Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/524/7Iv6J08zRQ7NsO3jJ0oHbfI2bEk.roa
File:                     7Iv6J08zRQ7NsO3jJ0oHbfI2bEk.roa (raw, json)
Hash identifier:          3LyiamrnzDGpP8Svs8FK2CISDqoO7UiQPpQOYaoqlPA=
Subject key identifier:   EC:8B:FA:27:4F:33:45:0E:CD:B0:ED:E3:27:4A:07:6D:F2:36:6C:49
Certificate issuer:       /CN=EE13ACCF7E77B0292AE17B05340211C8F971760B
Certificate serial:       2D
Authority key identifier: EE:13:AC:CF:7E:77:B0:29:2A:E1:7B:05:34:02:11:C8:F9:71:76:0B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7hOsz353sCkq4XsFNAIRyPlxdgs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7Iv6J08zRQ7NsO3jJ0oHbfI2bEk.roa
Signing time:             Thu 31 Oct 2024 01:31:36 +0000
ROA not before:           Thu 31 Oct 2024 01:31:36 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     2516
IP address blocks:        106.73.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7hOsz353sCkq4XsFNAIRyPlxdgs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45 (0x2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE13ACCF7E77B0292AE17B05340211C8F971760B
        Validity
            Not Before: Oct 31 01:31:36 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=EC8BFA274F33450ECDB0EDE3274A076DF2366C49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6d:cb:9a:bf:a0:32:f5:c9:26:06:c8:8c:cd:
                    ec:ab:4a:ff:ba:d9:57:3d:30:0c:a4:c4:03:84:ec:
                    c7:7b:46:dc:e0:78:5f:d9:22:e5:a9:02:3b:74:41:
                    ee:4d:9e:74:6b:01:28:62:1c:f0:6f:b8:76:1b:ee:
                    0a:b5:ff:2f:41:6f:cb:16:19:f3:e3:5a:f7:71:4d:
                    c4:98:36:f6:c4:28:b8:28:3d:11:e4:41:9e:55:6c:
                    ea:90:41:cf:a4:a1:ec:b3:8a:d6:36:fc:04:ae:c7:
                    a6:4d:d7:77:9e:96:0e:25:32:5f:b3:fb:3c:48:24:
                    5e:b0:2c:b0:19:04:04:22:3d:80:a0:c3:11:18:ec:
                    b2:2f:e8:c9:3e:03:46:fe:f0:8d:76:15:f9:bb:52:
                    14:06:d5:fc:f4:f1:70:52:19:b3:a0:e2:4d:a8:dd:
                    9b:7b:b7:06:51:23:34:89:75:55:ea:2d:c1:7a:0c:
                    69:92:7e:91:05:a9:29:a4:9c:dc:9c:17:80:ed:89:
                    52:b1:5a:48:be:b6:3d:00:d1:33:20:05:44:21:3c:
                    db:87:8b:42:6d:35:a2:9d:8c:eb:1f:71:1a:99:7e:
                    8c:fd:fb:c1:c1:07:0d:5d:bd:94:97:9f:fe:ea:8c:
                    65:f8:5f:e7:b1:14:17:b5:a3:7a:91:f4:54:15:e6:
                    34:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:8B:FA:27:4F:33:45:0E:CD:B0:ED:E3:27:4A:07:6D:F2:36:6C:49
            X509v3 Authority Key Identifier:
