Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/524/UaV4OALvNg844A-UL3xNYhqs_eY.roa
File:                     UaV4OALvNg844A-UL3xNYhqs_eY.roa (raw, json)
Hash identifier:          np7rjTwRYOb3TTa7awhlWEotdwGlG0wPoVwoNN1u94Q=
Subject key identifier:   51:A5:78:38:02:EF:36:0F:38:E0:0F:94:2F:7C:4D:62:1A:AC:FD:E6
Certificate issuer:       /CN=EE13ACCF7E77B0292AE17B05340211C8F971760B
Certificate serial:       10
Authority key identifier: EE:13:AC:CF:7E:77:B0:29:2A:E1:7B:05:34:02:11:C8:F9:71:76:0B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7hOsz353sCkq4XsFNAIRyPlxdgs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/UaV4OALvNg844A-UL3xNYhqs_eY.roa
Signing time:             Thu 16 Nov 2023 01:06:34 +0000
ROA not before:           Thu 16 Nov 2023 01:06:34 +0000
ROA not after:            Thu 14 Nov 2024 01:30:03 +0000
asID:                     7527
IP address blocks:        210.171.226.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7hOsz353sCkq4XsFNAIRyPlxdgs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE13ACCF7E77B0292AE17B05340211C8F971760B
        Validity
            Not Before: Nov 16 01:06:34 2023 GMT
            Not After : Nov 14 01:30:03 2024 GMT
        Subject: CN=51A5783802EF360F38E00F942F7C4D621AACFDE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a8:75:d5:7e:89:fb:fe:49:57:1d:66:f0:5a:
                    29:ba:df:94:87:1e:4e:05:89:b1:3c:11:2c:c5:ab:
                    3c:c8:2b:07:f5:68:23:31:29:e5:49:54:09:42:cb:
                    40:94:c4:05:59:b3:75:30:d0:cd:60:cd:25:64:e3:
                    76:27:1a:68:01:b5:8e:94:59:c2:af:54:49:82:2b:
                    a9:6d:ab:55:f2:c1:f9:00:08:8b:b0:81:05:ef:1e:
                    3d:9b:05:9a:4d:f5:0a:b0:0b:78:f4:b6:28:2f:35:
                    58:34:19:2a:e7:af:7e:d7:9f:66:d5:51:b9:48:c2:
                    70:0a:33:d4:27:8a:f3:56:18:f5:21:bf:cf:14:66:
                    d0:fe:04:16:af:f3:48:da:6d:a2:31:ec:d4:11:db:
                    82:61:36:15:d9:44:cc:33:f6:97:d7:c4:88:46:f0:
                    40:3b:a8:70:25:f5:cc:0c:a4:ca:81:be:81:0a:99:
                    b2:83:72:a1:8e:eb:64:a0:79:29:fc:4f:fa:6e:46:
                    43:a2:68:ba:80:eb:64:46:83:0a:09:6d:8e:c6:f0:
                    51:a2:65:7f:94:9a:fd:bc:f9:c6:ec:64:7b:20:a3:
                    a9:d6:4f:80:2f:71:d9:c7:0c:02:8e:4e:93:0f:f3:
                    c7:01:65:95:7e:06:cb:9f:2b:36:16:f7:8b:83:49:
                    b0:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:A5:78:38:02:EF:36:0F:38:E0:0F:94:2F:7C:4D:62:1A:AC:FD:E6
            X509v3 Authority Key Identifier:
