeGpHbFY2Z1FUQXlsVVN4OEp2OHY4by5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2stQU1HeGpHbFY2Z1FUQXlsVVN4OEp2
OHY4by5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC80NDYvYkVvVVdsaWZ5WXJmMnJMNmpZNm5sUFpsV2I0LnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBMrTUDANBgkqhkiG9w0BAQsFAAOCAQEAhxBK4BfAozrBkXen2wr5FYfGoOLJ
58PMBvZ2A0JEwzBCWsKgYF/5H2TGC4ajhcrPN4+aOkrqGgt3GubJ9A4DhF/4a4R7
ynJDEMtLfX/jSthiHTs/ac+ZT0idiaBFV4hQnFHg8QcDCClyRCjFUpErkaD22sPv
RKXkVnpRDShBhZ5UetwRGeaz13DS+H6kbILU7TOzYWnOWOJ3ExhSTKKkGVmx1naS
LN+0QedCxGstYBJobjUwH/fACBQYztyHF5zOcaYVgRfzmHEl1U2H2IKF2gIbDhxE
AkOdKj107QxIefvxKgn7Lxy6avcthTouRWzmRlSQ8lpH75G3trgFBzzVoQ==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:26:06 2025 by rpki-client