Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/598/81NVHmP4SkkjuA3z0lH4TjvhzjI.roa
File:                     81NVHmP4SkkjuA3z0lH4TjvhzjI.roa (raw, json)
Hash identifier:          6XLj9B+FjNUymKD1UYtVaVPVvXbzl2U0Fi8gLiPcI9M=
Subject key identifier:   F3:53:55:1E:63:F8:4A:49:23:B8:0D:F3:D2:51:F8:4E:3B:E1:CE:32
Certificate issuer:       /CN=C2FDF90A996F0A30D31E909C72BE056DD44A06E4
Certificate serial:       5B
Authority key identifier: C2:FD:F9:0A:99:6F:0A:30:D3:1E:90:9C:72:BE:05:6D:D4:4A:06:E4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wv35CplvCjDTHpCccr4FbdRKBuQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/598/81NVHmP4SkkjuA3z0lH4TjvhzjI.roa
Signing time:             Thu 29 Feb 2024 01:29:32 +0000
ROA not before:           Thu 29 Feb 2024 01:29:32 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     59105
IP address blocks:        202.226.4.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/598/wv35CplvCjDTHpCccr4FbdRKBuQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/598/wv35CplvCjDTHpCccr4FbdRKBuQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wv35CplvCjDTHpCccr4FbdRKBuQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91 (0x5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2FDF90A996F0A30D31E909C72BE056DD44A06E4
        Validity
            Not Before: Feb 29 01:29:32 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=F353551E63F84A4923B80DF3D251F84E3BE1CE32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:df:39:8e:1e:09:e3:1f:88:db:8d:f4:d3:83:
                    07:2d:e0:29:54:f5:30:b4:60:29:59:6b:73:6d:8b:
                    d4:1c:aa:0f:0d:47:9b:9a:82:fe:a6:8b:44:da:57:
                    f1:0c:e6:ca:7f:7c:61:99:3f:c4:22:f3:02:e6:6d:
                    a6:bc:c0:a1:e5:b1:ce:8d:ee:2d:9b:a1:7c:94:b7:
                    a7:2f:d8:c5:ee:20:49:1e:23:33:4f:35:03:33:3f:
                    22:1d:36:f3:81:31:6d:04:be:14:62:c6:8a:5a:a7:
                    a1:6d:af:c0:3a:ab:81:ec:2b:c6:b9:ac:76:5f:a3:
                    e4:d6:7b:cf:82:37:05:c2:a8:d8:19:01:56:66:e5:
                    63:40:18:2b:bb:02:a1:c1:81:45:d6:08:bd:f2:ca:
                    6e:84:cf:f7:01:d8:dc:2f:04:bd:c2:fa:0c:75:e3:
                    b2:68:69:03:d7:24:5b:4a:b6:87:e6:37:1b:85:fa:
                    81:1a:d4:96:90:5f:69:9c:f8:5e:5e:5d:85:78:e6:
                    a9:b4:f2:39:db:7a:a7:e7:31:c1:30:3e:2c:74:b0:
                    03:d3:60:26:6e:4f:90:db:4e:70:f0:86:f1:85:62:
                    7a:a3:84:83:54:e9:ba:80:17:77:f5:1e:8a:b9:42:
                    09:6e:6d:a8:e1:4f:a7:e2:66:8e:d2:d6:5b:f6:bc:
                    a8:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:53:55:1E:63:F8:4A:49:23:B8:0D:F3:D2:51:F8:4E:3B:E1:CE:32
            X509v3 Authority Key Identifier:
