Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/454/emlqbRf3nY63QjhyJuj94cnAFgE.roa
File:                     emlqbRf3nY63QjhyJuj94cnAFgE.roa (raw, json)
Hash identifier:          9zp6cTnnoqDVsIwYs56sWNN2L7AcTIi3K6am13qL9g0=
Subject key identifier:   7A:69:6A:6D:17:F7:9D:8E:B7:42:38:72:26:E8:FD:E1:C9:C0:16:01
Certificate issuer:       /CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
Certificate serial:       2B
Authority key identifier: AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/emlqbRf3nY63QjhyJuj94cnAFgE.roa
Signing time:             Fri 29 Sep 2023 06:36:56 +0000
ROA not before:           Fri 29 Sep 2023 06:36:56 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     10000
IP address blocks:        203.170.32.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43 (0x2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
        Validity
            Not Before: Sep 29 06:36:56 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=7A696A6D17F79D8EB742387226E8FDE1C9C01601
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:2c:56:33:91:f7:32:91:37:45:dc:d9:c5:ca:
                    c7:cb:cb:1d:75:dc:5b:23:4e:4f:e7:c2:a4:26:dc:
                    af:8f:d1:bd:e1:1e:ab:3a:1c:3f:9c:2c:2f:98:7c:
                    55:ec:04:d4:98:cb:39:70:20:ac:94:a1:e0:2c:bd:
                    21:8b:b2:02:ee:1b:66:70:0e:c9:bc:22:ab:1e:ed:
                    98:19:f4:a6:e0:f8:3a:87:09:78:b1:fd:57:60:9f:
                    49:c1:95:04:38:f9:5c:a3:88:48:19:9f:7b:93:73:
                    51:78:dd:ee:12:b8:23:1d:d8:07:4b:14:7a:53:86:
                    a9:aa:c2:14:59:61:72:cc:b8:8c:04:07:5b:ea:97:
                    ee:18:7e:5e:cb:d8:16:1a:39:8d:95:68:c3:88:8b:
                    b2:30:74:be:3d:2b:7a:60:56:b4:08:f6:5a:1f:b3:
                    a8:1e:9e:33:76:ca:9f:b2:02:3b:64:3e:ac:f7:36:
                    c2:4e:ce:e0:23:13:9b:8b:95:a0:6c:72:d2:80:f0:
                    30:f9:63:a5:82:1e:b9:0e:b6:cb:a6:43:a6:45:99:
                    fb:db:dd:42:f6:43:9d:b1:12:ff:6c:d0:9b:50:fd:
                    6d:09:57:ab:68:ec:d7:d4:23:36:6f:21:28:ad:65:
                    6e:b9:5e:fb:82:d2:c4:42:76:11:c3:6a:8c:30:ec:
                    d9:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:69:6A:6D:17:F7:9D:8E:B7:42:38:72:26:E8:FD:E1:C9:C0:16:01
            X509v3 Authority Key Identifier:
                keyid:AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/emlqbRf3nY63QjhyJuj94cnAFgE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.170.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         79:90:26:01:15:1c:9f:1c:10:b5:05:7b:ff:6a:80:97:a9:cc:
         7f:69:6c:e4:c1:39:18:4d:d6:83:1b:7f:d6:8e:4b:60:17:c5:
         1d:0d:74:00:1e:e5:f6:42:a8:d6:16:19:e2:f5:ef:06:c8:d6:
         f5:9f:f8:4c:2e:6c:04:5a:56:2e:9b:8d:5b:c6:c6:4b:2a:b5:
         20:f0:7b:04:6a:a1:21:21:26:8c:1b:0a:a0:fd:df:a9:38:18:
         c3:05:94:eb:69:ac:ea:d0:74:9d:10:c2:2d:c7:0e:03:18:65:
         a2:40:8e:af:ee:5e:c1:f6:d6:fe:67:3e:43:a9:d2:dd:84:cc:
         d9:cf:bc:2f:57:e6:13:25:28:b2:a7:21:79:cc:44:b4:9c:e7:
         7a:0a:18:ba:74:0a:c5:fe:61:79:e0:0b:f6:5f:1f:45:f7:96:
         f9:92:60:0b:d0:2a:73:fd:a8:82:3e:7f:db:0d:f6:cc:c2:dc:
         c4:ac:ef:98:8d:2e:25:22:fd:c5:0e:a0:c1:1b:c4:41:e2:22:
         f1:68:08:73:21:b7:80:28:0b:20:a6:49:9b:71:b1:eb:37:f6:
         c5:ec:e3:47:f8:a5:cc:62:c0:35:85:84:25:ae:63:d5:b9:4e:
         8e:a5:ab:a0:46:eb:06:48:b2:e4:ec:07:e2:d8:41:4f:d6:df:
         83:07:87:a2
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBKzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBRDQ3
NDFGMDM0OUZCQzE1QTcwOEUyOEEyQ0UzMDc5MDZDQUM1REUwMB4XDTIzMDkyOTA2
MzY1NloXDTI0MDkxNDAxMzAwM1owMzExMC8GA1UEAxMoN0E2OTZBNkQxN0Y3OUQ4
RUI3NDIzODcyMjZFOEZERTFDOUMwMTYwMTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANQsVjOR9zKRN0Xc2cXKx8vLHXXcWyNOT+fCpCbcr4/RveEeqzoc
P5wsL5h8VewE1JjLOXAgrJSh4Cy9IYuyAu4bZnAOybwiqx7tmBn0puD4OocJeLH9
V2CfScGVBDj5XKOISBmfe5NzUXjd7hK4Ix3YB0sUelOGqarCFFlhcsy4jAQHW+qX
7hh+XsvYFho5jZVow4iLsjB0vj0remBWtAj2Wh+zqB6eM3bKn7ICO2Q+rPc2wk7O
4CMTm4uVoGxy0oDwMPljpYIeuQ62y6ZDpkWZ+9vdQvZDnbES/2zQm1D9bQlXq2js
19QjNm8hKK1lbrle+4LSxEJ2EcNqjDDs2dcCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBR6aWptF/edjrdCOHIm6P3hycAWATAfBgNVHSMEGDAWgBStR0HwNJ+8FacI4oos
4weQbKxd4DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDU0L3JVZEI4RFNmdkJXbkNPS0tMT01Ia0d5c1hlQS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3JVZEI4RFNmdkJXbkNPS0tMT01Ia0d5
c1hlQS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC80NTQvZW1scWJSZjNuWTYzUWpoeUp1ajk0Y25BRmdFLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBMuqIDANBgkqhkiG9w0BAQsFAAOCAQEAeZAmARUcnxwQtQV7/2qAl6nMf2ls
5ME5GE3Wgxt/1o5LYBfFHQ10AB7l9kKo1hYZ4vXvBsjW9Z/4TC5sBFpWLpuNW8bG
Syq1IPB7BGqhISEmjBsKoP3fqTgYwwWU62ms6tB0nRDCLccOAxhlokCOr+5ewfbW
/mc+Q6nS3YTM2c+8L1fmEyUosqchecxEtJznegoYunQKxf5heeAL9l8fRfeW+ZJg
C9Aqc/2ogj5/2w32zMLcxKzvmI0uJSL9xQ6gwRvEQeIi8WgIcyG3gCgLIKZJm3Gx
6zf2xezjR/ilzGLANYWEJa5j1blOjqWroEbrBkiy5OwH4thBT9bfgweHog==
-----END CERTIFICATE-----
Generated at Thu May 30 03:08:54 2024 by rpki-client on console-fra.rpki-client.org