Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/554/U_yxAtuenx4E4Ejd1m6k_sRPyVg.roa
File:                     U_yxAtuenx4E4Ejd1m6k_sRPyVg.roa (raw, json)
Hash identifier:          swMtQXJWBRHDJ95tKuYiuEXX6/rEuTUasqNaIfS7GZc=
Subject key identifier:   53:FC:B1:02:DB:9E:9F:1E:04:E0:48:DD:D6:6E:A4:FE:C4:4F:C9:58
Certificate issuer:       /CN=96D92CE24CF3FCC753285CEBAF3FEC1D72581A81
Certificate serial:       39
Authority key identifier: 96:D9:2C:E2:4C:F3:FC:C7:53:28:5C:EB:AF:3F:EC:1D:72:58:1A:81
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ltks4kzz_MdTKFzrrz_sHXJYGoE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/554/U_yxAtuenx4E4Ejd1m6k_sRPyVg.roa
Signing time:             Sun 30 Jun 2024 01:32:03 +0000
ROA not before:           Sun 30 Jun 2024 01:32:03 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     131921
IP address blocks:        153.122.208.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/554/ltks4kzz_MdTKFzrrz_sHXJYGoE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/554/ltks4kzz_MdTKFzrrz_sHXJYGoE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ltks4kzz_MdTKFzrrz_sHXJYGoE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57 (0x39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96D92CE24CF3FCC753285CEBAF3FEC1D72581A81
        Validity
            Not Before: Jun 30 01:32:03 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=53FCB102DB9E9F1E04E048DDD66EA4FEC44FC958
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:63:93:89:e0:c9:4c:c7:d6:15:d0:24:88:c7:
                    77:38:8a:90:59:b1:02:c0:38:3f:b5:11:54:92:67:
                    88:59:23:ca:23:18:89:e7:14:5a:4b:67:86:7f:15:
                    85:c1:e4:ea:5c:db:90:a2:1e:68:e9:b6:62:05:c0:
                    04:bb:97:a0:c7:ca:a1:a6:a0:72:9e:a0:f8:eb:72:
                    92:8d:9f:b5:e7:06:2a:92:be:9f:b0:09:f5:2f:d9:
                    09:50:65:a4:29:6e:b1:cb:68:30:15:aa:e7:31:73:
                    35:e9:48:65:fa:c6:df:ea:a6:4b:c1:d9:77:d8:92:
                    18:3e:75:f7:7e:0c:54:37:11:d8:93:e6:82:f0:12:
                    3a:74:58:a5:6b:de:9e:a1:67:b9:0a:19:92:f4:7b:
                    c9:88:8c:0d:73:8b:9b:68:2a:5e:11:7a:12:fb:6f:
                    aa:4e:52:85:2a:2e:a6:74:be:a5:22:1e:2b:50:12:
                    71:ea:d2:0a:5e:3e:42:56:6e:d6:7e:35:81:5a:80:
                    58:f5:58:f5:f6:04:13:73:98:fb:70:0e:d2:45:bf:
                    d1:ca:64:d8:6b:63:03:14:07:d0:95:c0:49:5f:b0:
                    fd:2a:8a:4e:6a:3c:83:05:f4:1c:e7:e8:29:b6:9c:
                    6f:8d:5d:bb:89:58:16:f7:ea:26:5e:b9:05:7b:fb:
                    10:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:FC:B1:02:DB:9E:9F:1E:04:E0:48:DD:D6:6E:A4:FE:C4:4F:C9:58
            X509v3 Authority Key Identifier:
                keyid:96:D9:2C:E2:4C:F3:FC:C7:53:28:5C:EB:AF:3F:EC:1D:72:58:1A:81

