Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/446/c_DX_LIIjKCKeTUjAV_nGdAroos.roa
File:                     c_DX_LIIjKCKeTUjAV_nGdAroos.roa (raw, json)
Hash identifier:          aKERxPlkbclMfJDyM+NdFk7JCriFM/27l7tF8WlI8Pw=
Subject key identifier:   73:F0:D7:FC:B2:08:8C:A0:8A:79:35:23:01:5F:E7:19:D0:2B:A2:8B
Certificate issuer:       /CN=93E00C1B18C6955EA04130329544B1F09BFCBFCA
Certificate serial:       20
Authority key identifier: 93:E0:0C:1B:18:C6:95:5E:A0:41:30:32:95:44:B1:F0:9B:FC:BF:CA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k-AMGxjGlV6gQTAylUSx8Jv8v8o.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/c_DX_LIIjKCKeTUjAV_nGdAroos.roa
Signing time:             Wed 31 Jul 2024 01:32:31 +0000
ROA not before:           Wed 31 Jul 2024 01:32:31 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     9997
IP address blocks:        123.242.232.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/k-AMGxjGlV6gQTAylUSx8Jv8v8o.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/k-AMGxjGlV6gQTAylUSx8Jv8v8o.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k-AMGxjGlV6gQTAylUSx8Jv8v8o.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32 (0x20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93E00C1B18C6955EA04130329544B1F09BFCBFCA
        Validity
            Not Before: Jul 31 01:32:31 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=73F0D7FCB2088CA08A793523015FE719D02BA28B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:07:d4:3d:34:de:6d:4c:7f:83:38:b6:7a:1e:
                    7b:d1:b2:4d:ec:87:92:78:88:9f:05:7d:68:bb:61:
                    68:d0:dc:62:b2:8c:a0:a8:74:df:d8:78:d7:1b:15:
                    a0:22:3f:1c:b6:43:34:a8:93:6a:9d:28:e2:f0:17:
                    e9:81:c0:88:ee:a5:53:02:25:48:ad:b6:f1:29:11:
                    0c:99:c8:90:b5:e6:62:2b:4f:d6:ac:96:e9:63:26:
                    df:9f:a1:e8:28:09:fd:46:e0:e3:66:35:8a:a0:e3:
                    b6:05:79:c1:98:2e:dd:6a:dc:89:fc:b9:ce:1d:73:
                    cc:dd:48:be:95:23:d4:67:8d:8a:d5:29:00:d1:5f:
                    18:ea:b8:2a:a9:8b:b4:a6:51:ee:52:ba:3d:e5:99:
                    55:2f:a4:99:20:1c:1e:90:02:bd:01:bc:9a:b2:a2:
                    43:1e:2a:ab:90:ac:8a:48:7d:e3:4b:c7:9c:b4:a9:
                    80:ba:c7:68:6a:f0:65:23:16:db:a7:dd:c3:c5:d6:
                    91:dc:5e:1f:09:7a:a9:fa:3f:4b:19:f9:c8:9b:37:
                    ba:b8:6a:00:7d:ac:da:6d:9a:f7:24:0c:67:01:68:
                    a9:a8:ee:89:80:5e:17:6c:29:8a:5e:64:25:29:e7:
                    c1:c5:9d:4a:5a:a8:e3:dc:fa:13:6a:55:40:65:f4:
                    99:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:F0:D7:FC:B2:08:8C:A0:8A:79:35:23:01:5F:E7:19:D0:2B:A2:8B
            X509v3 Authority Key Identifier:
