Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/602/H6VFCcUbsCquN598cYuaTay3wjc.roa
File:                     H6VFCcUbsCquN598cYuaTay3wjc.roa (raw, json)
Hash identifier:          8MufJzzpKK6TNxsJuE0rQzfMdpHSc7lXhJaJvwL9vNA=
Subject key identifier:   1F:A5:45:09:C5:1B:B0:2A:AE:37:9F:7C:71:8B:9A:4D:AC:B7:C2:37
Certificate issuer:       /CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
Certificate serial:       59
Authority key identifier: 4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/H6VFCcUbsCquN598cYuaTay3wjc.roa
Signing time:             Thu 29 Feb 2024 01:31:09 +0000
ROA not before:           Thu 29 Feb 2024 01:31:09 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     32787
IP address blocks:        210.193.97.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 01 Jun 2024 13:36:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89 (0x59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
        Validity
            Not Before: Feb 29 01:31:09 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=1FA54509C51BB02AAE379F7C718B9A4DACB7C237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:eb:ab:10:f9:86:4c:de:7e:0d:ef:dc:ea:19:
                    6d:44:ce:70:7d:a3:dc:bf:7a:e8:90:fa:d3:cc:94:
                    3e:4e:c8:8b:a3:3c:c1:f2:11:c2:cc:50:35:f4:57:
                    31:09:1b:ad:c0:2e:84:2b:ac:c1:c8:6d:72:27:61:
                    c6:a5:52:0d:0c:9e:28:d1:d8:be:12:f6:fa:e4:5d:
                    20:96:39:63:84:06:fb:00:72:75:0f:7c:04:3f:58:
                    f8:80:da:41:b0:47:f7:60:4b:3b:75:9a:32:d5:3f:
                    78:c7:e4:4d:e5:48:ac:3d:f1:2e:5e:d5:56:f2:1d:
                    96:8b:1f:e3:13:1c:a1:b0:49:a8:bd:01:5e:d1:74:
                    60:ce:1d:c8:d2:d2:4d:ea:eb:bf:b2:53:ef:08:50:
                    c3:d8:db:3d:c1:53:45:c8:d9:a2:2e:32:08:09:24:
                    d0:ff:84:46:21:2f:89:cb:48:dc:76:ed:15:c5:2e:
                    3d:6a:3e:74:6f:93:b9:e4:b6:eb:fd:c9:5f:cb:3d:
                    fe:73:00:02:50:6b:93:b8:3b:16:68:36:5f:76:0a:
                    e9:33:2f:8a:0a:b7:3e:f7:35:64:e5:fc:4d:c7:98:
                    fe:5a:a1:6c:84:36:32:e7:4b:29:23:40:af:3f:e2:
                    2e:c9:06:9b:03:ee:93:96:02:b8:3f:f6:31:c4:f0:
                    e5:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:A5:45:09:C5:1B:B0:2A:AE:37:9F:7C:71:8B:9A:4D:AC:B7:C2:37
            X509v3 Authority Key Identifier:
                keyid:4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/H6VFCcUbsCquN598cYuaTay3wjc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.193.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:e1:2a:b9:60:b3:f9:43:2a:2b:eb:b9:cd:89:8f:76:fb:47:
         d7:ed:58:06:34:4c:0e:36:17:d8:70:66:7d:1b:18:1a:38:b8:
         ac:94:9a:81:68:a7:c3:73:5f:95:0f:4d:27:b9:f4:b8:20:89:
         73:f1:38:89:39:97:44:a6:8b:4b:87:e4:bb:f1:9a:6b:61:8e:
         6c:62:1f:79:01:8c:f9:4d:60:75:ff:5f:34:be:96:38:e8:9c:
         75:b9:f6:13:21:65:a4:ac:1e:93:76:15:cd:69:67:8b:e5:65:
         76:92:22:90:ca:48:e1:83:e4:ef:fb:c7:e4:5c:7f:41:d7:05:
         df:6e:5c:6d:73:7e:9c:de:51:66:4b:f8:ad:05:03:76:30:7e:
         dc:cf:38:b7:a1:57:26:2b:a9:87:d3:1c:c6:53:f8:28:b0:a3:
         a1:1d:d1:f1:ca:06:a1:0f:00:c8:87:44:d7:3a:ad:2c:cc:39:
         1e:71:c1:65:62:a4:0a:cb:5d:57:85:7d:a0:d2:43:6e:02:fd:
         11:e4:1f:ae:21:f0:30:9d:c2:04:43:52:10:82:40:8e:4d:d3:
         d0:9d:4d:1a:c6:db:79:03:77:50:80:2e:09:8a:fe:69:05:03:
         38:dc:bf:80:24:45:ce:24:d6:b3:7d:1a:b0:1c:d6:32:1b:aa:
         a2:ae:bb:2c
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBWTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0RUZG
MUFCNkVBREEyNzNCQTA2NkRCMEY3N0I3OUQ2QTBEOTAxNTQyMB4XDTI0MDIyOTAx
MzEwOVoXDTI1MDIxNDAxMzAwM1owMzExMC8GA1UEAxMoMUZBNTQ1MDlDNTFCQjAy
QUFFMzc5RjdDNzE4QjlBNERBQ0I3QzIzNzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMnrqxD5hkzefg3v3OoZbUTOcH2j3L966JD608yUPk7Ii6M8wfIR
wsxQNfRXMQkbrcAuhCuswchtcidhxqVSDQyeKNHYvhL2+uRdIJY5Y4QG+wBydQ98
BD9Y+IDaQbBH92BLO3WaMtU/eMfkTeVIrD3xLl7VVvIdlosf4xMcobBJqL0BXtF0
YM4dyNLSTerrv7JT7whQw9jbPcFTRcjZoi4yCAkk0P+ERiEvictI3HbtFcUuPWo+
dG+TueS26/3JX8s9/nMAAlBrk7g7Fmg2X3YK6TMvigq3Pvc1ZOX8TceY/lqhbIQ2
MudLKSNArz/iLskGmwPuk5YCuD/2McTw5Q8CAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBQfpUUJxRuwKq43n3xxi5pNrLfCNzAfBgNVHSMEGDAWgBRO/xq26tonO6Bm2w93
t51qDZAVQjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNjAyL1R2OGF0dXJhSnp1Z1p0c1BkN2VkYWcyUUZVSS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1R2OGF0dXJhSnp1Z1p0c1BkN2VkYWcy
UUZVSS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC82MDIvSDZWRkNjVWJzQ3F1TjU5OGNZdWFUYXkzd2pjLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEANLBYTANBgkqhkiG9w0BAQsFAAOCAQEAVuEquWCz+UMqK+u5zYmPdvtH1+1Y
BjRMDjYX2HBmfRsYGji4rJSagWinw3NflQ9NJ7n0uCCJc/E4iTmXRKaLS4fku/Ga
a2GObGIfeQGM+U1gdf9fNL6WOOicdbn2EyFlpKwek3YVzWlni+VldpIikMpI4YPk
7/vH5Fx/QdcF325cbXN+nN5RZkv4rQUDdjB+3M84t6FXJiuph9McxlP4KLCjoR3R
8coGoQ8AyIdE1zqtLMw5HnHBZWKkCstdV4V9oNJDbgL9EeQfriHwMJ3CBENSEIJA
jk3T0J1NGsbbeQN3UIAuCYr+aQUDONy/gCRFziTWs30asBzWMhuqoq67LA==
-----END CERTIFICATE-----
Generated at Sat May 25 23:57:33 2024 by rpki-client on console-ams.rpki-client.org