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/554/ltks4kzz_MdTKFzrrz_sHXJYGoE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ltks4kzz_MdTKFzrrz_sHXJYGoE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/554/U_yxAtuenx4E4Ejd1m6k_sRPyVg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.122.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         08:80:91:9e:ac:53:32:2a:70:56:ae:79:e3:62:01:f2:f3:04:
         07:a7:6f:8b:26:f7:67:67:df:ca:b5:e4:b3:0a:6a:d7:9b:52:
         bd:f9:e1:a7:36:21:d5:8b:18:28:f2:28:bd:1b:bb:61:9b:38:
         8c:b3:0d:fc:fa:0f:1e:f7:9f:4a:4e:76:6a:fb:82:b2:90:e2:
         fa:2f:d3:e8:93:75:59:04:f8:5c:46:fa:61:69:6b:ac:26:25:
         3e:1f:87:57:cc:80:a2:ba:b7:78:75:64:fa:21:89:49:02:f6:
         64:60:80:9d:5e:9a:e8:f7:c1:c2:27:21:c3:83:7a:77:9a:ff:
         00:0e:62:12:b5:16:8a:46:9a:0d:4f:5a:b8:e7:93:12:49:a1:
         b3:b0:35:3e:92:83:9b:6a:9c:11:c8:a4:ea:7c:4f:a5:e4:03:
         3d:c0:97:a2:e7:36:6b:cc:6c:eb:24:06:1b:38:7e:c1:92:db:
         99:47:ad:c9:d7:84:8b:c8:97:4e:34:61:c2:7d:85:1e:4a:b3:
         5e:fe:81:09:ff:19:59:14:87:da:82:ef:1c:d1:89:b0:51:1c:
         82:82:86:fc:87:11:18:d4:27:70:b3:40:5e:ba:f1:e5:be:5d:
         f8:bc:30:68:0c:97:02:df:55:e2:cf:3c:84:41:d2:42:83:48:
         bd:8a:1a:d6
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBOTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5NkQ5
MkNFMjRDRjNGQ0M3NTMyODVDRUJBRjNGRUMxRDcyNTgxQTgxMB4XDTI0MDYzMDAx
MzIwM1oXDTI1MDYyNDEwNDY0NVowMzExMC8GA1UEAxMoNTNGQ0IxMDJEQjlFOUYx
RTA0RTA0OERERDY2RUE0RkVDNDRGQzk1ODCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMVjk4ngyUzH1hXQJIjHdziKkFmxAsA4P7URVJJniFkjyiMYiecU
Wktnhn8VhcHk6lzbkKIeaOm2YgXABLuXoMfKoaagcp6g+Otyko2ftecGKpK+n7AJ
9S/ZCVBlpClusctoMBWq5zFzNelIZfrG3+qmS8HZd9iSGD51934MVDcR2JPmgvAS
OnRYpWvenqFnuQoZkvR7yYiMDXOLm2gqXhF6Evtvqk5ShSoupnS+pSIeK1AScerS
Cl4+QlZu1n41gVqAWPVY9fYEE3OY+3AO0kW/0cpk2GtjAxQH0JXASV+w/SqKTmo8
gwX0HOfoKbacb41du4lYFvfqJl65BXv7EC0CAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBRT/LEC256fHgTgSN3WbqT+xE/JWDAfBgNVHSMEGDAWgBSW2SziTPP8x1MoXOuv
P+wdclgagTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNTU0L2x0a3M0a3p6X01kVEtGenJyel9zSFhKWUdvRS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2x0a3M0a3p6X01kVEtGenJyel9zSFhK
WUdvRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC81NTQvVV95eEF0dWVueDRFNEVqZDFtNmtfc1JQeVZnLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBJl60DANBgkqhkiG9w0BAQsFAAOCAQEACICRnqxTMipwVq5542IB8vMEB6dv
iyb3Z2ffyrXkswpq15tSvfnhpzYh1YsYKPIovRu7YZs4jLMN/PoPHvefSk52avuC
spDi+i/T6JN1WQT4XEb6YWlrrCYlPh+HV8yAorq3eHVk+iGJSQL2ZGCAnV6a6PfB
wichw4N6d5r/AA5iErUWikaaDU9auOeTEkmhs7A1PpKDm2qcEcik6nxPpeQDPcCX
ouc2a8xs6yQGGzh+wZLbmUetydeEi8iXTjRhwn2FHkqzXv6BCf8ZWRSH2oLvHNGJ
sFEcgoKG/IcRGNQncLNAXrrx5b5d+LwwaAyXAt9V4s88hEHSQoNIvYoa1g==
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:46 2024 by rpki-client on console-ams.rpki-client.org