                keyid:93:E0:0C:1B:18:C6:95:5E:A0:41:30:32:95:44:B1:F0:9B:FC:BF:CA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/k-AMGxjGlV6gQTAylUSx8Jv8v8o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k-AMGxjGlV6gQTAylUSx8Jv8v8o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/c_DX_LIIjKCKeTUjAV_nGdAroos.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.242.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8a:2b:0a:b0:bf:ca:f2:53:f0:bb:a6:16:f2:93:24:1e:8d:8b:
         1e:17:3d:24:8b:02:f3:28:7f:eb:b2:5f:1d:26:5c:e1:1c:17:
         da:89:30:c8:bd:ba:cb:7f:76:32:37:79:57:8e:40:e9:d0:d5:
         d4:f6:32:8f:cc:ab:ba:73:e3:11:17:36:48:90:d0:2a:2c:40:
         d8:3f:a5:68:a4:0a:f6:b7:23:93:b5:9d:a5:5d:68:33:7b:8d:
         80:ce:2a:5d:d5:46:9e:bc:7b:e6:b7:09:75:77:38:be:35:63:
         58:09:ad:0f:f1:70:1b:32:d6:95:74:65:bc:be:e8:ac:c3:84:
         97:61:c0:1f:2d:8d:38:3d:a5:de:aa:ad:03:84:81:d4:cc:08:
         fc:da:dc:2f:ca:4e:5c:d6:c6:f2:ea:08:20:a3:7c:3f:98:91:
         86:ba:20:09:17:35:6b:e4:c3:62:fe:cc:4b:5a:2e:e4:44:3d:
         33:5d:5c:91:ce:a5:41:3e:f2:ba:c7:2a:0c:de:82:c7:ba:93:
         d0:7f:98:1d:56:16:2a:04:30:8b:7b:a8:9c:07:d1:fd:36:8d:
         7f:1b:f0:5f:be:15:ac:44:fa:68:36:a4:da:09:dd:8c:8b:2e:
         f9:b1:dc:7c:c0:11:90:9b:f7:af:f5:41:4e:88:d4:34:10:3d:
         f4:f2:25:26
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBIDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5M0Uw
MEMxQjE4QzY5NTVFQTA0MTMwMzI5NTQ0QjFGMDlCRkNCRkNBMB4XDTI0MDczMTAx
MzIzMVoXDTI1MDcxNTAxMzAwMlowMzExMC8GA1UEAxMoNzNGMEQ3RkNCMjA4OENB
MDhBNzkzNTIzMDE1RkU3MTlEMDJCQTI4QjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMYH1D003m1Mf4M4tnoee9GyTeyHkniInwV9aLthaNDcYrKMoKh0
39h41xsVoCI/HLZDNKiTap0o4vAX6YHAiO6lUwIlSK228SkRDJnIkLXmYitP1qyW
6WMm35+h6CgJ/Ubg42Y1iqDjtgV5wZgu3Wrcify5zh1zzN1IvpUj1GeNitUpANFf
GOq4KqmLtKZR7lK6PeWZVS+kmSAcHpACvQG8mrKiQx4qq5Csikh940vHnLSpgLrH
aGrwZSMW26fdw8XWkdxeHwl6qfo/Sxn5yJs3urhqAH2s2m2a9yQMZwFoqajuiYBe
F2wpil5kJSnnwcWdSlqo49z6E2pVQGX0mZ8CAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBRz8Nf8sgiMoIp5NSMBX+cZ0CuiizAfBgNVHSMEGDAWgBST4AwbGMaVXqBBMDKV
RLHwm/y/yjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDQ2L2stQU1HeGpHbFY2Z1FUQXlsVVN4OEp2OHY4by5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2stQU1HeGpHbFY2Z1FUQXlsVVN4OEp2
OHY4by5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC80NDYvY19EWF9MSUlqS0NLZVRVakFWX25HZEFyb29zLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEA3vy6DANBgkqhkiG9w0BAQsFAAOCAQEAiisKsL/K8lPwu6YW8pMkHo2LHhc9
JIsC8yh/67JfHSZc4RwX2okwyL26y392Mjd5V45A6dDV1PYyj8yrunPjERc2SJDQ
KixA2D+laKQK9rcjk7WdpV1oM3uNgM4qXdVGnrx75rcJdXc4vjVjWAmtD/FwGzLW
lXRlvL7orMOEl2HAHy2NOD2l3qqtA4SB1MwI/NrcL8pOXNbG8uoIIKN8P5iRhrog
CRc1a+TDYv7MS1ou5EQ9M11ckc6lQT7yuscqDN6Cx7qT0H+YHVYWKgQwi3uonAfR
/TaNfxvwX74VrET6aDak2gndjIsu+bHcfMARkJv3r/VBTojUNBA99PIlJg==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:17:40 2025 by rpki-client