Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/dmj8Li7juGGNkcC2m7qxJ3COvDw.roa
File:                     dmj8Li7juGGNkcC2m7qxJ3COvDw.roa (raw, json)
Hash identifier:          gBcUWzK7otEgnpsTWfzo9aSTpvtDR3p1353zbasBOK4=
Subject key identifier:   76:68:FC:2E:2E:E3:B8:61:8D:91:C0:B6:9B:BA:B1:27:70:8E:BC:3C
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       018A
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/dmj8Li7juGGNkcC2m7qxJ3COvDw.roa
Signing time:             Sat 31 Aug 2024 01:29:13 +0000
ROA not before:           Sat 31 Aug 2024 01:29:13 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     2497
IP address blocks:        133.238.8.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 20:23:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 394 (0x18a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Aug 31 01:29:13 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=7668FC2E2EE3B8618D91C0B69BBAB127708EBC3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:5e:4b:ac:2d:a4:79:0f:ec:11:c2:28:17:71:
                    eb:bc:a5:d8:30:5f:a5:00:e2:9b:df:91:c8:a3:aa:
                    c6:06:63:35:c1:73:8a:ed:2c:a8:1e:a0:20:cf:e4:
                    5a:89:20:3d:dc:6f:84:f3:33:ed:12:90:c7:4e:7f:
                    6e:85:5f:20:ab:05:80:f4:25:b1:02:96:3d:aa:19:
                    d7:5c:f8:98:6d:f0:47:ef:c8:2e:b5:f5:0b:57:ad:
                    1f:dd:8e:0b:01:9a:02:dd:1f:d2:dc:ac:e0:06:dc:
                    4e:3f:8d:fc:75:f2:cd:39:2b:9d:f3:44:e3:05:9b:
                    2b:90:72:9a:81:2b:eb:3b:c3:b3:90:52:48:3e:0f:
                    e5:5f:55:2c:aa:89:3a:2c:77:50:12:d2:f6:78:9b:
                    65:88:1d:e5:65:57:2f:5b:ad:57:8c:6b:82:9c:87:
                    95:43:62:26:aa:dd:13:e7:14:e9:27:1d:d8:3c:36:
                    52:7a:d8:33:e1:66:0d:1f:88:4e:d1:4b:11:f0:a1:
                    eb:10:09:f7:8f:dc:63:59:31:a9:ae:86:8e:a6:c7:
                    81:59:52:18:35:88:b9:38:0f:7e:04:b0:13:1a:ef:
                    9e:f6:47:43:01:73:79:5e:80:fe:12:63:e3:f7:e4:
                    96:6a:c3:7e:88:cc:e6:ef:99:90:dd:f2:4d:e4:4a:
                    c2:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:68:FC:2E:2E:E3:B8:61:8D:91:C0:B6:9B:BA:B1:27:70:8E:BC:3C
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/dmj8Li7juGGNkcC2m7qxJ3COvDw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.238.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         81:e4:62:21:a3:a4:8b:e3:92:e4:2e:af:72:a5:ab:29:ef:e5:
         26:10:13:37:1c:e9:b3:30:dd:55:0a:1c:c4:36:d1:4a:f2:e2:
         40:c0:7a:56:14:3e:76:e0:21:d0:04:eb:79:c6:e3:10:c9:0f:
         4d:db:9a:17:2a:81:3d:bc:18:bf:41:0a:e4:9d:98:6a:a0:04:
         ab:8f:c9:5a:e6:9f:77:f2:40:11:ac:20:c8:7a:53:78:f7:25:
         18:a5:9d:6a:c0:79:2e:d7:39:2f:a5:da:92:c7:58:47:6d:3c:
         26:d5:64:13:91:6c:78:6e:ba:a4:2f:7f:00:20:09:98:22:12:
         68:70:33:80:08:87:8a:29:a5:3d:26:9f:f6:e1:dc:b9:42:77:
         bb:ab:e9:e8:d1:80:50:1c:33:ef:c1:0a:01:87:53:1e:31:80:
         30:ce:44:be:d5:c0:5c:4d:c8:9a:2e:ba:3b:2c:46:8e:d1:27:
         7d:88:ce:79:f8:fc:45:3f:33:03:9e:27:71:e6:3a:7c:6b:46:
         46:8d:17:09:ec:7d:22:21:f5:91:5b:bf:e9:82:f6:20:50:aa:
         42:d8:ac:69:f6:84:30:75:9b:e0:d3:d3:1c:f8:2f:71:15:b4:
         86:40:1e:2d:1d:49:bb:d5:ea:6e:1b:75:28:fa:6e:c8:50:5e:
         24:3f:0b:6c
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgICAYowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjk4
M0NGRDVGOENBRkEwMDY4RDJFQkEyNUVEMEY3MDEyNDRCMTJGOTAeFw0yNDA4MzEw
MTI5MTNaFw0yNTA4MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDc2NjhGQzJFMkVFM0I4
NjE4RDkxQzBCNjlCQkFCMTI3NzA4RUJDM0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCjXkusLaR5D+wRwigXceu8pdgwX6UA4pvfkcijqsYGYzXBc4rt
LKgeoCDP5FqJID3cb4TzM+0SkMdOf26FXyCrBYD0JbEClj2qGddc+Jht8EfvyC61
9QtXrR/djgsBmgLdH9LcrOAG3E4/jfx18s05K53zROMFmyuQcpqBK+s7w7OQUkg+
D+VfVSyqiTosd1AS0vZ4m2WIHeVlVy9brVeMa4Kch5VDYiaq3RPnFOknHdg8NlJ6
2DPhZg0fiE7RSxHwoesQCfeP3GNZMamuho6mx4FZUhg1iLk4D34EsBMa7572R0MB
c3legP4SY+P35JZqw36IzObvmZDd8k3kSsKrAgMBAAGjggIgMIICHDAdBgNVHQ4E
FgQUdmj8Li7juGGNkcC2m7qxJ3COvDwwHwYDVR0jBBgwFoAUKYPP1fjK+gBo0uui
XtD3ASRLEvkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBkBgNVHR8EXTBbMFmg
V6BVhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzYvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JMRXZrLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JM
RXZrLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgbkGCCsGAQUFBwELBIGsMIGpMF8GCCsG
AQUFBzALhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzYvZG1qOExpN2p1R0dOa2NDMm03cXhKM0NPdkR3LnJvYTBGBggr
BgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3JyZHAv
YXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
A4XuCDANBgkqhkiG9w0BAQsFAAOCAQEAgeRiIaOki+OS5C6vcqWrKe/lJhATNxzp
szDdVQocxDbRSvLiQMB6VhQ+duAh0ATrecbjEMkPTduaFyqBPbwYv0EK5J2YaqAE
q4/JWuafd/JAEawgyHpTePclGKWdasB5Ltc5L6XaksdYR208JtVkE5FseG66pC9/
ACAJmCISaHAzgAiHiimlPSaf9uHcuUJ3u6vp6NGAUBwz78EKAYdTHjGAMM5EvtXA
XE3Imi66OyxGjtEnfYjOefj8RT8zA54nceY6fGtGRo0XCex9IiH1kVu/6YL2IFCq
QtisafaEMHWb4NPTHPgvcRW0hkAeLR1Ju9Xqbht1KPpuyFBeJD8LbA==
-----END CERTIFICATE-----
Generated at Mon Nov 25 21:33:05 2024 by rpki-client on console-ams.rpki-client.org