                keyid:C2:FD:F9:0A:99:6F:0A:30:D3:1E:90:9C:72:BE:05:6D:D4:4A:06:E4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/598/wv35CplvCjDTHpCccr4FbdRKBuQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wv35CplvCjDTHpCccr4FbdRKBuQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/598/81NVHmP4SkkjuA3z0lH4TjvhzjI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.226.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:70:72:23:d6:87:5d:5e:b7:bd:f1:78:36:f9:90:64:09:e3:
         bd:b6:ca:d0:f0:0f:52:d2:94:a9:c2:ad:5a:a5:fc:05:78:bf:
         f5:a2:46:b5:17:2f:9a:6b:7b:41:3e:f0:0d:dd:41:bb:81:8a:
         b8:58:b2:69:d2:7f:21:c2:91:1f:29:52:d7:e2:e1:64:05:18:
         70:1c:c0:d7:d4:a8:4d:e5:58:d9:af:55:bf:8a:d9:0b:a6:24:
         00:7f:a5:af:a7:d3:7f:1e:51:89:7a:17:39:47:f6:09:37:61:
         82:16:96:d3:35:dc:db:fe:04:38:8f:d2:99:4c:41:46:22:3a:
         12:dd:44:b8:16:02:d8:3d:ad:8e:21:1f:b0:90:f0:1a:4f:98:
         61:c4:2e:86:6a:d0:e6:71:05:d4:15:64:83:76:c0:d4:7b:0c:
         12:9c:80:b6:7a:1b:ed:d1:7d:f5:03:05:f0:39:87:4f:42:99:
         1a:42:bb:ec:2e:d9:f1:4a:e9:c9:cf:3e:27:20:54:fc:5b:96:
         70:96:80:86:a7:10:f4:00:81:3b:37:18:24:53:13:13:24:28:
         ab:3d:89:72:b0:7d:9a:be:2f:15:f3:a9:91:17:34:a5:f5:44:
         d3:21:85:e0:36:25:98:7e:19:ba:20:46:52:5a:76:d3:4d:fc:
         fc:d1:fa:9e
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBWzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDMkZE
RjkwQTk5NkYwQTMwRDMxRTkwOUM3MkJFMDU2REQ0NEEwNkU0MB4XDTI0MDIyOTAx
MjkzMloXDTI1MDIxNDAxMzAwM1owMzExMC8GA1UEAxMoRjM1MzU1MUU2M0Y4NEE0
OTIzQjgwREYzRDI1MUY4NEUzQkUxQ0UzMjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAK7fOY4eCeMfiNuN9NODBy3gKVT1MLRgKVlrc22L1ByqDw1Hm5qC
/qaLRNpX8Qzmyn98YZk/xCLzAuZtprzAoeWxzo3uLZuhfJS3py/Yxe4gSR4jM081
AzM/Ih0284ExbQS+FGLGilqnoW2vwDqrgewrxrmsdl+j5NZ7z4I3BcKo2BkBVmbl
Y0AYK7sCocGBRdYIvfLKboTP9wHY3C8EvcL6DHXjsmhpA9ckW0q2h+Y3G4X6gRrU
lpBfaZz4Xl5dhXjmqbTyOdt6p+cxwTA+LHSwA9NgJm5PkNtOcPCG8YVieqOEg1Tp
uoAXd/UeirlCCW5tqOFPp+JmjtLWW/a8qOECAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBTzU1UeY/hKSSO4DfPSUfhOO+HOMjAfBgNVHSMEGDAWgBTC/fkKmW8KMNMekJxy
vgVt1EoG5DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNTk4L3d2MzVDcGx2Q2pEVEhwQ2NjcjRGYmRSS0J1US5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3d2MzVDcGx2Q2pEVEhwQ2NjcjRGYmRS
S0J1US5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC81OTgvODFOVkhtUDRTa2tqdUEzejBsSDRUanZoempJLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAsriBDANBgkqhkiG9w0BAQsFAAOCAQEAYHByI9aHXV63vfF4NvmQZAnjvbbK
0PAPUtKUqcKtWqX8BXi/9aJGtRcvmmt7QT7wDd1Bu4GKuFiyadJ/IcKRHylS1+Lh
ZAUYcBzA19SoTeVY2a9Vv4rZC6YkAH+lr6fTfx5RiXoXOUf2CTdhghaW0zXc2/4E
OI/SmUxBRiI6Et1EuBYC2D2tjiEfsJDwGk+YYcQuhmrQ5nEF1BVkg3bA1HsMEpyA
tnob7dF99QMF8DmHT0KZGkK77C7Z8Urpyc8+JyBU/FuWcJaAhqcQ9ACBOzcYJFMT
EyQoqz2JcrB9mr4vFfOpkRc0pfVE0yGF4DYlmH4ZuiBGUlp20038/NH6ng==
-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:16 2024 by rpki-client on console-fra.rpki-client.org