Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/539/5AMvNwFjQ0n-d48u4S5BjvrDiw4.roa
File:                     5AMvNwFjQ0n-d48u4S5BjvrDiw4.roa (raw, json)
Hash identifier:          xH02YhhUVZfyymq+4F2YQ17gSSSD05YcT7do4GPfWLM=
Subject key identifier:   E4:03:2F:37:01:63:43:49:FE:77:8F:2E:E1:2E:41:8E:FA:C3:8B:0E
Certificate issuer:       /CN=5B0D72F9F430B7D4003375F10D5025B9E5C00437
Certificate serial:       56
Authority key identifier: 5B:0D:72:F9:F4:30:B7:D4:00:33:75:F1:0D:50:25:B9:E5:C0:04:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/5AMvNwFjQ0n-d48u4S5BjvrDiw4.roa
Signing time:             Tue 01 Aug 2023 01:28:23 +0000
ROA not before:           Tue 01 Aug 2023 01:28:23 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     55900
IP address blocks:        103.13.248.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86 (0x56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B0D72F9F430B7D4003375F10D5025B9E5C00437
        Validity
            Not Before: Aug  1 01:28:23 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=E4032F3701634349FE778F2EE12E418EFAC38B0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:b4:6f:d5:ce:ca:93:70:54:e1:de:e1:ee:f4:
                    48:86:b0:a3:ce:f7:ed:e4:33:bd:ac:f1:fe:bf:c8:
                    78:68:cb:28:26:02:6d:7c:9a:97:c7:84:de:6b:fe:
                    2d:bc:9c:49:b5:c9:58:c9:33:e3:cf:f7:0d:0f:87:
                    2b:53:b8:e5:a5:40:6f:fc:39:03:d4:57:fb:e6:60:
                    41:97:32:db:f0:5e:e0:fe:5d:d3:c3:ab:2c:56:a6:
                    b0:ca:d7:f4:41:ec:19:0c:d3:c1:81:69:ad:d6:5e:
                    d0:08:66:f5:dc:90:0c:ca:95:57:aa:67:87:aa:91:
                    66:8d:7e:30:6b:c7:a9:40:98:7a:15:ab:87:d2:d3:
                    77:b6:86:58:e9:0f:71:36:64:2c:77:66:3f:c7:5e:
                    fe:1a:52:c1:40:d4:0e:9e:c5:0e:b2:6f:00:92:f9:
                    53:25:40:0a:25:16:37:48:7c:ac:12:a2:eb:dd:1d:
                    d0:b6:e3:75:1b:fd:2e:d5:7b:5d:06:c7:80:ad:8d:
                    d0:d2:b2:9e:0a:23:ce:01:0c:92:1d:d6:32:e2:d5:
                    21:a1:c6:26:67:b9:65:5f:6d:cb:4e:3f:89:25:6d:
                    2f:96:d2:8b:2a:04:8b:98:69:ae:89:85:8f:59:15:
                    41:b7:5c:55:a1:83:6b:dc:2c:30:da:1f:e4:3e:9c:
                    81:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:03:2F:37:01:63:43:49:FE:77:8F:2E:E1:2E:41:8E:FA:C3:8B:0E
            X509v3 Authority Key Identifier:
                keyid:5B:0D:72:F9:F4:30:B7:D4:00:33:75:F1:0D:50:25:B9:E5:C0:04:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/5AMvNwFjQ0n-d48u4S5BjvrDiw4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.13.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:33:8c:70:44:28:a6:c2:b2:ed:bf:9b:e2:29:10:c7:59:c0:
