Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/XRcsIUIlWUORpD3hUNYG8TSKyvA.roa
File:                     XRcsIUIlWUORpD3hUNYG8TSKyvA.roa (raw, json)
Hash identifier:          yWT717MUAAI73FQdwXmA+CrUYmGsoqQF15sG+xi0avc=
Subject key identifier:   5D:17:2C:21:42:25:59:43:91:A4:3D:E1:50:D6:06:F1:34:8A:CA:F0
Certificate issuer:       /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial:       0120
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/XRcsIUIlWUORpD3hUNYG8TSKyvA.roa
Signing time:             Mon 30 Sep 2024 01:30:26 +0000
ROA not before:           Mon 30 Sep 2024 01:30:26 +0000
ROA not after:            Mon 15 Sep 2025 01:30:03 +0000
asID:                     10021
IP address blocks:        61.120.192.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 288 (0x120)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
        Validity
            Not Before: Sep 30 01:30:26 2024 GMT
            Not After : Sep 15 01:30:03 2025 GMT
        Subject: CN=5D172C214225594391A43DE150D606F1348ACAF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:fb:9f:bc:96:50:fc:07:e2:fd:47:87:5b:f1:
                    5d:bf:97:59:29:d6:94:80:dd:5c:f9:7c:e4:db:6d:
                    cb:a1:7e:38:36:84:3b:7d:b8:ff:37:9b:74:88:d3:
                    e6:25:34:db:d0:bf:db:fb:2a:19:25:80:11:9f:0a:
                    d5:a1:a7:4b:8e:56:f6:27:82:d9:65:9b:be:c8:ee:
                    dd:43:86:04:4b:46:55:8d:4c:af:9b:c4:a7:e2:45:
                    4c:db:09:0e:3e:6d:e5:80:a2:cb:27:c8:da:d5:93:
                    14:07:5b:90:a5:9c:07:22:a3:1b:f3:f4:9c:b3:f9:
                    41:b5:11:b5:df:ca:94:89:d6:bd:e7:46:55:5d:82:
                    86:3d:11:b9:a7:5c:06:f2:86:1b:9d:8d:44:fc:f2:
                    7f:78:c6:93:8f:89:f8:bb:54:11:c0:0f:8c:48:b0:
                    97:64:c1:3b:67:cb:b7:91:9b:8d:f5:39:49:d4:b6:
                    66:bf:45:c0:f4:59:ce:8b:57:ef:95:9c:c2:37:15:
                    8a:b6:ce:81:a0:93:1f:bc:00:ba:22:80:3c:d9:f3:
                    41:e7:b6:83:ab:49:e2:3e:b2:70:63:85:86:b3:27:
                    53:b4:06:ca:74:89:bb:bb:9a:60:3d:1b:0c:2f:72:
                    d3:4d:9c:df:3c:5f:78:df:1c:6c:af:4a:7f:07:d4:
                    f6:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:17:2C:21:42:25:59:43:91:A4:3D:E1:50:D6:06:F1:34:8A:CA:F0
            X509v3 Authority Key Identifier:
                keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/XRcsIUIlWUORpD3hUNYG8TSKyvA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.120.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ba:26:f8:7c:65:ce:43:09:bf:1c:82:7f:96:07:1d:8c:81:3a:
         43:b9:cb:52:8a:63:8f:b7:8b:17:a1:51:82:45:c8:a2:5a:e3:
         89:d6:c7:ee:4d:7d:9c:63:47:f1:ee:26:a6:82:57:40:25:ff:
         aa:8f:99:30:b5:c5:d0:af:e2:e1:98:2c:d4:f2:fd:62:83:5b:
         62:c3:3d:44:0e:2a:45:03:d3:cc:00:60:5b:5d:de:45:23:65:
         a4:07:13:a2:45:9f:af:37:75:f2:ec:63:f7:b8:da:49:8f:14:
         da:52:48:be:d8:d9:1e:68:25:d3:05:6f:c7:bc:63:cd:63:04:
         a0:e2:ed:b8:99:e4:ea:42:47:40:9c:70:93:e0:b8:4c:b8:4b:
         28:2a:6d:4a:df:6b:3b:ba:3b:ac:fd:70:71:13:85:09:08:1c:
         6a:bc:0a:5e:8b:ff:80:e8:5b:2d:96:7a:9e:32:04:68:95:d1:
         c4:8a:b1:ec:b4:09:bd:66:78:6d:04:c0:bf:dd:1e:7d:c6:c3:
         6f:27:a5:2d:28:ce:aa:8d:c4:8c:5c:c7:22:6e:04:7c:d8:ec:
         33:0e:15:fc:e9:bb:4d:84:2d:b5:ca:38:a3:99:fc:d3:a2:97:
         90:0e:48:7a:c4:d9:d7:b2:c2:e6:3b:61:5c:6b:1d:57:de:d4:
         27:32:f5:73
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICASAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNDA2
MTBEQTY4RTkzRUQ1MzhBNDhBNDZDNTIxNDAyNEVENTREMDdGNjAeFw0yNDA5MzAw
MTMwMjZaFw0yNTA5MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDVEMTcyQzIxNDIyNTU5
NDM5MUE0M0RFMTUwRDYwNkYxMzQ4QUNBRjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDD+5+8llD8B+L9R4db8V2/l1kp1pSA3Vz5fOTbbcuhfjg2hDt9
uP83m3SI0+YlNNvQv9v7KhklgBGfCtWhp0uOVvYngtllm77I7t1DhgRLRlWNTK+b
xKfiRUzbCQ4+beWAossnyNrVkxQHW5ClnAcioxvz9Jyz+UG1EbXfypSJ1r3nRlVd
goY9EbmnXAbyhhudjUT88n94xpOPifi7VBHAD4xIsJdkwTtny7eRm431OUnUtma/
RcD0Wc6LV++VnMI3FYq2zoGgkx+8ALoigDzZ80HntoOrSeI+snBjhYazJ1O0Bsp0
ibu7mmA9GwwvctNNnN88X3jfHGyvSn8H1PbrAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUXRcsIUIlWUORpD3hUNYG8TSKyvAwHwYDVR0jBBgwFoAUQGENpo6T7VOKSKRs
UhQCTtVNB/YwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzQ2OS9RR0VOcG82VDdWT0tTS1JzVWhRQ1R0Vk5CX1kuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9RR0VOcG82VDdWT0tTS1JzVWhRQ1R0
Vk5CX1kuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNDY5L1hSY3NJVUlsV1VPUnBEM2hVTllHOFRTS3l2QS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAQ9eMAwDQYJKoZIhvcNAQELBQADggEBALom+HxlzkMJvxyCf5YHHYyBOkO5
y1KKY4+3ixehUYJFyKJa44nWx+5NfZxjR/HuJqaCV0Al/6qPmTC1xdCv4uGYLNTy
/WKDW2LDPUQOKkUD08wAYFtd3kUjZaQHE6JFn683dfLsY/e42kmPFNpSSL7Y2R5o
JdMFb8e8Y81jBKDi7biZ5OpCR0CccJPguEy4SygqbUrfazu6O6z9cHEThQkIHGq8
Cl6L/4DoWy2Wep4yBGiV0cSKsey0Cb1meG0EwL/dHn3Gw28npS0ozqqNxIxcxyJu
BHzY7DMOFfzpu02ELbXKOKOZ/NOil5AOSHrE2deywuY7YVxrHVfe1Ccy9XM=
-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:46 2024 by rpki-client on console-ams.rpki-client.org