Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/6WmV2iguMFXBErOZlybrVK3-i10.roa
File:                     6WmV2iguMFXBErOZlybrVK3-i10.roa (raw, json)
Hash identifier:          8xRKtAo3x+jo4UcBKzEnXf36d0r8cz529c/9iCtJr6k=
Subject key identifier:   E9:69:95:DA:28:2E:30:55:C1:12:B3:99:97:26:EB:54:AD:FE:8B:5D
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0501
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/6WmV2iguMFXBErOZlybrVK3-i10.roa
Signing time:             Thu 29 Feb 2024 01:39:17 +0000
ROA not before:           Thu 29 Feb 2024 01:39:17 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     10010
IP address blocks:        219.126.0.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1281 (0x501)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Feb 29 01:39:17 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=E96995DA282E3055C112B3999726EB54ADFE8B5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7b:49:40:8b:8a:86:d6:94:3e:ab:77:7c:10:
                    6a:d3:9a:bd:c2:6e:f1:9c:bd:8a:68:82:79:df:ea:
                    9d:b3:f1:e4:ff:05:c7:55:28:57:29:22:be:90:e5:
                    6d:ad:37:7f:f0:fb:57:3b:55:b4:3d:b7:c9:aa:e6:
                    8b:7b:59:65:cb:cb:2d:13:f7:c6:b3:4b:9f:bc:4d:
                    e6:47:2d:f4:f0:9e:b4:0d:eb:e1:00:76:51:66:5e:
                    11:20:86:c4:4a:ad:30:bf:c5:6b:50:05:95:f1:3e:
                    e7:e5:67:ca:82:ff:9b:5d:7a:0f:1d:e9:51:e4:ac:
                    ce:aa:0f:56:8e:7c:cc:f5:c8:01:ec:26:d7:c2:9d:
                    50:ed:d7:4e:0c:90:7f:f3:17:e0:4d:2f:d7:90:1c:
                    7f:28:7f:c4:02:98:ce:52:77:3e:11:71:30:36:2d:
                    74:8f:d0:f7:77:5f:d9:bf:84:ff:d4:ab:a3:bf:5e:
                    fe:e6:19:81:8d:5b:f5:eb:c0:e3:e2:a3:ea:3c:f6:
                    68:83:9a:96:6d:e8:38:ce:67:d5:89:98:31:a1:24:
                    09:16:5b:f4:8a:3a:7b:f2:9a:78:49:eb:5b:bd:40:
                    99:72:b5:13:18:de:0d:0e:60:b7:86:d6:96:c1:03:
                    36:c7:47:04:96:49:d7:b3:3e:1f:c8:8b:c3:11:e0:
                    5c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:69:95:DA:28:2E:30:55:C1:12:B3:99:97:26:EB:54:AD:FE:8B:5D
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/6WmV2iguMFXBErOZlybrVK3-i10.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.126.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         5d:20:14:c7:b4:a9:80:d5:0a:6e:aa:aa:52:6e:1a:81:bf:05:
         3a:b8:d5:02:e4:31:45:20:3b:04:83:69:b1:36:ca:f8:b0:9c:
         4e:6b:2a:da:fc:8a:9d:b6:9d:83:5a:ae:8f:c0:91:83:4d:57:
         2f:c0:29:43:3f:27:e2:eb:eb:89:17:70:f3:21:6c:cf:01:50:
         d0:6a:97:7b:e2:03:59:cd:c8:40:73:a4:3b:44:74:3d:8f:a5:
         ad:8f:ea:33:d2:ef:93:e2:93:4a:0c:38:4d:18:07:ab:af:8b:
         10:df:52:1d:bb:d6:60:1d:2e:a7:14:eb:c2:06:c2:e5:a1:43:
         f6:ae:23:aa:7e:c3:57:3e:da:0e:d3:7e:05:9c:e1:3a:40:68:
         55:93:8d:9a:e2:83:d9:a8:be:75:ba:0e:4a:cf:ae:b1:e2:f8:
         4a:a6:05:5a:78:be:2b:40:bf:80:5e:83:5a:69:2d:ab:61:12:
         b9:24:62:fb:43:d9:2f:8c:90:9c:1b:60:19:95:21:e2:da:2d:
         d1:30:92:9a:2d:95:05:4f:40:18:7a:62:1d:8b:24:b5:c5:5f:
         d3:ec:33:e1:17:f9:d3:70:8d:8e:3f:8f:57:4d:8e:ea:c5:9e:
         49:dd:13:2e:30:e5:70:84:33:be:1a:fd:d9:b7:7a:c2:0d:2c:
         af:f7:82:12
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBQEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE
Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yNDAyMjkw
MTM5MTdaFw0yNTAyMTQwMTMwMDNaMDMxMTAvBgNVBAMTKEU5Njk5NURBMjgyRTMw
NTVDMTEyQjM5OTk3MjZFQjU0QURGRThCNUQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC9e0lAi4qG1pQ+q3d8EGrTmr3CbvGcvYpognnf6p2z8eT/BcdV
KFcpIr6Q5W2tN3/w+1c7VbQ9t8mq5ot7WWXLyy0T98azS5+8TeZHLfTwnrQN6+EA
dlFmXhEghsRKrTC/xWtQBZXxPuflZ8qC/5tdeg8d6VHkrM6qD1aOfMz1yAHsJtfC
nVDt104MkH/zF+BNL9eQHH8of8QCmM5Sdz4RcTA2LXSP0Pd3X9m/hP/Uq6O/Xv7m
GYGNW/XrwOPio+o89miDmpZt6DjOZ9WJmDGhJAkWW/SKOnvymnhJ61u9QJlytRMY
3g0OYLeG1pbBAzbHRwSWSdezPh/Ii8MR4Fz5AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU6WmV2iguMFXBErOZlybrVK3+i10wHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI
WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH
N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNTQ1LzZXbVYyaWd1TUZYQkVyT1pseWJyVkszLWkxMC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAfbfgAwDQYJKoZIhvcNAQELBQADggEBAF0gFMe0qYDVCm6qqlJuGoG/BTq4
1QLkMUUgOwSDabE2yviwnE5rKtr8ip22nYNaro/AkYNNVy/AKUM/J+Lr64kXcPMh
bM8BUNBql3viA1nNyEBzpDtEdD2Ppa2P6jPS75Pik0oMOE0YB6uvixDfUh271mAd
LqcU68IGwuWhQ/auI6p+w1c+2g7TfgWc4TpAaFWTjZrig9movnW6DkrPrrHi+Eqm
BVp4vitAv4Beg1ppLathErkkYvtD2S+MkJwbYBmVIeLaLdEwkpotlQVPQBh6Yh2L
JLXFX9PsM+EX+dNwjY4/j1dNjurFnkndEy4w5XCEM74a/dm3esINLK/3ghI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 15:06:48 2024 by rpki-client on console-ams.rpki-client.org