Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/hO6vhfgjtNxTDIPU35PajhkZzhs.roa
File:                     hO6vhfgjtNxTDIPU35PajhkZzhs.roa (raw, json)
Hash identifier:          Q9pJ3m1i91Ys2nZSmDyUawfx5goU4kNxA9f+gyXKV80=
Subject key identifier:   84:EE:AF:85:F8:23:B4:DC:53:0C:83:D4:DF:93:DA:8E:19:19:CE:1B
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       016D
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/hO6vhfgjtNxTDIPU35PajhkZzhs.roa
Signing time:             Wed 31 Jul 2024 01:34:14 +0000
ROA not before:           Wed 31 Jul 2024 01:34:14 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     2497
IP address blocks:        219.121.160.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 365 (0x16d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Jul 31 01:34:14 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=84EEAF85F823B4DC530C83D4DF93DA8E1919CE1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:11:8f:ff:2f:75:42:e9:02:d8:38:d7:ee:0e:
                    7c:62:98:5b:96:1f:24:97:80:8f:5f:ad:60:5e:ef:
                    db:22:38:05:d8:0c:03:59:61:6b:b3:b7:7d:a9:b6:
                    67:c3:e9:a1:eb:1c:32:eb:0e:55:cf:81:00:57:e4:
                    fb:cf:ed:45:3b:6b:c7:32:87:83:9a:30:79:29:7a:
                    3f:7f:e6:89:37:a7:c1:63:f4:76:84:7c:d5:71:47:
                    06:8e:f5:35:b7:dd:58:c6:c0:7c:86:ad:eb:f3:bc:
                    4f:49:e9:53:b1:72:b1:f0:3b:da:d1:db:9e:7e:64:
                    6d:c8:d5:b0:35:e1:b3:3e:7a:15:cd:7a:fe:2f:94:
                    24:e3:42:3a:9f:e3:e9:92:c6:63:3e:e6:e4:78:ef:
                    54:d4:cb:25:36:17:8f:a2:b9:45:e4:19:30:24:b1:
                    c0:3d:bd:7f:06:12:7a:ab:9a:79:03:11:52:84:50:
                    f0:b6:60:70:84:ba:70:a9:e5:b9:f0:37:4a:c6:64:
                    ae:33:43:36:6b:9c:0e:8f:a5:d0:d0:e1:a1:52:87:
                    50:4f:1f:17:1d:7d:e7:24:56:f9:fc:f2:8b:41:45:
                    74:d4:6d:7e:3d:51:a0:ba:1c:c5:a7:82:4c:2a:2c:
                    07:31:fa:ce:04:1b:8c:e5:7e:66:87:9a:b1:1c:85:
                    1b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:EE:AF:85:F8:23:B4:DC:53:0C:83:D4:DF:93:DA:8E:19:19:CE:1B
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/hO6vhfgjtNxTDIPU35PajhkZzhs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.121.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a5:a0:36:23:c2:86:2b:07:ac:17:f6:3c:f9:ba:fd:56:8a:d8:
         01:10:3c:77:2d:bc:7c:8d:58:9c:3b:fe:d4:a7:73:e8:4a:1c:
         d9:e1:11:01:90:a7:7d:dd:c0:a3:1d:e9:19:80:6b:3d:50:7e:
         97:b8:b1:d2:41:26:52:3c:65:1b:d4:ec:da:95:aa:fe:9e:79:
         31:f8:0e:aa:34:51:4a:c3:71:d1:68:48:58:85:64:9f:fa:b2:
         eb:8e:11:03:ff:9b:df:60:65:e0:77:30:2c:7e:74:d1:05:c8:
         5f:ab:e4:4b:8d:c0:22:e5:24:5f:65:8a:f3:28:b8:c5:7f:93:
         9e:6e:91:ab:df:9f:30:b2:44:c9:cf:92:9c:fd:a1:71:f2:c4:
         36:e6:c3:de:8a:00:5b:66:c0:0f:0f:0f:f9:22:20:c6:0b:b6:
         e2:e8:92:83:4f:82:d4:fd:cb:62:a2:e3:bf:55:22:f2:98:7e:
         3f:dd:6a:8c:d5:d0:52:f7:20:6a:cb:15:fa:fa:5b:8c:e1:a4:
         10:a5:49:f5:af:8c:3b:b7:c3:94:91:81:f0:1b:d0:30:56:a9:
         6e:a5:af:1d:b5:76:73:ef:5e:1e:8f:63:7e:93:b9:0a:88:e8:
         e0:0b:76:c5:d7:93:cc:4d:d3:f2:46:86:90:28:9c:3f:18:ae:
         14:c4:4a:3b
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgICAW0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjk4
M0NGRDVGOENBRkEwMDY4RDJFQkEyNUVEMEY3MDEyNDRCMTJGOTAeFw0yNDA3MzEw
MTM0MTRaFw0yNTA3MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDg0RUVBRjg1RjgyM0I0
REM1MzBDODNENERGOTNEQThFMTkxOUNFMUIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCuEY//L3VC6QLYONfuDnximFuWHySXgI9frWBe79siOAXYDANZ
YWuzt32ptmfD6aHrHDLrDlXPgQBX5PvP7UU7a8cyh4OaMHkpej9/5ok3p8Fj9HaE
fNVxRwaO9TW33VjGwHyGrevzvE9J6VOxcrHwO9rR255+ZG3I1bA14bM+ehXNev4v
lCTjQjqf4+mSxmM+5uR471TUyyU2F4+iuUXkGTAkscA9vX8GEnqrmnkDEVKEUPC2
YHCEunCp5bnwN0rGZK4zQzZrnA6PpdDQ4aFSh1BPHxcdfeckVvn88otBRXTUbX49
UaC6HMWngkwqLAcx+s4EG4zlfmaHmrEchRsBAgMBAAGjggIgMIICHDAdBgNVHQ4E
FgQUhO6vhfgjtNxTDIPU35PajhkZzhswHwYDVR0jBBgwFoAUKYPP1fjK+gBo0uui
XtD3ASRLEvkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBkBgNVHR8EXTBbMFmg
V6BVhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzYvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JMRXZrLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JM
RXZrLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgbkGCCsGAQUFBwELBIGsMIGpMF8GCCsG
AQUFBzALhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzYvaE82dmhmZ2p0TnhURElQVTM1UGFqaGtaemhzLnJvYTBGBggr
BgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3JyZHAv
YXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
Bdt5oDANBgkqhkiG9w0BAQsFAAOCAQEApaA2I8KGKwesF/Y8+br9VorYARA8dy28
fI1YnDv+1Kdz6Eoc2eERAZCnfd3Aox3pGYBrPVB+l7ix0kEmUjxlG9Ts2pWq/p55
MfgOqjRRSsNx0WhIWIVkn/qy644RA/+b32Bl4HcwLH500QXIX6vkS43AIuUkX2WK
8yi4xX+Tnm6Rq9+fMLJEyc+SnP2hcfLENubD3ooAW2bADw8P+SIgxgu24uiSg0+C
1P3LYqLjv1Ui8ph+P91qjNXQUvcgassV+vpbjOGkEKVJ9a+MO7fDlJGB8BvQMFap
bqWvHbV2c+9eHo9jfpO5Cojo4At2xdeTzE3T8kaGkCicPxiuFMRKOw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:24 2024 by rpki-client on console-fra.rpki-client.org