Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/539/OPdwiuII4NWx_RqwYb8QRSwga6A.roa
File:                     OPdwiuII4NWx_RqwYb8QRSwga6A.roa (raw, json)
Hash identifier:          JYIthYLPdFGnIqAsXwoFb5db/0cYE0bMQZPCh/vSCCE=
Subject key identifier:   38:F7:70:8A:E2:08:E0:D5:B1:FD:1A:B0:61:BF:10:45:2C:20:6B:A0
Certificate issuer:       /CN=5B0D72F9F430B7D4003375F10D5025B9E5C00437
Certificate serial:       5D
Authority key identifier: 5B:0D:72:F9:F4:30:B7:D4:00:33:75:F1:0D:50:25:B9:E5:C0:04:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/OPdwiuII4NWx_RqwYb8QRSwga6A.roa
Signing time:             Fri 01 Sep 2023 01:29:12 +0000
ROA not before:           Fri 01 Sep 2023 01:29:12 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     55900
IP address blocks:        43.248.160.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 14 Jun 2024 14:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93 (0x5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B0D72F9F430B7D4003375F10D5025B9E5C00437
        Validity
            Not Before: Sep  1 01:29:12 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=38F7708AE208E0D5B1FD1AB061BF10452C206BA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:00:7c:a3:9d:ee:a1:7d:da:ff:40:cf:27:88:
                    38:11:35:7f:33:bb:a4:38:1e:90:df:59:11:04:aa:
                    4c:e4:60:82:d9:b5:04:1a:68:fe:90:b6:ee:9e:6c:
                    f6:8c:d4:a5:ac:f2:15:e7:f2:f4:08:63:1d:39:d3:
                    74:e2:22:e9:bf:4d:fd:e5:3e:ae:9e:02:f4:ec:33:
                    67:ab:b0:76:f8:9c:cf:f4:47:ca:87:09:ac:e5:35:
                    29:2f:b5:cd:56:d6:b1:80:10:a6:b9:5e:8c:33:e8:
                    14:a2:e6:37:9b:52:f7:fa:21:45:5c:76:90:54:fd:
                    90:0a:ae:6b:17:57:86:4a:f0:10:d0:00:b2:7b:88:
                    54:9f:a4:af:ac:41:1c:08:b9:02:fa:d7:91:d3:ad:
                    f6:1f:90:3b:ba:f3:11:7f:f6:2f:43:95:90:d8:fd:
                    7f:73:c4:41:44:6c:a5:f8:5b:f4:ab:8c:73:97:d3:
                    ea:30:e8:ef:96:d4:a5:bc:f5:fe:5b:52:a6:c6:b5:
                    9a:ad:0b:39:b4:61:fb:20:6f:5d:ed:92:b5:48:e1:
                    3b:45:78:6e:4d:09:bc:82:77:3d:0f:94:49:61:82:
                    80:35:3b:80:a2:ac:0c:ce:d6:36:1d:ed:bb:23:3a:
                    d5:bc:48:d8:0f:ab:ed:c5:19:33:36:54:ed:97:0f:
                    00:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:F7:70:8A:E2:08:E0:D5:B1:FD:1A:B0:61:BF:10:45:2C:20:6B:A0
            X509v3 Authority Key Identifier:
                keyid:5B:0D:72:F9:F4:30:B7:D4:00:33:75:F1:0D:50:25:B9:E5:C0:04:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/OPdwiuII4NWx_RqwYb8QRSwga6A.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.248.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:f7:a4:12:cf:b5:52:29:b7:7b:5c:9c:a7:a3:c1:6b:64:21:
         8d:6c:e1:cd:0f:a0:3d:3f:bc:b6:a2:96:04:e4:17:e6:f0:d1:
         e8:7e:94:25:47:93:20:d1:b4:92:b5:d8:29:64:ce:b8:01:da:
         86:e3:12:a2:f9:19:0d:6f:78:d1:04:3b:03:00:8d:5b:16:67:
         77:13:2b:a6:bb:e1:62:98:f5:79:ea:c6:3d:a2:16:8c:fa:be:
         50:92:1a:2d:04:b0:65:ce:7a:31:09:7d:9a:99:d3:5b:f6:7a:
         bf:17:0e:8b:b0:89:1c:c7:f5:cd:a8:25:21:66:41:a5:7d:1f:
         fa:81:2f:92:23:54:9e:85:56:08:b6:70:b4:37:f1:e2:0e:fc:
         8d:36:2c:4f:50:90:4c:73:f2:1f:f8:c3:10:09:ea:fa:92:89:
         65:f6:6f:bb:74:88:27:b2:d4:36:82:1c:9c:83:99:c0:ca:cc:
         35:ab:82:d1:e0:42:d6:0a:c5:0c:64:c3:8f:ed:0f:44:4d:cd:
         bc:9e:b0:93:5f:b7:66:36:28:99:ff:d2:3c:9b:9c:fb:87:2b:
         af:1e:7d:43:40:be:17:87:01:16:39:46:72:d0:01:42:e3:ca:
         7e:0d:f2:58:99:da:59:61:73:1c:98:55:3b:38:84:97:25:55:
         7a:93:80:45
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBXTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1QjBE
NzJGOUY0MzBCN0Q0MDAzMzc1RjEwRDUwMjVCOUU1QzAwNDM3MB4XDTIzMDkwMTAx
MjkxMloXDTI0MDgxNDAxMzAwMlowMzExMC8GA1UEAxMoMzhGNzcwOEFFMjA4RTBE
NUIxRkQxQUIwNjFCRjEwNDUyQzIwNkJBMDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJQAfKOd7qF92v9AzyeIOBE1fzO7pDgekN9ZEQSqTORggtm1BBpo
/pC27p5s9ozUpazyFefy9AhjHTnTdOIi6b9N/eU+rp4C9OwzZ6uwdvicz/RHyocJ
rOU1KS+1zVbWsYAQprlejDPoFKLmN5tS9/ohRVx2kFT9kAquaxdXhkrwENAAsnuI
VJ+kr6xBHAi5AvrXkdOt9h+QO7rzEX/2L0OVkNj9f3PEQURspfhb9KuMc5fT6jDo
75bUpbz1/ltSpsa1mq0LObRh+yBvXe2StUjhO0V4bk0JvIJ3PQ+USWGCgDU7gKKs
DM7WNh3tuyM61bxI2A+r7cUZMzZU7ZcPAPECAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBQ493CK4gjg1bH9GrBhvxBFLCBroDAfBgNVHSMEGDAWgBRbDXL59DC31AAzdfEN
UCW55cAENzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNTM5L1d3MXktZlF3dDlRQU0zWHhEVkFsdWVYQUJEYy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1d3MXktZlF3dDlRQU0zWHhEVkFsdWVY
QUJEYy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC81MzkvT1Bkd2l1SUk0Tld4X1Jxd1liOFFSU3dnYTZBLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAiv4oDANBgkqhkiG9w0BAQsFAAOCAQEAdvekEs+1Uim3e1ycp6PBa2QhjWzh
zQ+gPT+8tqKWBOQX5vDR6H6UJUeTING0krXYKWTOuAHahuMSovkZDW940QQ7AwCN
WxZndxMrprvhYpj1eerGPaIWjPq+UJIaLQSwZc56MQl9mpnTW/Z6vxcOi7CJHMf1
zaglIWZBpX0f+oEvkiNUnoVWCLZwtDfx4g78jTYsT1CQTHPyH/jDEAnq+pKJZfZv
u3SIJ7LUNoIcnIOZwMrMNauC0eBC1grFDGTDj+0PRE3NvJ6wk1+3ZjYomf/SPJuc
+4crrx59Q0C+F4cBFjlGctABQuPKfg3yWJnaWWFzHJhVOziElyVVepOARQ==
-----END CERTIFICATE-----
Generated at Fri Jun 7 15:50:38 2024 by rpki-client on console-ams.rpki-client.org