                keyid:EE:13:AC:CF:7E:77:B0:29:2A:E1:7B:05:34:02:11:C8:F9:71:76:0B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7hOsz353sCkq4XsFNAIRyPlxdgs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7Iv6J08zRQ7NsO3jJ0oHbfI2bEk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.73.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         8b:2a:c9:f0:6a:72:8f:ba:43:de:d8:af:69:21:d1:d4:3d:f8:
         5d:d0:26:42:50:6d:4f:c2:b5:af:9f:63:95:c4:3a:16:5a:47:
         8d:75:14:9a:ff:1e:20:5c:00:d4:c5:68:b8:2d:56:0e:61:3a:
         f8:1a:d2:7c:07:ee:f8:fb:a1:8e:1a:13:24:4d:9e:28:8c:89:
         2c:5c:27:9d:ec:b1:93:3b:2b:6e:fd:be:cc:66:ee:e2:d5:fa:
         89:27:d8:1f:c1:86:07:a7:72:d7:0a:31:a3:65:4f:9f:84:00:
         c2:0e:99:c5:d3:f2:d0:9b:1e:a1:33:a6:5c:dc:b4:50:70:dc:
         6d:b9:34:68:95:bf:4d:51:f3:88:92:8b:a3:80:ba:77:f2:e5:
         1d:eb:6d:68:7d:f1:5d:38:ec:ce:2a:3f:ac:75:ad:9e:ac:0d:
         08:96:3b:05:22:fa:4d:27:89:ea:78:01:27:b5:1d:dd:65:6b:
         11:13:40:34:42:12:27:a9:3e:36:5f:96:97:3a:5f:36:c5:b7:
         58:22:11:28:18:9d:12:4d:4c:df:6b:fb:10:01:ef:82:89:ce:
         dc:23:81:13:39:89:25:e2:f5:16:ed:29:6b:e0:62:23:b4:53:
         48:cc:bf:50:07:71:03:91:2a:94:55:ff:07:a9:e2:04:5c:c1:
         b7:90:56:08
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIBLTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFRTEz
QUNDRjdFNzdCMDI5MkFFMTdCMDUzNDAyMTFDOEY5NzE3NjBCMB4XDTI0MTAzMTAx
MzEzNloXDTI1MTAxNTAxMzAwMlowMzExMC8GA1UEAxMoRUM4QkZBMjc0RjMzNDUw
RUNEQjBFREUzMjc0QTA3NkRGMjM2NkM0OTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKZty5q/oDL1ySYGyIzN7KtK/7rZVz0wDKTEA4Tsx3tG3OB4X9ki
5akCO3RB7k2edGsBKGIc8G+4dhvuCrX/L0FvyxYZ8+Na93FNxJg29sQouCg9EeRB
nlVs6pBBz6Sh7LOK1jb8BK7Hpk3Xd56WDiUyX7P7PEgkXrAssBkEBCI9gKDDERjs
si/oyT4DRv7wjXYV+btSFAbV/PTxcFIZs6DiTajdm3u3BlEjNIl1VeotwXoMaZJ+
kQWpKaSc3JwXgO2JUrFaSL62PQDRMyAFRCE824eLQm01op2M6x9xGpl+jP37wcEH
DV29lJef/uqMZfhf57EUF7WjepH0VBXmNFcCAwEAAaOCAiMwggIfMB0GA1UdDgQW
BBTsi/onTzNFDs2w7eMnSgdt8jZsSTAfBgNVHSMEGDAWgBTuE6zPfnewKSrhewU0
AhHI+XF2CzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNTI0LzdoT3N6MzUzc0NrcTRYc0ZOQUlSeVBseGRncy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzdoT3N6MzUzc0NrcTRYc0ZOQUlSeVBs
eGRncy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC81MjQvN0l2NkowOHpSUTdOc08zakowb0hiZkkyYkVrLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEw
BQMDAGpJMA0GCSqGSIb3DQEBCwUAA4IBAQCLKsnwanKPukPe2K9pIdHUPfhd0CZC
UG1PwrWvn2OVxDoWWkeNdRSa/x4gXADUxWi4LVYOYTr4GtJ8B+74+6GOGhMkTZ4o
jIksXCed7LGTOytu/b7MZu7i1fqJJ9gfwYYHp3LXCjGjZU+fhADCDpnF0/LQmx6h
M6Zc3LRQcNxtuTRolb9NUfOIkoujgLp38uUd621offFdOOzOKj+sda2erA0IljsF
IvpNJ4nqeAEntR3dZWsRE0A0QhInqT42X5aXOl82xbdYIhEoGJ0STUzfa/sQAe+C
ic7cI4ETOYkl4vUW7Slr4GIjtFNIzL9QB3EDkSqUVf8HqeIEXMG3kFYI
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:23 2024 by rpki-client on console-fra.rpki-client.org