Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/Ck2XNk86DkvkAP6RwvppwxUTypE.roa
File:                     Ck2XNk86DkvkAP6RwvppwxUTypE.roa (raw, json)
Hash identifier:          K9PxuDfq8Hw9Tw/RS3OGQHOLXLSJ6Sv1NahILEAxOEg=
Subject key identifier:   0A:4D:97:36:4F:3A:0E:4B:E4:00:FE:91:C2:FA:69:C3:15:13:CA:91
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       0156
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/Ck2XNk86DkvkAP6RwvppwxUTypE.roa
Signing time:             Wed 31 Jul 2024 01:31:19 +0000
ROA not before:           Wed 31 Jul 2024 01:31:19 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     2497
IP address blocks:        103.2.57.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 342 (0x156)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Jul 31 01:31:19 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=0A4D97364F3A0E4BE400FE91C2FA69C31513CA91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ac:4c:bb:03:71:40:5d:2c:8a:eb:ae:5e:78:
                    ee:77:75:10:7d:6b:bb:c4:26:a7:c9:6e:d9:93:18:
                    46:5c:50:e9:62:0f:6b:3f:c4:d8:a6:2f:c3:6b:31:
                    4c:ac:35:64:97:49:8b:cc:30:8d:ba:e7:0b:d7:6c:
                    d5:9f:4b:fb:2d:30:be:17:47:81:b7:9d:1e:84:69:
                    e5:54:4a:22:65:7a:b5:a7:7d:4e:cb:0f:4a:5c:82:
                    45:66:75:10:d4:e8:93:00:02:52:51:ba:32:3d:e3:
                    a8:9f:0e:0f:56:3f:19:8b:3b:a6:13:ba:88:4f:e6:
                    48:0c:c5:73:a9:10:7f:ed:ea:2c:ea:ec:fe:da:e1:
                    12:20:ee:8d:a7:17:48:8f:31:b6:67:ee:d1:4e:d2:
                    45:04:cb:81:c6:61:17:d1:5e:c6:2c:c0:45:8b:91:
                    50:6e:f1:17:66:8c:39:0a:b4:be:9a:68:0e:5d:97:
                    e6:50:0e:a1:cb:9a:e9:ff:e9:e8:74:33:7e:cb:c7:
                    5e:a9:ec:1b:ed:94:c2:64:ef:8d:92:9e:1f:3d:cf:
                    eb:6c:2c:23:2f:f1:3b:b6:ff:f5:20:40:d2:98:04:
                    fc:c9:5c:af:9b:f3:35:a3:36:f1:ac:9a:fe:49:2d:
                    38:0b:71:d3:e6:aa:64:fa:a7:eb:97:1e:20:af:12:
                    27:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:4D:97:36:4F:3A:0E:4B:E4:00:FE:91:C2:FA:69:C3:15:13:CA:91
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/Ck2XNk86DkvkAP6RwvppwxUTypE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.2.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:b1:e3:ea:7f:3b:14:91:4f:82:58:17:18:dc:e1:e7:41:81:
         28:7c:c1:84:0a:67:90:cb:31:e3:5d:b9:6e:be:0b:5d:09:aa:
         20:c1:a0:13:17:2d:fb:b0:f4:24:32:fc:6f:d9:ea:20:0d:5c:
         31:f8:0f:c4:a9:64:1e:df:ea:b9:33:5f:ce:d3:f6:eb:2c:a3:
         60:80:9c:78:1f:43:8a:fd:45:c3:9f:32:4a:7d:38:34:e5:60:
         13:11:ae:be:54:c1:24:df:72:00:0b:09:9f:ce:04:d8:e4:88:
         35:a9:01:f0:f3:79:91:ec:0f:b0:eb:c8:8f:c3:3a:60:89:22:
         f5:38:50:f8:df:36:d2:60:06:06:7c:c1:98:5f:d4:63:5a:81:
         8d:4f:76:67:38:69:9c:0b:2d:d9:74:72:c9:67:50:7b:35:41:
         f5:d3:44:97:21:58:27:96:f8:58:dd:51:df:1a:d0:b1:0b:eb:
         db:a0:5c:9a:12:15:d6:d2:bb:e9:90:b8:f7:e0:27:c6:69:be:
         94:7a:d1:16:32:42:84:82:aa:77:9f:ed:b5:a1:76:93:78:5c:
         87:76:40:49:21:70:1e:0d:d0:6e:26:c5:a6:de:13:d4:47:6f:
         ca:8f:d2:48:84:99:21:98:7f:de:e3:0a:52:44:dc:77:22:56:
         de:81:64:b3
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgICAVYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjk4
M0NGRDVGOENBRkEwMDY4RDJFQkEyNUVEMEY3MDEyNDRCMTJGOTAeFw0yNDA3MzEw
MTMxMTlaFw0yNTA3MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDBBNEQ5NzM2NEYzQTBF
NEJFNDAwRkU5MUMyRkE2OUMzMTUxM0NBOTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC+rEy7A3FAXSyK665eeO53dRB9a7vEJqfJbtmTGEZcUOliD2s/
xNimL8NrMUysNWSXSYvMMI265wvXbNWfS/stML4XR4G3nR6EaeVUSiJlerWnfU7L
D0pcgkVmdRDU6JMAAlJRujI946ifDg9WPxmLO6YTuohP5kgMxXOpEH/t6izq7P7a
4RIg7o2nF0iPMbZn7tFO0kUEy4HGYRfRXsYswEWLkVBu8RdmjDkKtL6aaA5dl+ZQ
DqHLmun/6eh0M37Lx16p7BvtlMJk742Snh89z+tsLCMv8Tu2//UgQNKYBPzJXK+b
8zWjNvGsmv5JLTgLcdPmqmT6p+uXHiCvEiebAgMBAAGjggIgMIICHDAdBgNVHQ4E
FgQUCk2XNk86DkvkAP6RwvppwxUTypEwHwYDVR0jBBgwFoAUKYPP1fjK+gBo0uui
XtD3ASRLEvkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBkBgNVHR8EXTBbMFmg
V6BVhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzYvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JMRXZrLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JM
RXZrLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgbkGCCsGAQUFBwELBIGsMIGpMF8GCCsG
AQUFBzALhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzYvQ2syWE5rODZEa3ZrQVA2Und2cHB3eFVUeXBFLnJvYTBGBggr
BgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3JyZHAv
YXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
AGcCOTANBgkqhkiG9w0BAQsFAAOCAQEAH7Hj6n87FJFPglgXGNzh50GBKHzBhApn
kMsx4125br4LXQmqIMGgExct+7D0JDL8b9nqIA1cMfgPxKlkHt/quTNfztP26yyj
YICceB9Div1Fw58ySn04NOVgExGuvlTBJN9yAAsJn84E2OSINakB8PN5kewPsOvI
j8M6YIki9ThQ+N820mAGBnzBmF/UY1qBjU92ZzhpnAst2XRyyWdQezVB9dNElyFY
J5b4WN1R3xrQsQvr26BcmhIV1tK76ZC49+Anxmm+lHrRFjJChIKqd5/ttaF2k3hc
h3ZASSFwHg3QbibFpt4T1Edvyo/SSISZIZh/3uMKUkTcdyJW3oFksw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:24 2024 by rpki-client on console-fra.rpki-client.org