Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/ngQu_Kku9fv_NsSZzjX8lW6oNMk.roa
File:                     ngQu_Kku9fv_NsSZzjX8lW6oNMk.roa (raw, json)
Hash identifier:          eWzJLkD+aSYdkbR5Ovpfy3hEoa+tn4yiCR8zEyuAuzY=
Subject key identifier:   9E:04:2E:FC:A9:2E:F5:FB:FF:36:C4:99:CE:35:FC:95:6E:A8:34:C9
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       016C
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/ngQu_Kku9fv_NsSZzjX8lW6oNMk.roa
Signing time:             Wed 31 Jul 2024 01:34:14 +0000
ROA not before:           Wed 31 Jul 2024 01:34:14 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     2497
IP address blocks:        219.105.0.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 364 (0x16c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Jul 31 01:34:14 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=9E042EFCA92EF5FBFF36C499CE35FC956EA834C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ed:d5:fb:d6:20:35:4a:a5:50:3c:48:8a:49:
                    41:cd:83:cf:68:4c:09:e5:ae:34:7c:6c:b4:8c:fb:
                    b4:0f:38:22:36:4f:8b:d4:a9:cc:51:44:0e:bc:e9:
                    61:f1:65:96:e3:fc:1f:32:f6:c5:4b:57:15:ea:2d:
                    fc:6d:60:7a:f7:14:1b:58:62:3f:f3:e0:5a:c3:7f:
                    5c:7a:1c:53:28:0c:94:0d:9d:35:02:05:a6:98:37:
                    c3:57:72:b2:11:19:cb:43:ef:0c:5c:c9:98:50:dc:
                    c0:d5:b9:d4:20:a3:c8:f9:7f:a4:18:cb:0a:4c:36:
                    93:d0:5b:71:0a:fa:84:40:98:23:25:63:a9:44:42:
                    05:b1:0a:1e:e1:5c:b9:fa:07:40:df:b4:27:91:9a:
                    ca:cc:56:50:3a:3b:a3:5e:ad:6b:9b:cd:26:1b:f5:
                    b0:79:3a:91:fd:ba:87:45:d2:6b:73:0a:0e:96:70:
                    81:2a:c8:b6:9b:c1:ed:e2:f5:06:57:fe:07:0c:b3:
                    7f:a7:e2:7c:52:c0:2d:e1:53:bc:02:c4:4c:a1:3b:
                    cd:e8:12:f2:28:12:c1:1a:2a:01:70:f8:e9:4e:79:
                    e7:98:42:9d:85:c6:5b:2f:ba:67:ae:5b:5f:11:fc:
                    66:1b:f8:fe:de:ed:29:4b:ed:f7:48:9c:8c:bc:53:
                    2f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:04:2E:FC:A9:2E:F5:FB:FF:36:C4:99:CE:35:FC:95:6E:A8:34:C9
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/ngQu_Kku9fv_NsSZzjX8lW6oNMk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.105.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         60:46:90:fc:0f:4c:d9:2e:08:4f:f2:b7:93:48:a7:2e:e6:3d:
         3f:5c:31:43:f4:1c:a3:d5:87:5e:c7:7b:7b:23:cb:40:8c:12:
         fd:7e:56:d7:3d:f9:8f:20:d7:fe:d3:7e:4f:85:2b:7f:64:06:
         27:19:a6:7b:d2:27:ed:c9:a8:8a:e5:af:2a:53:4e:a0:68:35:
         05:9c:96:b1:e5:1b:0d:cd:f2:82:2b:9b:a7:62:a8:7a:13:00:
         55:b9:d8:2f:83:21:f3:7e:9c:3e:0b:fa:58:82:78:fe:37:6f:
         8a:a9:a4:9d:bc:c8:48:54:ee:ce:a1:62:ea:58:cf:f3:0a:80:
         dc:bb:c5:43:20:84:e7:04:38:e6:36:3f:15:fa:60:85:9c:ea:
         55:2c:c6:e1:40:63:84:7a:29:79:47:af:ab:ec:f3:0a:fd:b9:
         ea:f1:0d:fb:84:fb:27:d8:5d:d2:31:4b:01:d8:0b:fb:6f:45:
         ac:c3:06:1c:72:27:34:da:fc:f9:90:06:59:8b:d4:da:7d:9e:
         b1:c7:0b:45:ea:77:70:ef:cb:36:4c:4b:fe:26:03:de:0e:a3:
         d1:1e:a2:0c:c9:4b:d2:2e:ba:a9:fa:07:00:31:37:c7:3c:6b:
         a1:a3:61:2f:be:8f:9e:c8:16:53:1f:b8:8e:ef:be:4c:28:5f:
         48:1d:29:a5
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgICAWwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjk4
M0NGRDVGOENBRkEwMDY4RDJFQkEyNUVEMEY3MDEyNDRCMTJGOTAeFw0yNDA3MzEw
MTM0MTRaFw0yNTA3MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDlFMDQyRUZDQTkyRUY1
RkJGRjM2QzQ5OUNFMzVGQzk1NkVBODM0QzkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCj7dX71iA1SqVQPEiKSUHNg89oTAnlrjR8bLSM+7QPOCI2T4vU
qcxRRA686WHxZZbj/B8y9sVLVxXqLfxtYHr3FBtYYj/z4FrDf1x6HFMoDJQNnTUC
BaaYN8NXcrIRGctD7wxcyZhQ3MDVudQgo8j5f6QYywpMNpPQW3EK+oRAmCMlY6lE
QgWxCh7hXLn6B0DftCeRmsrMVlA6O6NerWubzSYb9bB5OpH9uodF0mtzCg6WcIEq
yLabwe3i9QZX/gcMs3+n4nxSwC3hU7wCxEyhO83oEvIoEsEaKgFw+OlOeeeYQp2F
xlsvumeuW18R/GYb+P7e7SlL7fdInIy8Uy8TAgMBAAGjggIgMIICHDAdBgNVHQ4E
FgQUngQu/Kku9fv/NsSZzjX8lW6oNMkwHwYDVR0jBBgwFoAUKYPP1fjK+gBo0uui
XtD3ASRLEvkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBkBgNVHR8EXTBbMFmg
V6BVhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzYvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JMRXZrLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JM
RXZrLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgbkGCCsGAQUFBwELBIGsMIGpMF8GCCsG
AQUFBzALhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzYvbmdRdV9La3U5ZnZfTnNTWnpqWDhsVzZvTk1rLnJvYTBGBggr
BgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3JyZHAv
YXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
BdtpADANBgkqhkiG9w0BAQsFAAOCAQEAYEaQ/A9M2S4IT/K3k0inLuY9P1wxQ/Qc
o9WHXsd7eyPLQIwS/X5W1z35jyDX/tN+T4Urf2QGJxmme9In7cmoiuWvKlNOoGg1
BZyWseUbDc3ygiubp2KoehMAVbnYL4Mh836cPgv6WIJ4/jdviqmknbzISFTuzqFi
6ljP8wqA3LvFQyCE5wQ45jY/FfpghZzqVSzG4UBjhHopeUevq+zzCv256vEN+4T7
J9hd0jFLAdgL+29FrMMGHHInNNr8+ZAGWYvU2n2esccLRep3cO/LNkxL/iYD3g6j
0R6iDMlL0i66qfoHADE3xzxroaNhL76PnsgWUx+4ju++TChfSB0ppQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:24 2024 by rpki-client on console-fra.rpki-client.org