Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/539/dAK4qg3R1Gmoi58fa2y3whvqytA.roa
File:                     dAK4qg3R1Gmoi58fa2y3whvqytA.roa (raw, json)
Hash identifier:          Dkgk12puaS5Pl6Xl9tZ8sIsVy/oQzy0htebQMfL1Qbs=
Subject key identifier:   74:02:B8:AA:0D:D1:D4:69:A8:8B:9F:1F:6B:6C:B7:C2:1B:EA:CA:D0
Certificate issuer:       /CN=D0F562FF36F711A3EDF99FC81DB54ED36634D8B1
Certificate serial:       45
Authority key identifier: D0:F5:62:FF:36:F7:11:A3:ED:F9:9F:C8:1D:B5:4E:D3:66:34:D8:B1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0PVi_zb3EaPt-Z_IHbVO02Y02LE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/dAK4qg3R1Gmoi58fa2y3whvqytA.roa
Signing time:             Sun 30 Jun 2024 01:29:11 +0000
ROA not before:           Sun 30 Jun 2024 01:29:11 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     55900
IP address blocks:        198.144.128.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/0PVi_zb3EaPt-Z_IHbVO02Y02LE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/0PVi_zb3EaPt-Z_IHbVO02Y02LE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0PVi_zb3EaPt-Z_IHbVO02Y02LE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 69 (0x45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0F562FF36F711A3EDF99FC81DB54ED36634D8B1
        Validity
            Not Before: Jun 30 01:29:11 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=7402B8AA0DD1D469A88B9F1F6B6CB7C21BEACAD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e4:48:75:87:64:c0:fa:bd:a8:1c:74:c8:a1:
                    37:1b:85:a5:20:bc:cd:8b:3d:36:c3:46:af:ce:fd:
                    45:ee:bc:bc:41:d8:13:aa:e2:11:c4:1c:72:ff:ad:
                    18:1c:8c:03:78:70:ce:06:53:5c:95:4d:47:93:c4:
                    46:1c:69:7f:92:b2:66:c4:8e:e4:41:3c:2f:0a:84:
                    cb:72:bf:de:0e:fe:eb:74:cc:4b:cc:d0:41:c6:59:
                    43:56:52:d6:bf:43:53:60:8b:92:30:f1:c0:cf:47:
                    8b:dd:b0:65:a9:2d:bd:d6:34:9f:35:37:e9:1f:07:
                    04:8f:31:27:61:d0:45:f7:0b:bd:aa:2d:5b:4b:5c:
                    f9:c1:d5:16:3f:65:68:85:ad:ae:2e:fc:39:46:5a:
                    f8:60:dd:6f:fb:20:e1:68:48:83:43:da:16:62:32:
                    b3:de:b7:f9:b1:a6:22:32:8e:03:02:79:a2:82:be:
                    41:e6:ae:bc:20:a7:8f:63:8d:a3:66:a2:8f:f9:b6:
                    c2:e7:23:da:52:d9:69:70:00:a3:7d:12:de:2d:e4:
                    b1:60:63:65:41:6f:17:f0:0e:54:9f:70:f9:0d:54:
                    3e:a5:68:d3:c3:04:ef:7d:34:88:f0:26:4a:3c:12:
                    17:0f:dd:ed:a7:72:a6:7c:6a:41:18:f4:de:fd:8c:
                    75:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:02:B8:AA:0D:D1:D4:69:A8:8B:9F:1F:6B:6C:B7:C2:1B:EA:CA:D0
            X509v3 Authority Key Identifier:
