Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/5462/W3Ysy4WiYsbeK80cS1aytwyCvxo.roa
File:                     W3Ysy4WiYsbeK80cS1aytwyCvxo.roa (raw, json)
Hash identifier:          abqDTPxy3hHb2xghJG0HJkR0Aw54V915etRJyucoegk=
Subject key identifier:   5B:76:2C:CB:85:A2:62:C6:DE:2B:CD:1C:4B:56:B2:B7:0C:82:BF:1A
Certificate issuer:       /CN=307A628C03C14D108258C57929726FF0FCD2104E
Certificate serial:       02
Authority key identifier: 30:7A:62:8C:03:C1:4D:10:82:58:C5:79:29:72:6F:F0:FC:D2:10:4E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/MHpijAPBTRCCWMV5KXJv8PzSEE4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5462/W3Ysy4WiYsbeK80cS1aytwyCvxo.roa
Signing time:             Tue 19 Dec 2023 15:01:06 +0000
ROA not before:           Tue 19 Dec 2023 15:01:06 +0000
ROA not after:            Wed 18 Dec 2024 14:16:53 +0000
asID:                     45679
IP address blocks:        103.167.46.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5462/MHpijAPBTRCCWMV5KXJv8PzSEE4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5462/MHpijAPBTRCCWMV5KXJv8PzSEE4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/MHpijAPBTRCCWMV5KXJv8PzSEE4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=307A628C03C14D108258C57929726FF0FCD2104E
        Validity
            Not Before: Dec 19 15:01:06 2023 GMT
            Not After : Dec 18 14:16:53 2024 GMT
        Subject: CN=5B762CCB85A262C6DE2BCD1C4B56B2B70C82BF1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e9:bc:0a:58:07:32:53:e7:ed:3f:dc:36:70:
                    7f:d4:ae:02:f5:af:47:09:bd:4f:c2:1e:2b:f5:e4:
                    e9:74:b4:58:83:29:04:d9:e8:05:c4:66:ca:49:dd:
                    a2:27:f2:50:ad:d1:ac:82:95:cc:8c:23:16:c9:10:
                    6d:18:e2:8a:36:cd:23:3a:69:4f:44:d0:af:a8:00:
                    7e:22:0e:51:21:cc:b7:8e:7e:40:f0:1f:d3:f5:14:
                    a2:ff:06:ed:8f:19:56:4c:26:92:2d:b2:8f:c7:b1:
                    12:02:fc:f2:ba:7c:6c:7e:f7:98:1b:61:06:6e:52:
                    f4:79:2f:13:91:c3:44:00:71:f2:f4:53:74:fa:55:
                    27:7e:cd:ca:43:5b:b2:af:b6:01:db:b3:4b:2d:67:
                    21:56:94:d4:45:19:3f:f3:63:ae:8a:d8:db:ac:87:
                    0d:d5:15:85:d3:e8:a9:71:ab:ea:df:3b:9a:d9:f5:
                    84:93:bb:00:74:e3:27:05:62:44:d9:d3:e5:53:ea:
                    cc:2e:d1:84:b3:d4:0b:5d:31:40:d6:65:a2:03:48:
                    63:bd:d5:56:a7:26:ef:34:e3:61:db:2d:de:33:96:
                    cd:e9:3f:c7:d9:55:c4:9f:19:9f:83:bb:87:07:73:
                    72:2a:97:06:be:47:3f:8b:e5:98:c1:51:4f:27:cf:
                    aa:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:76:2C:CB:85:A2:62:C6:DE:2B:CD:1C:4B:56:B2:B7:0C:82:BF:1A
            X509v3 Authority Key Identifier:
