Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/hm-Pzamgwbo3fDYC3mjtxIeWxc8.roa
File:                     hm-Pzamgwbo3fDYC3mjtxIeWxc8.roa (raw, json)
Hash identifier:          Z9f6AKtzpSumNFGx7+DRnM8x526kL7N7u+hEbTgh67Y=
Subject key identifier:   86:6F:8F:CD:A9:A0:C1:BA:37:7C:36:02:DE:68:ED:C4:87:96:C5:CF
Certificate issuer:       /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial:       04CD
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/hm-Pzamgwbo3fDYC3mjtxIeWxc8.roa
Signing time:             Thu 29 Feb 2024 01:33:15 +0000
ROA not before:           Thu 29 Feb 2024 01:33:15 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     10010
IP address blocks:        220.216.0.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1229 (0x4cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
        Validity
            Not Before: Feb 29 01:33:15 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=866F8FCDA9A0C1BA377C3602DE68EDC48796C5CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5a:71:55:8f:99:80:68:be:80:36:d7:03:ae:
                    23:94:9e:eb:24:57:78:59:3a:39:64:d4:91:84:33:
                    37:26:1f:69:7e:1d:1e:ad:ee:ae:2e:1f:e0:fb:a3:
                    8b:86:27:27:3d:01:d4:d8:5d:df:01:70:4f:17:f6:
                    99:f4:4c:a0:5c:ed:4e:70:ad:fe:64:a9:17:0a:b0:
                    60:b6:73:bf:fa:e1:e4:8b:77:ae:b9:f0:ea:54:dc:
                    ca:87:97:c5:6b:9d:f1:cd:e7:c1:18:70:13:6a:9b:
                    50:c3:6c:8b:ac:66:8d:76:41:9b:63:2e:91:87:b5:
                    bb:4b:d4:d9:d5:b2:08:d7:18:73:a9:35:fa:e3:0a:
                    16:ac:bd:72:27:eb:d6:2c:71:09:8f:c2:b1:b5:e6:
                    6d:61:fe:71:ce:7a:a6:a3:99:c0:e6:25:f7:84:89:
                    b0:3f:89:77:a6:49:1e:c8:72:41:cb:81:af:da:d0:
                    07:a2:90:db:a9:27:f4:b0:55:73:47:f6:77:09:79:
                    eb:81:9f:db:b5:4f:0a:76:5d:f6:ef:a7:1c:f6:82:
                    4e:af:8c:20:41:83:e8:2a:cf:a8:52:36:56:7c:96:
                    4b:84:87:bf:b8:b8:b7:ab:09:09:50:45:36:8c:7b:
                    23:df:f2:f2:58:23:72:26:67:72:22:25:64:f4:93:
                    1d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:6F:8F:CD:A9:A0:C1:BA:37:7C:36:02:DE:68:ED:C4:87:96:C5:CF
            X509v3 Authority Key Identifier:
                keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/hm-Pzamgwbo3fDYC3mjtxIeWxc8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.216.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         11:cb:bd:be:2e:79:20:58:36:42:4e:33:87:24:25:1f:fc:ae:
         27:3a:51:de:34:f1:26:8c:19:6a:74:29:1e:6a:6b:ec:4e:43:
         c8:8a:00:d0:b8:11:07:8d:b6:bb:8b:12:56:50:da:89:18:80:
         b7:c2:f1:96:d5:1b:a7:64:08:9e:bc:cf:11:c7:69:c1:2b:ba:
         9a:bb:28:9c:d6:3c:77:12:e5:2f:9b:c6:c0:b0:c3:c0:be:a2:
         e9:1d:ea:30:11:35:df:4a:d3:57:36:03:e7:46:d0:c8:97:e2:
         67:0b:b7:c6:cb:6b:de:51:59:29:10:3b:e7:96:f8:57:16:c1:
         d6:bc:f4:22:80:fb:4b:71:c3:75:3a:b2:72:62:81:43:1e:3c:
         ac:96:a1:15:28:70:53:0e:95:dc:be:9e:f9:3a:a6:52:2a:15:
         f8:8c:d9:5d:88:74:55:76:d7:2d:ff:e9:95:0c:1a:3d:57:a4:
         db:10:dd:1f:f6:78:31:e6:c5:e9:14:ff:50:5c:eb:70:13:c7:
         75:65:12:e0:a9:2a:54:cb:fc:ff:68:26:23:44:87:e8:1e:33:
         be:d1:93:f5:f1:89:10:b8:f6:2e:b5:25:13:65:91:46:18:c4:
         f7:e9:e0:6e:a8:e9:f3:a2:0b:8d:16:5d:15:9d:b1:5c:f9:73:
         6c:14:8e:35
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBM0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQkJE
Q0Q1MjZCMDlFNzg5N0Y3MUZFMDQ4NThCRTc1QzA2RUM0RjEzQTAeFw0yNDAyMjkw
MTMzMTVaFw0yNTAyMTQwMTMwMDNaMDMxMTAvBgNVBAMTKDg2NkY4RkNEQTlBMEMx
QkEzNzdDMzYwMkRFNjhFREM0ODc5NkM1Q0YwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC3WnFVj5mAaL6ANtcDriOUnuskV3hZOjlk1JGEMzcmH2l+HR6t
7q4uH+D7o4uGJyc9AdTYXd8BcE8X9pn0TKBc7U5wrf5kqRcKsGC2c7/64eSLd665
8OpU3MqHl8VrnfHN58EYcBNqm1DDbIusZo12QZtjLpGHtbtL1NnVsgjXGHOpNfrj
ChasvXIn69YscQmPwrG15m1h/nHOeqajmcDmJfeEibA/iXemSR7IckHLga/a0Aei
kNupJ/SwVXNH9ncJeeuBn9u1Twp2Xfbvpxz2gk6vjCBBg+gqz6hSNlZ8lkuEh7+4
uLerCQlQRTaMeyPf8vJYI3ImZ3IiJWT0kx23AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUhm+Pzamgwbo3fDYC3mjtxIeWxc8wHwYDVR0jBBgwFoAUu9zVJrCeeJf3H+BI
WL51wG7E8TowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzU0NS91OXpWSnJDZWVKZjNILUJJV0w1MXdHN0U4VG8uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC91OXpWSnJDZWVKZjNILUJJV0w1MXdH
N0U4VG8uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNTQ1L2htLVB6YW1nd2JvM2ZEWUMzbWp0eEllV3hjOC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAfc2AAwDQYJKoZIhvcNAQELBQADggEBABHLvb4ueSBYNkJOM4ckJR/8ric6
Ud408SaMGWp0KR5qa+xOQ8iKANC4EQeNtruLElZQ2okYgLfC8ZbVG6dkCJ68zxHH
acErupq7KJzWPHcS5S+bxsCww8C+oukd6jARNd9K01c2A+dG0MiX4mcLt8bLa95R
WSkQO+eW+FcWwda89CKA+0txw3U6snJigUMePKyWoRUocFMOldy+nvk6plIqFfiM
2V2IdFV21y3/6ZUMGj1XpNsQ3R/2eDHmxekU/1Bc63ATx3VlEuCpKlTL/P9oJiNE
h+geM77Rk/XxiRC49i61JRNlkUYYxPfp4G6o6fOiC40WXRWdsVz5c2wUjjU=
-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:40 2024 by rpki-client on console-ams.rpki-client.org