                keyid:D0:F5:62:FF:36:F7:11:A3:ED:F9:9F:C8:1D:B5:4E:D3:66:34:D8:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/0PVi_zb3EaPt-Z_IHbVO02Y02LE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0PVi_zb3EaPt-Z_IHbVO02Y02LE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/dAK4qg3R1Gmoi58fa2y3whvqytA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.144.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2f:7b:70:5a:06:b0:02:31:38:6c:8a:5d:d0:c5:5c:4c:9f:0d:
         ae:e4:2f:08:4b:d9:cc:78:92:2f:47:7f:f6:6d:a7:85:2b:26:
         7c:03:00:a5:81:a8:2e:3e:64:2d:76:cc:bd:6f:1d:1f:5b:00:
         87:d8:dd:08:e4:1b:f1:ea:7a:8a:05:cf:b9:44:1c:b5:fa:80:
         04:15:bd:00:55:9e:98:3e:a3:c3:46:0f:cf:bf:c9:fa:72:79:
         a7:57:eb:ff:97:2d:52:8d:b6:98:b5:33:ce:be:eb:dc:6e:ee:
         db:43:58:1c:df:50:dd:55:2b:5f:60:0f:bf:96:08:88:8d:7a:
         fb:3f:37:17:bb:98:5d:39:e0:e1:00:41:31:01:60:de:60:28:
         63:1b:8e:2a:5b:7a:70:8d:78:4f:ce:68:16:24:67:16:45:65:
         83:62:c3:07:37:97:50:c1:c6:54:c3:26:e9:50:62:82:18:47:
         4d:84:be:30:5b:39:36:11:11:ae:17:dd:59:de:e5:53:3d:c2:
         51:be:ba:99:f9:45:6a:85:ab:fd:f6:6e:3e:11:82:6e:02:d9:
         82:59:c9:a4:0d:6f:49:d1:07:cc:f4:a6:ef:89:16:fe:9a:39:
         86:b1:24:ce:e6:3f:08:3e:e4:47:66:47:42:09:4f:1d:21:cd:
         91:1d:f6:ca
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBRTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEMEY1
NjJGRjM2RjcxMUEzRURGOTlGQzgxREI1NEVEMzY2MzREOEIxMB4XDTI0MDYzMDAx
MjkxMVoXDTI1MDYyNDEwNDY0NVowMzExMC8GA1UEAxMoNzQwMkI4QUEwREQxRDQ2
OUE4OEI5RjFGNkI2Q0I3QzIxQkVBQ0FEMDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMzkSHWHZMD6vagcdMihNxuFpSC8zYs9NsNGr879Re68vEHYE6ri
EcQccv+tGByMA3hwzgZTXJVNR5PERhxpf5KyZsSO5EE8LwqEy3K/3g7+63TMS8zQ
QcZZQ1ZS1r9DU2CLkjDxwM9Hi92wZaktvdY0nzU36R8HBI8xJ2HQRfcLvaotW0tc
+cHVFj9laIWtri78OUZa+GDdb/sg4WhIg0PaFmIys963+bGmIjKOAwJ5ooK+Qeau
vCCnj2ONo2aij/m2wucj2lLZaXAAo30S3i3ksWBjZUFvF/AOVJ9w+Q1UPqVo08ME
7300iPAmSjwSFw/d7adypnxqQRj03v2MddkCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBR0AriqDdHUaaiLnx9rbLfCG+rK0DAfBgNVHSMEGDAWgBTQ9WL/NvcRo+35n8gd
tU7TZjTYsTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNTM5LzBQVmlfemIzRWFQdC1aX0lIYlZPMDJZMDJMRS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzBQVmlfemIzRWFQdC1aX0lIYlZPMDJZ
MDJMRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC81MzkvZEFLNHFnM1IxR21vaTU4ZmEyeTN3aHZxeXRBLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBMaQgDANBgkqhkiG9w0BAQsFAAOCAQEAL3twWgawAjE4bIpd0MVcTJ8NruQv
CEvZzHiSL0d/9m2nhSsmfAMApYGoLj5kLXbMvW8dH1sAh9jdCOQb8ep6igXPuUQc
tfqABBW9AFWemD6jw0YPz7/J+nJ5p1fr/5ctUo22mLUzzr7r3G7u20NYHN9Q3VUr
X2APv5YIiI16+z83F7uYXTng4QBBMQFg3mAoYxuOKlt6cI14T85oFiRnFkVlg2LD
BzeXUMHGVMMm6VBighhHTYS+MFs5NhERrhfdWd7lUz3CUb66mflFaoWr/fZuPhGC
bgLZglnJpA1vSdEHzPSm74kW/po5hrEkzuY/CD7kR2ZHQglPHSHNkR32yg==
-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:15 2024 by rpki-client on console-fra.rpki-client.org