Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/539/6pUUa1s6gYA2Cr7txMZ_VhpbOx8.roa
File:                     6pUUa1s6gYA2Cr7txMZ_VhpbOx8.roa (raw, json)
Hash identifier:          e218lbm209rpyslgeyZ00bxkoN78cER99g61O2hVzmg=
Subject key identifier:   EA:95:14:6B:5B:3A:81:80:36:0A:BE:ED:C4:C6:7F:56:1A:5B:3B:1F
Certificate issuer:       /CN=5B0D72F9F430B7D4003375F10D5025B9E5C00437
Certificate serial:       57
Authority key identifier: 5B:0D:72:F9:F4:30:B7:D4:00:33:75:F1:0D:50:25:B9:E5:C0:04:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/6pUUa1s6gYA2Cr7txMZ_VhpbOx8.roa
Signing time:             Tue 01 Aug 2023 01:28:23 +0000
ROA not before:           Tue 01 Aug 2023 01:28:23 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     55900
IP address blocks:        27.0.16.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 14 Jun 2024 14:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 87 (0x57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B0D72F9F430B7D4003375F10D5025B9E5C00437
        Validity
            Not Before: Aug  1 01:28:23 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=EA95146B5B3A8180360ABEEDC4C67F561A5B3B1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e9:11:6f:16:4f:41:9a:c6:26:18:34:e2:8c:
                    45:f0:d8:65:31:09:d1:57:63:26:01:7f:c1:d0:cf:
                    22:07:c8:bc:36:d5:9f:d0:06:73:5e:90:96:4a:cf:
                    9b:72:99:a2:ac:af:00:37:2a:e8:6b:8a:76:6b:47:
                    28:22:e8:cf:ac:6e:84:1f:15:50:4b:0f:49:69:d8:
                    1b:19:d5:e2:e7:01:e7:39:c1:f1:98:5a:78:66:bc:
                    8d:81:62:bd:ea:ca:02:ad:0d:e9:51:cb:9a:eb:1e:
                    b0:f8:40:90:ff:2c:c9:2d:80:91:c4:c2:60:a4:75:
                    2b:d8:07:43:c8:8e:b9:2c:1c:7b:49:38:3f:c5:fa:
                    19:18:62:d4:5e:cd:46:5a:72:e3:f7:9a:1c:0c:77:
                    67:7e:0f:55:71:21:22:e3:13:a5:06:a2:e8:b9:24:
                    27:e5:72:2c:31:17:c4:02:c4:6e:8a:81:c6:a1:c8:
                    0d:c9:a1:e7:09:31:aa:03:fb:bc:92:60:3f:93:60:
                    93:c3:67:0c:57:71:64:b9:c5:6f:e7:7d:f1:69:53:
                    0f:6b:31:e6:c3:8e:f3:7a:7b:4a:2a:db:71:e1:e6:
                    78:c8:27:bb:09:92:c4:a4:f8:26:19:9e:34:0f:7e:
                    dd:7d:a3:29:b6:19:e2:a5:95:57:8d:cb:35:04:12:
                    af:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:95:14:6B:5B:3A:81:80:36:0A:BE:ED:C4:C6:7F:56:1A:5B:3B:1F
            X509v3 Authority Key Identifier:
                keyid:5B:0D:72:F9:F4:30:B7:D4:00:33:75:F1:0D:50:25:B9:E5:C0:04:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/6pUUa1s6gYA2Cr7txMZ_VhpbOx8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.0.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         46:7f:c1:38:5e:b4:a3:6d:ae:f6:9d:3d:cd:1d:75:eb:b6:fe:
         5b:95:91:00:2d:8f:90:22:4f:d8:f1:51:2b:f8:ea:7c:8f:6d:
         75:2a:84:4f:4b:51:61:2e:93:f2:e4:4c:80:10:cc:77:0e:8b:
         17:8c:24:59:66:38:74:29:e9:e5:18:95:79:57:c9:b3:8d:7a:
         35:f5:db:9a:8a:07:ae:04:d7:11:fe:ed:b9:45:e6:8b:5a:49:
         34:30:0a:b0:a1:28:60:c8:7e:28:f4:e9:a3:3b:4f:50:ff:94:
         8c:1a:58:78:8e:bb:32:d7:a4:de:55:17:90:f6:61:20:03:85:
         bb:f6:7c:83:35:5b:59:51:14:fd:6e:c6:39:ed:a8:89:2d:ca:
         bd:b2:ff:8e:a1:77:3f:ab:ae:2b:66:bd:b9:54:c2:a9:db:e2:
         86:a3:1a:22:cc:b2:88:0a:95:c4:10:46:44:51:23:dc:68:22:
         a7:15:7f:d8:37:55:88:bc:f7:bc:6c:79:33:4e:5c:3d:f3:40:
         69:5c:eb:6d:1a:7c:ed:b8:76:bd:14:ba:94:92:bf:9c:07:2f:
         1d:df:d2:be:95:d7:df:b5:71:1d:29:e7:ae:bd:f1:1d:d9:cd:
         df:d5:a5:ed:81:51:a8:44:eb:0d:37:ee:50:ed:05:bd:1b:56:
         b2:a6:ed:1c
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBVzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1QjBE
NzJGOUY0MzBCN0Q0MDAzMzc1RjEwRDUwMjVCOUU1QzAwNDM3MB4XDTIzMDgwMTAx
MjgyM1oXDTI0MDcxNDAxMzAwM1owMzExMC8GA1UEAxMoRUE5NTE0NkI1QjNBODE4
MDM2MEFCRUVEQzRDNjdGNTYxQTVCM0IxRjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMXpEW8WT0GaxiYYNOKMRfDYZTEJ0VdjJgF/wdDPIgfIvDbVn9AG
c16QlkrPm3KZoqyvADcq6GuKdmtHKCLoz6xuhB8VUEsPSWnYGxnV4ucB5znB8Zha
eGa8jYFiverKAq0N6VHLmusesPhAkP8syS2AkcTCYKR1K9gHQ8iOuSwce0k4P8X6
GRhi1F7NRlpy4/eaHAx3Z34PVXEhIuMTpQai6LkkJ+VyLDEXxALEboqBxqHIDcmh
5wkxqgP7vJJgP5Ngk8NnDFdxZLnFb+d98WlTD2sx5sOO83p7SirbceHmeMgnuwmS
xKT4JhmeNA9+3X2jKbYZ4qWVV43LNQQSr0cCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBTqlRRrWzqBgDYKvu3Exn9WGls7HzAfBgNVHSMEGDAWgBRbDXL59DC31AAzdfEN
UCW55cAENzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNTM5L1d3MXktZlF3dDlRQU0zWHhEVkFsdWVYQUJEYy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1d3MXktZlF3dDlRQU0zWHhEVkFsdWVY
QUJEYy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC81MzkvNnBVVWExczZnWUEyQ3I3dHhNWl9WaHBiT3g4LnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBBsAEDANBgkqhkiG9w0BAQsFAAOCAQEARn/BOF60o22u9p09zR1167b+W5WR
AC2PkCJP2PFRK/jqfI9tdSqET0tRYS6T8uRMgBDMdw6LF4wkWWY4dCnp5RiVeVfJ
s416NfXbmooHrgTXEf7tuUXmi1pJNDAKsKEoYMh+KPTpoztPUP+UjBpYeI67Mtek
3lUXkPZhIAOFu/Z8gzVbWVEU/W7GOe2oiS3KvbL/jqF3P6uuK2a9uVTCqdvihqMa
IsyyiAqVxBBGRFEj3GgipxV/2DdViLz3vGx5M05cPfNAaVzrbRp87bh2vRS6lJK/
nAcvHd/SvpXX37VxHSnnrr3xHdnN39Wl7YFRqETrDTfuUO0FvRtWsqbtHA==
-----END CERTIFICATE-----
Generated at Fri Jun 7 15:50:38 2024 by rpki-client on console-ams.rpki-client.org