Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/ZUAU4l55pTRIwxY-CYgtg8IFL78.roa
File:                     ZUAU4l55pTRIwxY-CYgtg8IFL78.roa (raw, json)
Hash identifier:          fh0RAvwiuFtcvpOFxvoWNQXNxOnFpdph+BPOdZ+sWQM=
Subject key identifier:   65:40:14:E2:5E:79:A5:34:48:C3:16:3E:09:88:2D:83:C2:05:2F:BF
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       013D
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/ZUAU4l55pTRIwxY-CYgtg8IFL78.roa
Signing time:             Mon 01 Jan 2024 01:30:08 +0000
ROA not before:           Mon 01 Jan 2024 01:30:08 +0000
ROA not after:            Sat 14 Dec 2024 01:30:03 +0000
asID:                     2497
IP address blocks:        220.156.0.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 317 (0x13d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Jan  1 01:30:08 2024 GMT
            Not After : Dec 14 01:30:03 2024 GMT
        Subject: CN=654014E25E79A53448C3163E09882D83C2052FBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:84:87:b1:98:e6:19:94:0b:35:12:9c:38:22:
                    b6:33:a8:82:ce:22:28:c9:46:9f:0e:dc:32:fd:7e:
                    c6:9b:9a:b2:0a:48:af:8b:cd:c2:99:bc:f7:0e:34:
                    29:5b:d0:be:55:14:e1:5d:39:54:9f:6b:77:f3:e4:
                    6e:bd:57:00:54:c9:b6:f3:27:a8:db:73:43:e1:7c:
                    68:08:4e:44:c5:6c:95:8c:5e:fe:fc:e0:30:4d:7b:
                    59:53:b9:2c:e4:dd:ec:60:d9:bb:f7:2d:49:45:3c:
                    f2:5c:7d:e4:08:c9:a8:7c:e6:29:fe:f4:c0:40:1a:
                    61:bd:8b:cf:22:ea:f7:96:59:de:49:76:83:62:15:
                    db:80:58:55:21:69:0e:e6:dc:1e:e4:59:14:53:37:
                    d9:94:b4:45:df:92:4d:0b:2a:4d:b9:c5:61:f0:f3:
                    0a:91:c1:c3:10:91:af:0b:24:e8:c0:ec:46:23:07:
                    3e:de:54:ce:fe:73:8c:b8:c7:61:34:c5:56:1c:3f:
                    ec:22:80:62:ac:d2:f5:98:21:29:c5:ad:ee:ac:3b:
                    ba:af:e0:6e:55:73:7e:4c:31:a9:98:84:68:e5:88:
                    32:0c:bc:a8:99:c1:75:4d:dc:e0:96:23:4c:71:73:
                    91:94:2c:a2:99:38:b9:03:09:aa:2a:fb:5b:0c:5b:
                    74:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:40:14:E2:5E:79:A5:34:48:C3:16:3E:09:88:2D:83:C2:05:2F:BF
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/ZUAU4l55pTRIwxY-CYgtg8IFL78.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.156.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         4e:d3:5f:e2:5b:6e:4c:66:ca:62:85:ff:d8:63:80:06:d8:6c:
         04:24:60:51:b1:74:24:1d:56:ff:26:e7:e7:1b:98:5a:47:a3:
         b1:fc:a2:49:e5:fb:f7:58:06:ed:14:ba:60:e9:0e:38:ea:4e:
         8b:e1:c0:45:40:4d:3b:4d:61:d3:e8:3b:f1:aa:af:92:dc:b0:
         a0:fb:fa:fa:5d:0a:b9:69:6f:42:3e:11:17:51:e5:f8:f5:58:
         7b:c9:5c:e3:57:b9:2b:95:ad:0b:42:90:7c:9f:75:99:b4:02:
         d7:c1:76:9c:cb:a4:2d:4d:d9:59:2d:82:8b:8a:e9:c6:2d:79:
         d8:47:f7:36:5c:d4:3c:9d:a6:93:1b:33:d0:c0:ae:36:69:0f:
         d4:fa:2e:4e:a9:54:7d:8e:db:8e:21:41:c0:25:05:b8:df:ac:
         6e:f4:4c:c7:11:f9:f3:f1:a0:1e:0b:0b:5f:bf:1c:65:f7:4d:
         95:67:39:ae:e7:10:da:b9:93:32:d9:b5:42:8e:86:1e:a7:18:
         c8:43:13:d9:4a:5a:67:68:7f:c1:4a:71:6e:2c:ab:fc:e4:01:
         c3:5d:f8:9b:3c:45:99:c2:52:32:0b:43:94:84:16:6d:df:f4:
         ef:5f:c8:54:7a:83:fa:0e:d9:b8:a8:3b:9f:4a:d4:c4:ba:6f:
         98:e9:71:30
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgICAT0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjk4
M0NGRDVGOENBRkEwMDY4RDJFQkEyNUVEMEY3MDEyNDRCMTJGOTAeFw0yNDAxMDEw
MTMwMDhaFw0yNDEyMTQwMTMwMDNaMDMxMTAvBgNVBAMTKDY1NDAxNEUyNUU3OUE1
MzQ0OEMzMTYzRTA5ODgyRDgzQzIwNTJGQkYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC/hIexmOYZlAs1Epw4IrYzqILOIijJRp8O3DL9fsabmrIKSK+L
zcKZvPcONClb0L5VFOFdOVSfa3fz5G69VwBUybbzJ6jbc0PhfGgITkTFbJWMXv78
4DBNe1lTuSzk3exg2bv3LUlFPPJcfeQIyah85in+9MBAGmG9i88i6veWWd5JdoNi
FduAWFUhaQ7m3B7kWRRTN9mUtEXfkk0LKk25xWHw8wqRwcMQka8LJOjA7EYjBz7e
VM7+c4y4x2E0xVYcP+wigGKs0vWYISnFre6sO7qv4G5Vc35MMamYhGjliDIMvKiZ
wXVN3OCWI0xxc5GULKKZOLkDCaoq+1sMW3TnAgMBAAGjggIgMIICHDAdBgNVHQ4E
FgQUZUAU4l55pTRIwxY+CYgtg8IFL78wHwYDVR0jBBgwFoAUKYPP1fjK+gBo0uui
XtD3ASRLEvkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBkBgNVHR8EXTBbMFmg
V6BVhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzYvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JMRXZrLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JM
RXZrLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgbkGCCsGAQUFBwELBIGsMIGpMF8GCCsG
AQUFBzALhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzYvWlVBVTRsNTVwVFJJd3hZLUNZZ3RnOElGTDc4LnJvYTBGBggr
BgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3JyZHAv
YXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
BtycADANBgkqhkiG9w0BAQsFAAOCAQEATtNf4ltuTGbKYoX/2GOABthsBCRgUbF0
JB1W/ybn5xuYWkejsfyiSeX791gG7RS6YOkOOOpOi+HARUBNO01h0+g78aqvktyw
oPv6+l0KuWlvQj4RF1Hl+PVYe8lc41e5K5WtC0KQfJ91mbQC18F2nMukLU3ZWS2C
i4rpxi152Ef3NlzUPJ2mkxsz0MCuNmkP1PouTqlUfY7bjiFBwCUFuN+sbvRMxxH5
8/GgHgsLX78cZfdNlWc5rucQ2rmTMtm1Qo6GHqcYyEMT2UpaZ2h/wUpxbiyr/OQB
w134mzxFmcJSMgtDlIQWbd/071/IVHqD+g7ZuKg7n0rUxLpvmOlxMA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:24 2024 by rpki-client on console-fra.rpki-client.org