Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/p-2HJLNWIPxXY2YN2VIE7OOXX0Q.roa
File:                     p-2HJLNWIPxXY2YN2VIE7OOXX0Q.roa (raw, json)
Hash identifier:          wNldhRykeWJ6gYrqBDNx0BAsVSos09LI5r62BQxyep4=
Subject key identifier:   A7:ED:87:24:B3:56:20:FC:57:63:66:0D:D9:52:04:EC:E3:97:5F:44
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       013C
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/p-2HJLNWIPxXY2YN2VIE7OOXX0Q.roa
Signing time:             Fri 15 Dec 2023 06:17:35 +0000
ROA not before:           Fri 15 Dec 2023 06:17:35 +0000
ROA not after:            Sat 14 Dec 2024 01:30:03 +0000
asID:                     2497
IP address blocks:        163.218.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 316 (0x13c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Dec 15 06:17:35 2023 GMT
            Not After : Dec 14 01:30:03 2024 GMT
        Subject: CN=A7ED8724B35620FC5763660DD95204ECE3975F44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3b:0c:a6:55:c0:29:0b:9d:24:ba:6f:6a:8c:
                    8e:98:aa:14:76:94:48:6c:05:52:f4:ef:d9:ea:cd:
                    f2:d2:6d:cc:b6:b4:9c:24:5f:98:12:b6:71:59:c4:
                    44:6f:33:27:72:56:a1:fb:2a:be:9a:ee:77:35:f4:
                    1d:6f:38:5d:ff:84:68:db:09:13:56:9a:d5:a3:d1:
                    6f:d5:6a:b9:f5:91:26:b6:f2:97:30:db:0f:19:f0:
                    2e:7d:84:23:1b:95:31:e7:11:b2:40:93:50:10:ce:
                    57:83:e5:64:db:42:fb:b0:e1:09:e4:61:6b:e7:1f:
                    0e:ea:91:c0:92:d6:0c:ed:7a:a2:e6:02:9f:69:e6:
                    ca:b9:c0:69:04:6b:d7:a1:ee:9a:71:8d:d0:25:81:
                    a1:2f:ab:ba:fb:01:2e:98:71:9e:f7:a8:c9:4c:5a:
                    01:d1:01:5b:17:25:6b:5d:38:aa:0f:73:6c:81:66:
                    c4:c5:76:90:e9:5c:c1:2b:f3:3e:53:05:c1:1d:18:
                    de:56:04:a8:87:00:55:f7:50:b2:37:f8:0e:39:c8:
                    b4:1b:e0:40:a6:1a:82:39:ed:5d:0b:79:a1:35:c9:
                    12:56:a7:cc:e4:02:47:37:50:01:0b:33:ff:44:0d:
                    7b:72:ba:65:bc:f8:95:9e:0d:cc:11:04:bb:06:e4:
                    06:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:ED:87:24:B3:56:20:FC:57:63:66:0D:D9:52:04:EC:E3:97:5F:44
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/p-2HJLNWIPxXY2YN2VIE7OOXX0Q.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.218.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         13:15:4c:74:f2:3a:a5:9e:25:e7:1a:1a:92:34:1f:ef:75:6c:
         89:9c:04:f1:37:b7:d1:1e:9a:f0:38:eb:0d:95:5e:cf:88:93:
         0a:cd:91:ca:5e:d7:56:61:2c:72:71:1e:1f:2e:92:b8:85:d6:
         93:b5:97:95:a1:c3:76:8b:71:49:99:e3:7a:94:d6:d7:bb:13:
         ca:fb:b8:52:3d:ec:c1:df:1e:54:eb:e6:c4:d6:a5:f7:61:07:
         fe:e0:21:c5:e1:69:e0:50:78:56:50:8b:db:58:4d:2d:32:a6:
         4c:39:8d:22:63:40:2f:c5:bd:2d:6b:2c:85:04:6b:13:a5:b0:
         40:1b:a0:e6:7e:1c:2c:3d:f5:32:93:e1:bb:bd:ec:76:5a:0e:
         b8:97:bb:28:f0:9d:43:c0:d6:4f:e9:6e:77:d0:00:eb:86:95:
         d6:38:e5:15:02:fc:69:8b:05:42:da:67:f9:ff:0f:fe:2d:fe:
         12:e3:f6:5d:af:16:55:85:1d:01:29:e5:3e:13:36:23:2b:18:
         d5:5c:ae:0a:cc:d7:80:ec:77:19:15:ae:44:4c:55:30:20:37:
         0f:b8:74:8a:ff:53:bb:b5:8b:08:d3:b7:6f:f5:39:c0:fd:44:
         fa:6e:4a:b1:42:da:78:20:49:dc:95:21:dc:38:6f:20:06:0b:
         ae:86:64:5b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgICATwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjk4
M0NGRDVGOENBRkEwMDY4RDJFQkEyNUVEMEY3MDEyNDRCMTJGOTAeFw0yMzEyMTUw
NjE3MzVaFw0yNDEyMTQwMTMwMDNaMDMxMTAvBgNVBAMTKEE3RUQ4NzI0QjM1NjIw
RkM1NzYzNjYwREQ5NTIwNEVDRTM5NzVGNDQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCvOwymVcApC50kum9qjI6YqhR2lEhsBVL079nqzfLSbcy2tJwk
X5gStnFZxERvMydyVqH7Kr6a7nc19B1vOF3/hGjbCRNWmtWj0W/Varn1kSa28pcw
2w8Z8C59hCMblTHnEbJAk1AQzleD5WTbQvuw4QnkYWvnHw7qkcCS1gzteqLmAp9p
5sq5wGkEa9eh7ppxjdAlgaEvq7r7AS6YcZ73qMlMWgHRAVsXJWtdOKoPc2yBZsTF
dpDpXMEr8z5TBcEdGN5WBKiHAFX3ULI3+A45yLQb4ECmGoI57V0LeaE1yRJWp8zk
Akc3UAELM/9EDXtyumW8+JWeDcwRBLsG5AbtAgMBAAGjggIfMIICGzAdBgNVHQ4E
FgQUp+2HJLNWIPxXY2YN2VIE7OOXX0QwHwYDVR0jBBgwFoAUKYPP1fjK+gBo0uui
XtD3ASRLEvkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBkBgNVHR8EXTBbMFmg
V6BVhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzYvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JMRXZrLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JM
RXZrLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgbkGCCsGAQUFBwELBIGsMIGpMF8GCCsG
AQUFBzALhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzYvcC0ySEpMTldJUHhYWTJZTjJWSUU3T09YWDBRLnJvYTBGBggr
BgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3JyZHAv
YXAvbm90aWZpY2F0aW9uLnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMD
AKPaMA0GCSqGSIb3DQEBCwUAA4IBAQATFUx08jqlniXnGhqSNB/vdWyJnATxN7fR
HprwOOsNlV7PiJMKzZHKXtdWYSxycR4fLpK4hdaTtZeVocN2i3FJmeN6lNbXuxPK
+7hSPezB3x5U6+bE1qX3YQf+4CHF4WngUHhWUIvbWE0tMqZMOY0iY0Avxb0tayyF
BGsTpbBAG6DmfhwsPfUyk+G7vex2Wg64l7so8J1DwNZP6W530ADrhpXWOOUVAvxp
iwVC2mf5/w/+Lf4S4/ZdrxZVhR0BKeU+EzYjKxjVXK4KzNeA7HcZFa5ETFUwIDcP
uHSK/1O7tYsI07dv9TnA/UT6bkqxQtp4IEnclSHcOG8gBguuhmRb
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:24 2024 by rpki-client on console-fra.rpki-client.org