Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/Da8HrozGAUTWGrvM5N8IbMR0LME.roa
File:                     Da8HrozGAUTWGrvM5N8IbMR0LME.roa (raw, json)
Hash identifier:          FDacg4AtttkCNn00kfP0FiODozZtUWtwwrZ2VVKFuZE=
Subject key identifier:   0D:AF:07:AE:8C:C6:01:44:D6:1A:BB:CC:E4:DF:08:6C:C4:74:2C:C1
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       0510
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/Da8HrozGAUTWGrvM5N8IbMR0LME.roa
Signing time:             Thu 29 Feb 2024 01:39:24 +0000
ROA not before:           Thu 29 Feb 2024 01:39:24 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     10010
IP address blocks:        220.148.96.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1296 (0x510)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Feb 29 01:39:24 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=0DAF07AE8CC60144D61ABBCCE4DF086CC4742CC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:57:04:28:38:fa:74:fc:d5:33:85:fb:68:34:
                    be:f9:fd:a1:ab:bb:1b:f5:fc:ab:34:06:ab:13:93:
                    d3:c2:d7:76:23:34:0c:07:00:83:77:33:19:5d:ea:
                    d8:8c:62:b9:9f:d2:e3:f9:08:64:5b:dc:08:d9:a7:
                    17:7e:f6:5c:08:08:e7:8c:36:62:0c:74:62:ca:92:
                    4b:58:e2:32:97:d2:88:99:11:da:aa:ce:fe:a5:9a:
                    b6:f3:6f:90:39:b9:87:c9:9f:6e:7d:c7:d2:8c:57:
                    05:42:55:15:47:0f:7e:1d:d2:0c:c0:25:63:30:03:
                    ca:e5:07:50:9f:bb:75:74:e7:68:d8:7b:0a:92:c6:
                    70:6d:7a:26:62:23:bd:43:22:ed:02:9e:f0:e2:cc:
                    7d:68:c5:a2:01:08:e1:45:e9:eb:17:5b:b3:df:f2:
                    13:28:1f:87:7b:c6:e4:3e:81:a2:cf:6b:89:6e:56:
                    dc:8f:04:11:25:b5:88:66:e3:46:57:63:34:83:e4:
                    f9:f8:71:f5:32:87:d0:d0:1a:75:8f:3e:b9:a0:1e:
                    d0:5c:f6:d0:a8:b6:99:89:b7:61:1e:40:3d:f6:c8:
                    b6:7f:15:52:b7:dd:ce:08:e7:91:36:36:a3:01:9b:
                    1c:14:ed:8f:e1:0c:6f:25:bf:24:be:42:e7:73:3a:
                    46:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:AF:07:AE:8C:C6:01:44:D6:1A:BB:CC:E4:DF:08:6C:C4:74:2C:C1
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/Da8HrozGAUTWGrvM5N8IbMR0LME.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.148.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         86:7f:b6:75:54:74:18:07:59:91:00:91:7d:87:50:83:14:46:
         8a:3b:f6:15:12:64:8c:a9:4b:03:57:c3:b3:12:fd:0e:ac:23:
         67:ef:89:a0:6b:f2:1f:c5:1b:a0:6a:ee:df:5e:98:86:ec:d3:
         e4:d6:b0:82:02:8c:bb:db:b3:cf:60:3f:cc:8c:f7:a7:82:bc:
         a0:34:c1:fa:76:9a:c9:7e:d7:96:66:82:97:06:50:3c:93:7c:
         f9:f2:86:68:b3:b6:79:20:a0:ba:45:49:62:e5:1c:c9:10:cc:
         32:77:c9:78:b6:e8:72:b2:b3:ad:8a:15:c6:63:d9:2f:62:1c:
         d6:e7:45:1e:fc:6d:c9:75:5c:db:9f:4a:01:83:39:b5:f1:44:
         36:ae:fe:8a:a0:8d:e1:8d:29:36:c1:06:6a:08:de:25:f1:21:
         db:27:36:43:55:38:34:42:32:e2:e7:bd:3f:a7:12:23:21:85:
         bb:f2:5c:83:1e:57:08:2d:3f:00:26:4a:5a:f2:01:da:95:e3:
         86:f9:38:ac:5a:08:65:1a:a5:88:15:38:ac:8d:26:8b:a2:9c:
         58:a6:4d:49:41:32:dc:66:2f:50:94:4e:fb:13:45:74:d2:8a:
         a4:f9:a3:1d:1e:41:6b:91:ac:a7:a4:37:61:36:d6:4c:53:ff:
         5c:1d:0b:86
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBRAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE
Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yNDAyMjkw
MTM5MjRaFw0yNTAyMTQwMTMwMDNaMDMxMTAvBgNVBAMTKDBEQUYwN0FFOENDNjAx
NDRENjFBQkJDQ0U0REYwODZDQzQ3NDJDQzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDCVwQoOPp0/NUzhftoNL75/aGruxv1/Ks0BqsTk9PC13YjNAwH
AIN3Mxld6tiMYrmf0uP5CGRb3AjZpxd+9lwICOeMNmIMdGLKkktY4jKX0oiZEdqq
zv6lmrbzb5A5uYfJn259x9KMVwVCVRVHD34d0gzAJWMwA8rlB1Cfu3V052jYewqS
xnBteiZiI71DIu0CnvDizH1oxaIBCOFF6esXW7Pf8hMoH4d7xuQ+gaLPa4luVtyP
BBEltYhm40ZXYzSD5Pn4cfUyh9DQGnWPPrmgHtBc9tCotpmJt2EeQD32yLZ/FVK3
3c4I55E2NqMBmxwU7Y/hDG8lvyS+QudzOkbHAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUDa8HrozGAUTWGrvM5N8IbMR0LMEwHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI
WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH
N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNTQ1L0RhOEhyb3pHQVVUV0dydk01TjhJYk1SMExNRS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAPclGAwDQYJKoZIhvcNAQELBQADggEBAIZ/tnVUdBgHWZEAkX2HUIMURoo7
9hUSZIypSwNXw7MS/Q6sI2fviaBr8h/FG6Bq7t9emIbs0+TWsIICjLvbs89gP8yM
96eCvKA0wfp2msl+15ZmgpcGUDyTfPnyhmiztnkgoLpFSWLlHMkQzDJ3yXi26HKy
s62KFcZj2S9iHNbnRR78bcl1XNufSgGDObXxRDau/oqgjeGNKTbBBmoI3iXxIdsn
NkNVODRCMuLnvT+nEiMhhbvyXIMeVwgtPwAmSlryAdqV44b5OKxaCGUapYgVOKyN
JouinFimTUlBMtxmL1CUTvsTRXTSiqT5ox0eQWuRrKekN2E21kxT/1wdC4Y=
-----END CERTIFICATE-----
Generated at Thu Jun 6 14:56:22 2024 by rpki-client on console-fra.rpki-client.org