Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/vm9FfAKtvOeRC1dCZWpnDrBczGw.roa
File:                     vm9FfAKtvOeRC1dCZWpnDrBczGw.roa (raw, json)
Hash identifier:          Z1v4zSmagO5/CvcTXbG5l8d0mWhSHPOhpozhkDSA3zk=
Subject key identifier:   BE:6F:45:7C:02:AD:BC:E7:91:0B:57:42:65:6A:67:0E:B0:5C:CC:6C
Certificate issuer:       /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial:       19
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/vm9FfAKtvOeRC1dCZWpnDrBczGw.roa
Signing time:             Wed 04 Oct 2023 02:42:47 +0000
ROA not before:           Wed 04 Oct 2023 02:42:47 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     4685
IP address blocks:        211.132.32.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25 (0x19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
        Validity
            Not Before: Oct  4 02:42:47 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=BE6F457C02ADBCE7910B5742656A670EB05CCC6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ee:c7:ac:cc:af:d9:fe:d9:5c:74:14:a1:28:
                    94:8a:22:5e:b7:b0:7a:41:03:9d:61:73:c3:71:28:
                    72:30:0a:ac:56:2b:00:7d:3e:68:ca:3f:42:fe:8c:
                    6c:98:fc:28:3a:6a:cb:c6:b4:ca:1b:25:b4:28:d7:
                    7d:9e:e6:d1:6c:ad:2d:14:01:6a:0e:0e:14:20:94:
                    81:56:d9:36:d7:94:58:a2:c4:c8:27:a6:d1:23:f5:
                    58:d0:b8:3a:95:bc:1b:9a:7d:b9:17:35:b9:ab:22:
                    92:de:23:9a:8b:f3:30:a8:fa:b5:4a:ff:aa:a3:48:
                    63:1d:db:8f:65:9f:93:68:e9:57:c8:56:70:9f:16:
                    d2:6e:ab:c8:33:c7:f2:98:70:c9:98:be:4d:69:e9:
                    70:81:0a:c1:f5:76:dd:31:59:da:02:33:c2:b5:26:
                    83:3d:08:d1:66:ab:f0:86:83:96:c0:92:0f:c2:88:
                    4b:ac:61:91:b0:9b:d6:ec:77:39:2f:11:8b:7d:52:
                    b1:2b:93:a8:02:64:2c:68:63:93:5c:b8:e2:3c:11:
                    ff:25:42:11:09:df:34:5a:4e:3f:67:4c:e0:ce:62:
                    cb:7f:28:ac:0c:6b:7a:a5:45:e9:e8:e0:3e:23:92:
                    2e:0c:9c:b5:83:00:ad:b7:f4:f6:02:0f:32:06:36:
                    e2:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:6F:45:7C:02:AD:BC:E7:91:0B:57:42:65:6A:67:0E:B0:5C:CC:6C
            X509v3 Authority Key Identifier:
                keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/vm9FfAKtvOeRC1dCZWpnDrBczGw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.132.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         0d:4d:60:0a:67:f9:9c:b2:eb:19:4b:78:c9:b2:6c:45:46:18:
         22:37:77:5f:ec:9d:81:cb:dc:f0:f2:93:3c:f4:d5:08:aa:eb:
         11:33:7e:32:52:5a:a4:3d:fd:cb:dd:a9:06:3b:70:61:c5:da:
         ef:af:17:c1:5b:a7:5f:09:91:88:45:12:83:e8:7e:9e:02:12:
         56:fb:af:81:2e:ed:c8:0e:f5:67:cb:74:d8:bf:cd:c5:02:22:
         99:01:37:93:9a:a6:cf:99:2f:95:5f:fd:9b:1c:7b:7b:14:50:
         0f:6c:65:cb:d6:b1:56:86:72:32:16:e6:a0:db:7d:6f:fa:f3:
         3e:f7:58:f2:dd:a9:f7:c6:9f:16:0a:74:83:d4:09:e0:f9:09:
         bf:18:28:d4:03:15:d2:ad:56:5a:ea:76:b1:39:10:ee:eb:28:
         f2:f9:64:ad:c8:bc:82:87:38:25:7d:ef:99:cb:f2:fc:53:3a:
         d1:ad:5a:3a:ba:68:83:58:26:4d:bf:76:1f:ef:1b:c2:b4:14:
         a7:c4:d2:b6:d1:27:56:dc:41:2f:fd:f2:73:53:17:6e:ed:75:
         8a:2d:69:13:3d:20:ff:51:cd:c4:d2:bc:92:81:ca:55:b0:1f:
         c5:2f:b7:cd:8b:85:c6:55:a2:00:e2:be:92:64:97:79:c7:9f:
         f3:37:df:1b
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIBGTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxQkUz
QUIwRjhEQjI2NUFCQjIyODdFNzUxNTFFN0Y1QTkzQjJDNzM2MB4XDTIzMTAwNDAy
NDI0N1oXDTI0MDkxNDAxMzAwM1owMzExMC8GA1UEAxMoQkU2RjQ1N0MwMkFEQkNF
NzkxMEI1NzQyNjU2QTY3MEVCMDVDQ0M2QzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJ/ux6zMr9n+2Vx0FKEolIoiXrewekEDnWFzw3EocjAKrFYrAH0+
aMo/Qv6MbJj8KDpqy8a0yhsltCjXfZ7m0WytLRQBag4OFCCUgVbZNteUWKLEyCem
0SP1WNC4OpW8G5p9uRc1uasikt4jmovzMKj6tUr/qqNIYx3bj2Wfk2jpV8hWcJ8W
0m6ryDPH8phwyZi+TWnpcIEKwfV23TFZ2gIzwrUmgz0I0War8IaDlsCSD8KIS6xh
kbCb1ux3OS8Ri31SsSuTqAJkLGhjk1y44jwR/yVCEQnfNFpOP2dM4M5iy38orAxr
eqVF6ejgPiOSLgyctYMArbf09gIPMgY24gsCAwEAAaOCAiIwggIeMB0GA1UdDgQW
BBS+b0V8Aq2855ELV0JlamcOsFzMbDAfBgNVHSMEGDAWgBQb46sPjbJlq7IofnUV
Hn9ak7LHNjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY
oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNTAvRy1PckQ0MnlaYXV5S0g1MUZSNV9XcE95eHpZLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvRy1PckQ0MnlaYXV5S0g1MUZSNV9XcE95
eHpZLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgboGCCsGAQUFBwELBIGtMIGqMGAGCCsG
AQUFBzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzUwL3ZtOUZmQUt0dk9lUkMxZENaV3BuRHJCY3pHdy5yb2EwRgYI
KwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRw
L2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAXThCAwDQYJKoZIhvcNAQELBQADggEBAA1NYApn+Zyy6xlLeMmybEVGGCI3d1/s
nYHL3PDykzz01Qiq6xEzfjJSWqQ9/cvdqQY7cGHF2u+vF8Fbp18JkYhFEoPofp4C
Elb7r4Eu7cgO9WfLdNi/zcUCIpkBN5Oaps+ZL5Vf/Zsce3sUUA9sZcvWsVaGcjIW
5qDbfW/68z73WPLdqffGnxYKdIPUCeD5Cb8YKNQDFdKtVlrqdrE5EO7rKPL5ZK3I
vIKHOCV975nL8vxTOtGtWjq6aINYJk2/dh/vG8K0FKfE0rbRJ1bcQS/98nNTF27t
dYotaRM9IP9RzcTSvJKBylWwH8Uvt82LhcZVogDivpJkl3nHn/M33xs=
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:50 2024 by rpki-client on console-fra.rpki-client.org