Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/AbA5YwkQheiAP9I_Kr7h1y9Y-ak.roa
File:                     AbA5YwkQheiAP9I_Kr7h1y9Y-ak.roa (raw, json)
Hash identifier:          +51fMZcMq+GPNJ5orE3qrr8WSODpHjAUNkcmk4FFBT4=
Subject key identifier:   01:B0:39:63:09:10:85:E8:80:3F:D2:3F:2A:BE:E1:D7:2F:58:F9:A9
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       04A3
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/AbA5YwkQheiAP9I_Kr7h1y9Y-ak.roa
Signing time:             Thu 29 Feb 2024 01:29:02 +0000
ROA not before:           Thu 29 Feb 2024 01:29:02 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     10010
IP address blocks:        42.127.128.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1187 (0x4a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Feb 29 01:29:02 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=01B03963091085E8803FD23F2ABEE1D72F58F9A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a0:16:b8:4f:bb:d5:2d:06:92:c3:22:46:df:
                    0e:1b:08:27:e0:ab:2d:37:0d:d5:5e:8d:97:a6:21:
                    e3:75:2e:ae:96:c6:15:23:d8:ce:ec:ff:6f:f6:5f:
                    7f:6c:1b:e8:f2:a4:bb:e4:2c:78:ce:31:0d:74:12:
                    fd:34:be:0f:a6:6d:c0:f7:5f:ea:39:61:00:c2:1f:
                    9e:ef:58:79:c0:0f:b7:9d:5c:7f:a8:f5:47:23:89:
                    ea:8c:2b:70:61:82:4b:b7:9f:bf:3d:97:98:16:1d:
                    95:3e:aa:12:a0:6c:ca:bf:19:fb:2e:bf:13:be:fa:
                    eb:d6:c9:91:38:6a:0f:49:4d:94:c2:67:3b:20:34:
                    41:44:f3:99:24:bd:b1:b5:e5:df:2f:51:df:de:45:
                    0e:f4:da:2a:4f:3a:0c:56:df:a3:c5:8b:fe:0f:d6:
                    5e:90:5e:fb:8a:c3:95:94:22:c9:e0:1a:36:fa:35:
                    ef:d5:cb:cb:49:49:22:3b:80:09:07:9e:3d:0c:b7:
                    46:d5:0c:f4:4a:73:9b:c2:9f:71:49:16:5d:07:d1:
                    c0:65:d7:62:3b:83:b1:e3:f9:c1:e2:cc:f8:35:07:
                    32:3d:9e:e6:e3:6d:be:36:95:29:b2:3e:1f:9e:d0:
                    d7:a3:22:50:9e:a0:26:db:e0:60:8b:da:af:b1:37:
                    b6:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:B0:39:63:09:10:85:E8:80:3F:D2:3F:2A:BE:E1:D7:2F:58:F9:A9
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/AbA5YwkQheiAP9I_Kr7h1y9Y-ak.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  42.127.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         59:7e:9e:e4:d0:45:e1:98:cb:34:a5:e7:bd:3f:76:60:8c:1d:
         aa:9a:d5:e7:4a:59:94:fa:22:82:5d:c4:6a:fa:b0:c4:bc:af:
         e4:10:1b:3c:66:05:b4:5a:c3:47:47:b2:23:a6:f1:5d:c6:d8:
         63:b7:1f:0d:1e:12:76:de:6f:62:9f:67:6c:fe:9f:75:c7:c5:
         7f:80:5d:d3:75:fb:28:f2:ef:6a:42:bc:10:34:31:d1:d9:d7:
         31:ba:c2:3d:c0:a3:f5:41:17:32:4e:8e:5a:14:6a:9d:e2:e4:
         a9:ea:e3:06:9c:c8:13:1c:03:84:f3:44:43:21:e0:27:86:21:
         f7:b5:74:8e:44:8a:8d:03:5b:cb:43:36:a4:5c:4a:d5:a4:63:
         b9:b2:f1:7a:2d:a3:c3:ba:c3:2d:ed:f3:b6:12:fe:7c:fb:86:
         31:75:82:9e:2f:1c:c7:7f:bb:e9:48:03:d0:ff:62:8f:4c:31:
         ab:a9:70:e4:a5:63:4b:ac:a9:30:3d:f0:99:56:c4:5e:6d:94:
         f4:9c:50:50:c6:06:86:cd:41:d8:af:02:b4:79:d2:45:36:48:
         97:b7:2b:4e:0f:2b:ac:ac:a1:8a:ac:34:3b:30:2d:6d:68:47:
         d2:db:ea:b2:71:52:9c:c1:47:7d:c7:e3:e4:fa:02:44:0f:a6:
         2a:14:16:5c
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBKMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE
Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yNDAyMjkw
MTI5MDJaFw0yNTAyMTQwMTMwMDNaMDMxMTAvBgNVBAMTKDAxQjAzOTYzMDkxMDg1
RTg4MDNGRDIzRjJBQkVFMUQ3MkY1OEY5QTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDMoBa4T7vVLQaSwyJG3w4bCCfgqy03DdVejZemIeN1Lq6WxhUj
2M7s/2/2X39sG+jypLvkLHjOMQ10Ev00vg+mbcD3X+o5YQDCH57vWHnAD7edXH+o
9UcjieqMK3Bhgku3n789l5gWHZU+qhKgbMq/GfsuvxO++uvWyZE4ag9JTZTCZzsg
NEFE85kkvbG15d8vUd/eRQ702ipPOgxW36PFi/4P1l6QXvuKw5WUIsngGjb6Ne/V
y8tJSSI7gAkHnj0Mt0bVDPRKc5vCn3FJFl0H0cBl12I7g7Hj+cHizPg1BzI9nubj
bb42lSmyPh+e0NejIlCeoCbb4GCL2q+xN7YtAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUAbA5YwkQheiAP9I/Kr7h1y9Y+akwHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI
WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH
N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNTQ1L0FiQTVZd2tRaGVpQVA5SV9LcjdoMXk5WS1hay5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAYqf4AwDQYJKoZIhvcNAQELBQADggEBAFl+nuTQReGYyzSl570/dmCMHaqa
1edKWZT6IoJdxGr6sMS8r+QQGzxmBbRaw0dHsiOm8V3G2GO3Hw0eEnbeb2KfZ2z+
n3XHxX+AXdN1+yjy72pCvBA0MdHZ1zG6wj3Ao/VBFzJOjloUap3i5Knq4wacyBMc
A4TzREMh4CeGIfe1dI5Eio0DW8tDNqRcStWkY7my8Xoto8O6wy3t87YS/nz7hjF1
gp4vHMd/u+lIA9D/Yo9MMaupcOSlY0usqTA98JlWxF5tlPScUFDGBobNQdivArR5
0kU2SJe3K04PK6ysoYqsNDswLW1oR9Lb6rJxUpzBR33H4+T6AkQPpioUFlw=
-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:15 2024 by rpki-client on console-fra.rpki-client.org