Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/9uQjW-F5ezp-YjlF6qD2WjltNnQ.roa
File:                     9uQjW-F5ezp-YjlF6qD2WjltNnQ.roa (raw, json)
Hash identifier:          4HnFRJ5nMFCIDmJU/ZoATUBrxq5EC3pLLyIYXw6jAXY=
Subject key identifier:   F6:E4:23:5B:E1:79:7B:3A:7E:62:39:45:EA:A0:F6:5A:39:6D:36:74
Certificate issuer:       /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial:       0133
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/9uQjW-F5ezp-YjlF6qD2WjltNnQ.roa
Signing time:             Thu 31 Oct 2024 01:30:30 +0000
ROA not before:           Thu 31 Oct 2024 01:30:30 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     10021
IP address blocks:        203.167.32.0/20 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 307 (0x133)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
        Validity
            Not Before: Oct 31 01:30:30 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=F6E4235BE1797B3A7E623945EAA0F65A396D3674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e7:34:63:79:e2:19:3a:26:b8:05:22:f7:2c:
                    b0:14:31:8a:3c:8c:93:5b:80:9d:f8:0b:2a:7c:22:
                    cc:18:50:04:62:d3:71:d2:86:df:c1:f2:1d:cd:c9:
                    e3:a6:6b:4b:cb:e0:a3:98:a6:cd:77:62:bb:fc:f5:
                    c9:33:8f:bc:79:54:dd:37:64:61:76:50:31:04:e2:
                    8e:7d:39:a0:19:33:26:d8:9e:cd:98:f7:d3:ef:1d:
                    1e:d9:2d:2f:72:2d:d3:fa:f0:53:2c:13:d9:05:e7:
                    21:bd:19:dd:d4:12:a5:e1:3f:be:b4:d8:94:77:4c:
                    59:7c:07:d4:1a:6a:db:44:2d:19:d2:b2:59:20:8a:
                    dc:29:7b:80:87:42:fc:05:1e:7c:8b:45:65:4e:73:
                    10:1c:42:72:85:08:6c:7c:a8:dd:83:33:9b:62:5d:
                    07:e8:af:8e:a8:c2:3a:65:1f:a6:79:ba:59:16:2e:
                    10:d5:89:6c:79:79:bf:2f:da:77:5e:c3:50:0d:da:
                    94:f1:7d:75:09:33:63:ce:db:10:fb:fc:3c:e2:37:
                    1b:fd:6a:bb:61:a1:35:4d:20:32:94:e7:55:b3:60:
                    ed:03:9f:bd:2f:7d:88:8b:eb:de:17:41:aa:ef:3a:
                    80:fc:06:cc:d8:dd:ba:20:50:6c:3f:b3:9a:ba:46:
                    69:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:E4:23:5B:E1:79:7B:3A:7E:62:39:45:EA:A0:F6:5A:39:6D:36:74
            X509v3 Authority Key Identifier:
                keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/9uQjW-F5ezp-YjlF6qD2WjltNnQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.167.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a2:13:f3:2d:0a:c2:f8:c1:77:c5:e5:31:4b:8d:39:be:9d:cc:
         7e:0f:3e:0f:1f:21:b5:72:a4:2a:0f:bf:57:cb:5a:ab:3d:fa:
         84:6d:8c:a2:de:a9:9a:cd:b6:e9:a2:97:7d:14:60:50:68:95:
         db:be:3a:8c:34:19:8a:a2:87:c1:92:b7:88:1a:eb:3d:e7:57:
         92:b1:8b:11:8c:80:cb:ca:10:04:66:d0:e2:3b:d7:0b:08:f8:
         e8:15:59:47:ef:4d:af:0b:d1:c0:69:ea:50:d2:73:4d:a6:ef:
         59:1f:46:5d:da:3b:a9:26:2b:b5:07:f2:ba:35:1e:e8:b2:6a:
         35:76:64:a7:1e:10:c9:05:a3:f5:a9:be:df:1e:ce:43:0b:89:
         0b:60:d1:57:1e:ed:01:3a:af:04:0d:f8:fc:2e:0b:95:94:20:
         f6:e6:f8:b3:82:10:0c:77:f7:43:ae:21:83:7e:19:6d:93:37:
         20:43:53:43:ab:69:63:d0:65:e6:70:81:39:7b:ad:4a:ff:8d:
         c3:fd:bc:27:4b:48:77:bb:3c:aa:e4:67:54:9d:93:9d:2d:d8:
         23:d7:c2:ed:e1:06:1b:58:c5:5b:bc:e0:6f:1f:ba:02:e0:f2:
         ef:7a:4c:c0:f6:6d:d3:19:59:84:61:9e:b6:88:3a:23:ae:36:
         6c:9d:ac:cc
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICATMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDA2
MTBEQTY4RTkzRUQ1MzhBNDhBNDZDNTIxNDAyNEVENTREMDdGNjAeFw0yNDEwMzEw
MTMwMzBaFw0yNTEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEY2RTQyMzVCRTE3OTdC
M0E3RTYyMzk0NUVBQTBGNjVBMzk2RDM2NzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDe5zRjeeIZOia4BSL3LLAUMYo8jJNbgJ34Cyp8IswYUARi03HS
ht/B8h3NyeOma0vL4KOYps13Yrv89ckzj7x5VN03ZGF2UDEE4o59OaAZMybYns2Y
99PvHR7ZLS9yLdP68FMsE9kF5yG9Gd3UEqXhP7602JR3TFl8B9QaattELRnSslkg
itwpe4CHQvwFHnyLRWVOcxAcQnKFCGx8qN2DM5tiXQfor46owjplH6Z5ulkWLhDV
iWx5eb8v2ndew1AN2pTxfXUJM2PO2xD7/DziNxv9arthoTVNIDKU51WzYO0Dn70v
fYiL694XQarvOoD8BszY3bogUGw/s5q6Rmk9AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU9uQjW+F5ezp+YjlF6qD2WjltNnQwHwYDVR0jBBgwFoAUQGENpo6T7VOKSKRs
UhQCTtVNB/YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzQ2OS9RR0VOcG82VDdWT0tTS1JzVWhRQ1R0Vk5CX1kuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9RR0VOcG82VDdWT0tTS1JzVWhRQ1R0
Vk5CX1kuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNDY5Lzl1UWpXLUY1ZXpwLVlqbEY2cUQyV2psdE5uUS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBATLpyAwDQYJKoZIhvcNAQELBQADggEBAKIT8y0KwvjBd8XlMUuNOb6dzH4P
Pg8fIbVypCoPv1fLWqs9+oRtjKLeqZrNtumil30UYFBoldu+Oow0GYqih8GSt4ga
6z3nV5KxixGMgMvKEARm0OI71wsI+OgVWUfvTa8L0cBp6lDSc02m71kfRl3aO6km
K7UH8ro1HuiyajV2ZKceEMkFo/Wpvt8ezkMLiQtg0Vce7QE6rwQN+PwuC5WUIPbm
+LOCEAx390OuIYN+GW2TNyBDU0OraWPQZeZwgTl7rUr/jcP9vCdLSHe7PKrkZ1Sd
k50t2CPXwu3hBhtYxVu84G8fugLg8u96TMD2bdMZWYRhnraIOiOuNmydrMw=
-----END CERTIFICATE-----
Generated at Fri Nov 22 15:24:04 2024 by rpki-client on console-fra.rpki-client.org