                keyid:30:7A:62:8C:03:C1:4D:10:82:58:C5:79:29:72:6F:F0:FC:D2:10:4E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5462/MHpijAPBTRCCWMV5KXJv8PzSEE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/MHpijAPBTRCCWMV5KXJv8PzSEE4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5462/W3Ysy4WiYsbeK80cS1aytwyCvxo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ce:47:85:93:1c:ba:7e:73:fd:64:4d:56:47:13:1a:42:5f:93:
         d5:ae:1f:d3:25:5a:27:59:58:81:8a:96:56:dc:f9:bb:81:eb:
         d6:fb:7a:5d:70:55:77:aa:d5:fb:b7:5a:b2:13:6b:85:6f:05:
         40:52:c5:99:bb:55:d3:84:44:bf:e1:b8:ea:70:39:ad:aa:d4:
         83:f3:fa:c7:0d:56:f4:8e:69:43:30:ad:f9:f1:88:8b:da:1a:
         97:f3:64:35:75:f4:0f:be:17:0b:d3:69:d8:96:67:57:32:9a:
         bc:99:63:f2:87:08:da:cf:6a:a5:62:ba:0a:d1:30:18:b4:36:
         ba:42:52:7d:7a:b9:a2:a6:d1:5b:9a:05:fd:93:a1:b7:9b:18:
         a2:eb:4c:99:e4:f8:6a:29:5c:e5:6a:86:6e:43:e5:6e:e1:41:
         c1:8e:aa:97:cc:fa:67:89:e9:cf:16:21:b7:1f:4e:91:8d:5c:
         2b:69:89:ce:95:9d:7e:d0:f2:02:d9:b2:68:e3:62:1c:b3:42:
         82:fa:9e:d5:e9:de:a8:b6:08:5d:2d:65:62:fc:f2:51:6d:c7:
         2c:f9:ea:a5:9f:f6:d6:bc:f8:a1:e8:06:06:34:b0:14:dd:e8:
         a7:03:f0:b1:a6:40:b0:2d:22:06:22:7b:c2:1d:7a:76:85:dd:
         e2:80:09:59
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgIBAjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzMDdB
NjI4QzAzQzE0RDEwODI1OEM1NzkyOTcyNkZGMEZDRDIxMDRFMB4XDTIzMTIxOTE1
MDEwNloXDTI0MTIxODE0MTY1M1owMzExMC8GA1UEAxMoNUI3NjJDQ0I4NUEyNjJD
NkRFMkJDRDFDNEI1NkIyQjcwQzgyQkYxQTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAL7pvApYBzJT5+0/3DZwf9SuAvWvRwm9T8IeK/Xk6XS0WIMpBNno
BcRmykndoifyUK3RrIKVzIwjFskQbRjiijbNIzppT0TQr6gAfiIOUSHMt45+QPAf
0/UUov8G7Y8ZVkwmki2yj8exEgL88rp8bH73mBthBm5S9HkvE5HDRABx8vRTdPpV
J37NykNbsq+2AduzSy1nIVaU1EUZP/NjrorY26yHDdUVhdPoqXGr6t87mtn1hJO7
AHTjJwViRNnT5VPqzC7RhLPUC10xQNZlogNIY73VVqcm7zTjYdst3jOWzek/x9lV
xJ8Zn4O7hwdzciqXBr5HP4vlmMFRTyfPqs0CAwEAAaOCAiYwggIiMB0GA1UdDgQW
BBRbdizLhaJixt4rzRxLVrK3DIK/GjAfBgNVHSMEGDAWgBQwemKMA8FNEIJYxXkp
cm/w/NIQTjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa
oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNTQ2Mi9NSHBpakFQQlRSQ0NXTVY1S1hKdjhQelNFRTQuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9NSHBpakFQQlRSQ0NXTVY1S1hKdjhQ
elNFRTQuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI
KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNTQ2Mi9XM1lzeTRXaVlzYmVLODBjUzFheXR3eUN2eG8ucm9h
MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv
cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA
ATAGAwQAZ6cuMA0GCSqGSIb3DQEBCwUAA4IBAQDOR4WTHLp+c/1kTVZHExpCX5PV
rh/TJVonWViBipZW3Pm7gevW+3pdcFV3qtX7t1qyE2uFbwVAUsWZu1XThES/4bjq
cDmtqtSD8/rHDVb0jmlDMK358YiL2hqX82Q1dfQPvhcL02nYlmdXMpq8mWPyhwja
z2qlYroK0TAYtDa6QlJ9ermiptFbmgX9k6G3mxii60yZ5PhqKVzlaoZuQ+Vu4UHB
jqqXzPpnienPFiG3H06RjVwraYnOlZ1+0PIC2bJo42Ics0KC+p7V6d6otghdLWVi
/PJRbccs+eqln/bWvPih6AYGNLAU3einA/CxpkCwLSIGInvCHXp2hd3igAlZ
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:51 2024 by rpki-client on console-fra.rpki-client.org