                keyid:EE:13:AC:CF:7E:77:B0:29:2A:E1:7B:05:34:02:11:C8:F9:71:76:0B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7hOsz353sCkq4XsFNAIRyPlxdgs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/UaV4OALvNg844A-UL3xNYhqs_eY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.171.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:b9:32:11:a0:74:80:ce:69:b0:05:4f:26:91:9c:8c:d5:95:
         d2:1a:be:ff:0d:48:53:e8:59:14:29:6a:b8:ac:bb:29:93:d2:
         57:1e:c6:1d:8c:fd:60:f5:f6:48:4f:26:33:f3:63:c6:f2:19:
         4b:ac:71:8a:0c:b0:8b:d3:2f:42:26:5b:3b:1f:ce:87:3c:b5:
         4e:0e:55:2f:d9:c5:98:0d:12:32:49:3b:9e:30:89:6d:62:80:
         e0:e8:a5:7d:ac:9a:b4:4a:87:c4:07:f0:20:f5:ac:7b:67:72:
         07:a0:5c:51:ab:ca:68:77:a1:c5:3b:7c:16:e0:72:ab:f1:a5:
         04:34:96:9e:33:cc:2d:fb:d2:4e:12:64:d4:d0:da:61:9c:56:
         cf:ba:c6:c2:0a:00:a2:ce:80:75:54:98:e7:75:ae:f5:82:cd:
         2e:0f:c4:cf:7e:21:65:5c:bb:72:52:29:39:4d:e3:2b:23:2f:
         75:13:45:eb:b5:65:be:25:d9:91:c3:33:40:91:30:c0:bf:10:
         41:27:8c:d7:14:ee:ed:f8:a6:ec:2a:e0:da:49:54:18:41:82:
         bf:c6:ed:5b:23:5b:45:0c:f6:d9:19:e5:be:2d:7a:b6:4b:10:
         81:57:85:d1:25:27:f4:c8:01:f9:ec:71:66:c1:44:da:72:50:
         80:72:4a:da
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBEDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFRTEz
QUNDRjdFNzdCMDI5MkFFMTdCMDUzNDAyMTFDOEY5NzE3NjBCMB4XDTIzMTExNjAx
MDYzNFoXDTI0MTExNDAxMzAwM1owMzExMC8GA1UEAxMoNTFBNTc4MzgwMkVGMzYw
RjM4RTAwRjk0MkY3QzRENjIxQUFDRkRFNjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAM6oddV+ifv+SVcdZvBaKbrflIceTgWJsTwRLMWrPMgrB/VoIzEp
5UlUCULLQJTEBVmzdTDQzWDNJWTjdicaaAG1jpRZwq9USYIrqW2rVfLB+QAIi7CB
Be8ePZsFmk31CrALePS2KC81WDQZKuevftefZtVRuUjCcAoz1CeK81YY9SG/zxRm
0P4EFq/zSNptojHs1BHbgmE2FdlEzDP2l9fEiEbwQDuocCX1zAykyoG+gQqZsoNy
oY7rZKB5KfxP+m5GQ6JouoDrZEaDCgltjsbwUaJlf5Sa/bz5xuxkeyCjqdZPgC9x
2ccMAo5Okw/zxwFllX4Gy58rNhb3i4NJsLUCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBRRpXg4Au82DzjgD5QvfE1iGqz95jAfBgNVHSMEGDAWgBTuE6zPfnewKSrhewU0
AhHI+XF2CzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNTI0LzdoT3N6MzUzc0NrcTRYc0ZOQUlSeVBseGRncy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzdoT3N6MzUzc0NrcTRYc0ZOQUlSeVBs
eGRncy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC81MjQvVWFWNE9BTHZOZzg0NEEtVUwzeE5ZaHFzX2VZLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAdKr4jANBgkqhkiG9w0BAQsFAAOCAQEAObkyEaB0gM5psAVPJpGcjNWV0hq+
/w1IU+hZFClquKy7KZPSVx7GHYz9YPX2SE8mM/NjxvIZS6xxigywi9MvQiZbOx/O
hzy1Tg5VL9nFmA0SMkk7njCJbWKA4OilfayatEqHxAfwIPWse2dyB6BcUavKaHeh
xTt8FuByq/GlBDSWnjPMLfvSThJk1NDaYZxWz7rGwgoAos6AdVSY53Wu9YLNLg/E
z34hZVy7clIpOU3jKyMvdRNF67VlviXZkcMzQJEwwL8QQSeM1xTu7fim7Crg2klU
GEGCv8btWyNbRQz22Rnlvi16tksQgVeF0SUn9MgB+exxZsFE2nJQgHJK2g==
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:50 2024 by rpki-client on console-fra.rpki-client.org