Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/9lUymC1uWvn_cPO4mqLGvTBWrMs.roa
File:                     9lUymC1uWvn_cPO4mqLGvTBWrMs.roa (raw, json)
Hash identifier:          yOJojKgAUeyjLA9I1xN3LyJKhpSJu4SG4ccNM3nTEyQ=
Subject key identifier:   F6:55:32:98:2D:6E:5A:F9:FF:70:F3:B8:9A:A2:C6:BD:30:56:AC:CB
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0495
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/9lUymC1uWvn_cPO4mqLGvTBWrMs.roa
Signing time:             Thu 29 Feb 2024 01:28:55 +0000
ROA not before:           Thu 29 Feb 2024 01:28:55 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     10010
IP address blocks:        220.216.124.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1173 (0x495)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Feb 29 01:28:55 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=F65532982D6E5AF9FF70F3B89AA2C6BD3056ACCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:31:fe:ee:ed:51:3b:79:02:ca:cf:b2:19:db:
                    53:83:1f:37:c0:ef:04:2b:94:5f:1a:2d:18:54:56:
                    2e:74:dd:81:22:bd:75:df:ff:39:7f:2c:00:8c:34:
                    b6:aa:c1:65:29:29:8c:cd:49:50:17:ff:75:bb:85:
                    16:46:01:fc:b5:a3:d5:90:f2:6c:aa:23:b0:c1:ee:
                    83:e9:a2:47:0f:6e:34:55:4a:b7:d7:7b:65:f8:7b:
                    38:68:dd:34:b6:7b:1c:3a:dc:20:32:18:2e:11:f0:
                    9c:bc:a1:fc:c8:c6:0e:47:65:41:80:39:3e:2d:1a:
                    42:f0:34:0f:06:6d:eb:0b:cc:71:78:3e:db:97:36:
                    ae:35:e1:fc:e2:d1:9b:86:5d:d6:f1:3b:61:f9:dc:
                    ef:ed:8d:0c:8e:75:f6:42:c8:b0:fc:08:07:a0:5b:
                    dd:99:93:9b:0c:7c:fe:d4:84:9a:8d:f2:65:3d:8d:
                    d5:4e:18:73:0b:5d:f7:36:56:69:15:4c:ae:a2:f1:
                    50:71:36:81:04:f9:6d:ea:9f:8b:ac:bd:99:c4:3b:
                    78:41:80:c1:88:02:30:64:ae:2a:7f:24:40:52:66:
                    b1:d5:42:49:48:f4:ac:6f:f9:c5:6d:10:90:70:f0:
                    80:2e:23:1a:7b:2e:a6:2b:18:5b:6d:d7:e5:d9:45:
                    6b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:55:32:98:2D:6E:5A:F9:FF:70:F3:B8:9A:A2:C6:BD:30:56:AC:CB
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/9lUymC1uWvn_cPO4mqLGvTBWrMs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.216.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c1:20:25:1f:30:24:a8:6e:b0:7b:b8:3a:9d:57:da:6b:ce:38:
         48:16:52:e4:3c:a1:a6:73:a7:01:cc:1c:94:03:2d:b0:54:88:
         30:8c:0b:1f:3e:cf:9d:8f:f9:b7:d8:29:5d:7c:c8:d7:e6:d7:
         6a:6e:32:39:82:e6:b2:07:9a:81:fc:80:87:3d:61:92:cf:37:
         0e:b0:ca:dd:9e:3c:b8:61:8b:8d:44:6b:f0:fd:9d:05:41:9d:
         7f:77:01:94:33:46:01:cc:95:26:cf:05:43:75:e5:63:38:dc:
         96:04:b8:4d:f6:08:1c:cc:f1:6a:e5:fc:cf:33:a4:ed:eb:17:
         a7:bd:1e:b5:80:b9:a6:5c:86:a0:67:68:fb:72:70:23:16:98:
         64:fb:14:23:b6:35:62:69:02:71:d1:39:e9:5c:3d:ea:82:e6:
         0e:37:e7:f5:d5:c6:8b:c1:11:06:07:b3:ad:00:e1:ce:2a:92:
         07:4f:1a:c4:8d:b0:9d:f6:0e:7f:b2:1b:8c:96:97:69:87:39:
         d0:16:73:c8:99:84:c1:e3:bf:ca:bc:e7:4e:c5:70:80:87:9f:
         ec:22:ec:c2:5d:60:a5:85:a5:42:42:15:7e:7b:d1:25:52:07:
         ea:f0:a6:1e:8d:f2:2e:dd:66:91:eb:e5:1f:ce:b6:7a:6c:22:
         74:9b:0d:9c
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBJUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE
Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yNDAyMjkw
MTI4NTVaFw0yNTAyMTQwMTMwMDNaMDMxMTAvBgNVBAMTKEY2NTUzMjk4MkQ2RTVB
RjlGRjcwRjNCODlBQTJDNkJEMzA1NkFDQ0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDxMf7u7VE7eQLKz7IZ21ODHzfA7wQrlF8aLRhUVi503YEivXXf
/zl/LACMNLaqwWUpKYzNSVAX/3W7hRZGAfy1o9WQ8myqI7DB7oPpokcPbjRVSrfX
e2X4ezho3TS2exw63CAyGC4R8Jy8ofzIxg5HZUGAOT4tGkLwNA8GbesLzHF4PtuX
Nq414fzi0ZuGXdbxO2H53O/tjQyOdfZCyLD8CAegW92Zk5sMfP7UhJqN8mU9jdVO
GHMLXfc2VmkVTK6i8VBxNoEE+W3qn4usvZnEO3hBgMGIAjBkrip/JEBSZrHVQklI
9Kxv+cVtEJBw8IAuIxp7LqYrGFtt1+XZRWuDAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU9lUymC1uWvn/cPO4mqLGvTBWrMswHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI
WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH
N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNTQ1LzlsVXltQzF1V3ZuX2NQTzRtcUxHdlRCV3JNcy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBALc2HwwDQYJKoZIhvcNAQELBQADggEBAMEgJR8wJKhusHu4Op1X2mvOOEgW
UuQ8oaZzpwHMHJQDLbBUiDCMCx8+z52P+bfYKV18yNfm12puMjmC5rIHmoH8gIc9
YZLPNw6wyt2ePLhhi41Ea/D9nQVBnX93AZQzRgHMlSbPBUN15WM43JYEuE32CBzM
8Wrl/M8zpO3rF6e9HrWAuaZchqBnaPtycCMWmGT7FCO2NWJpAnHROelcPeqC5g43
5/XVxovBEQYHs60A4c4qkgdPGsSNsJ32Dn+yG4yWl2mHOdAWc8iZhMHjv8q8507F
cICHn+wi7MJdYKWFpUJCFX570SVSB+rwph6N8i7dZpHr5R/OtnpsInSbDZw=
-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:47 2024 by rpki-client on console-ams.rpki-client.org