         80:c1:45:49:e0:e0:67:02:a5:de:86:45:4a:64:78:3a:ce:30:
         00:9f:25:29:c4:39:11:3f:9c:e5:0c:69:c3:39:2b:fa:8f:2c:
         1b:37:9e:ed:61:ed:57:18:eb:87:11:1c:82:83:eb:14:c7:c3:
         91:a1:9a:b5:75:e2:c2:e5:e5:d4:54:47:71:f9:4a:82:10:29:
         09:50:3f:79:3d:0c:57:ca:38:6a:17:f4:49:84:e7:48:02:ac:
         89:5d:d7:70:e8:e5:6c:a6:f1:a3:28:e6:9a:07:a0:fd:a5:18:
         cf:5c:20:ad:45:87:6a:c0:2a:69:56:4b:d9:00:3d:ac:75:7c:
         1d:37:b4:c8:51:72:6d:2d:df:d3:d1:40:0e:19:5c:16:8a:c8:
         68:60:3b:2c:07:eb:6e:70:fe:fd:e5:fc:f7:1d:ed:9b:59:ef:
         62:47:5a:15:77:b8:96:53:7a:c9:a0:fc:b1:a1:01:e7:b7:68:
         df:c6:ea:54:c6:c0:5b:ca:9a:73:b0:40:b6:45:12:81:9a:c7:
         f9:90:a5:e7:5e:d2:b9:37:44:ad:35:f5:13:5a:55:d0:a1:eb:
         e6:a3:de:c0:2b:1f:bd:f0:c0:b7:0e:a7:b3:16:e7:cc:47:04:
         6e:9b:98:48
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBVjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1QjBE
NzJGOUY0MzBCN0Q0MDAzMzc1RjEwRDUwMjVCOUU1QzAwNDM3MB4XDTIzMDgwMTAx
MjgyM1oXDTI0MDcxNDAxMzAwM1owMzExMC8GA1UEAxMoRTQwMzJGMzcwMTYzNDM0
OUZFNzc4RjJFRTEyRTQxOEVGQUMzOEIwRTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAN60b9XOypNwVOHe4e70SIawo8737eQzvazx/r/IeGjLKCYCbXya
l8eE3mv+LbycSbXJWMkz48/3DQ+HK1O45aVAb/w5A9RX++ZgQZcy2/Be4P5d08Or
LFamsMrX9EHsGQzTwYFprdZe0Ahm9dyQDMqVV6pnh6qRZo1+MGvHqUCYehWrh9LT
d7aGWOkPcTZkLHdmP8de/hpSwUDUDp7FDrJvAJL5UyVACiUWN0h8rBKi690d0Lbj
dRv9LtV7XQbHgK2N0NKyngojzgEMkh3WMuLVIaHGJme5ZV9ty04/iSVtL5bSiyoE
i5hpromFj1kVQbdcVaGDa9wsMNof5D6cgRsCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBTkAy83AWNDSf53jy7hLkGO+sOLDjAfBgNVHSMEGDAWgBRbDXL59DC31AAzdfEN
UCW55cAENzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNTM5L1d3MXktZlF3dDlRQU0zWHhEVkFsdWVYQUJEYy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1d3MXktZlF3dDlRQU0zWHhEVkFsdWVY
QUJEYy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC81MzkvNUFNdk53RmpRMG4tZDQ4dTRTNUJqdnJEaXc0LnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAmcN+DANBgkqhkiG9w0BAQsFAAOCAQEAejOMcEQopsKy7b+b4ikQx1nAgMFF
SeDgZwKl3oZFSmR4Os4wAJ8lKcQ5ET+c5Qxpwzkr+o8sGzee7WHtVxjrhxEcgoPr
FMfDkaGatXXiwuXl1FRHcflKghApCVA/eT0MV8o4ahf0SYTnSAKsiV3XcOjlbKbx
oyjmmgeg/aUYz1wgrUWHasAqaVZL2QA9rHV8HTe0yFFybS3f09FADhlcForIaGA7
LAfrbnD+/eX89x3tm1nvYkdaFXe4llN6yaD8saEB57do38bqVMbAW8qac7BAtkUS
gZrH+ZCl517SuTdErTX1E1pV0KHr5qPewCsfvfDAtw6nsxbnzEcEbpuYSA==
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:50 2024 by rpki-client on console-fra.rpki-client.org