Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/653/Oq_cwLQluihHm0oKOE63durrEg8.roa
File:                     Oq_cwLQluihHm0oKOE63durrEg8.roa (raw, json)
Hash identifier:          EhdCjehkH3JVzJE7HmMSuOwLHBM76Ekb6NIFDNRaI+M=
Subject key identifier:   3A:AF:DC:C0:B4:25:BA:28:47:9B:4A:0A:38:4E:B7:76:EA:EB:12:0F
Certificate issuer:       /CN=EE5C4F77377D7F5075C64BA4B57998BC79326C5E
Certificate serial:       02
Authority key identifier: EE:5C:4F:77:37:7D:7F:50:75:C6:4B:A4:B5:79:98:BC:79:32:6C:5E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7lxPdzd9f1B1xkuktXmYvHkybF4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/653/Oq_cwLQluihHm0oKOE63durrEg8.roa
Signing time:             Tue 16 Apr 2024 05:01:44 +0000
ROA not before:           Tue 16 Apr 2024 05:01:44 +0000
ROA not after:            Wed 16 Apr 2025 04:54:04 +0000
asID:                     17931
IP address blocks:        103.238.236.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/653/7lxPdzd9f1B1xkuktXmYvHkybF4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/653/7lxPdzd9f1B1xkuktXmYvHkybF4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7lxPdzd9f1B1xkuktXmYvHkybF4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE5C4F77377D7F5075C64BA4B57998BC79326C5E
        Validity
            Not Before: Apr 16 05:01:44 2024 GMT
            Not After : Apr 16 04:54:04 2025 GMT
        Subject: CN=3AAFDCC0B425BA28479B4A0A384EB776EAEB120F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b4:47:95:96:f1:d2:ad:3d:03:fc:08:84:f7:
                    88:cd:c6:43:34:ad:de:8c:48:df:5b:59:bc:57:66:
                    36:ae:34:5c:f1:05:a2:5d:5c:19:1a:f4:89:d2:46:
                    ce:c9:64:44:07:6d:df:a2:03:87:0b:d8:7f:72:d3:
                    13:32:73:19:d9:ef:ff:4e:ba:8f:48:b0:28:df:d5:
                    47:02:cf:04:cb:9c:d5:a5:7f:ac:a8:90:f1:ef:e7:
                    9d:94:06:ce:b9:c7:f5:a3:d8:5f:9a:d4:df:4d:db:
                    05:93:07:16:5f:a5:c8:0b:46:44:60:1d:91:c4:34:
                    58:7a:25:05:30:69:83:fa:2d:ff:9a:c8:b4:36:60:
                    b1:b3:e9:d2:93:3c:15:68:a4:2d:f7:90:a9:26:b3:
                    ff:71:d7:be:62:3f:b5:67:8b:e2:d0:cc:11:2a:a2:
                    bd:74:7a:a7:7b:01:76:7d:57:fe:9c:fb:3b:6b:36:
                    78:43:a2:06:8f:da:b7:04:4d:ea:f1:07:b6:e9:5f:
                    4c:86:4c:19:f3:9b:4e:99:d1:47:23:0d:20:27:56:
                    3e:88:a1:62:a7:57:81:69:7d:c9:86:82:0f:50:3b:
                    c9:05:25:03:9f:e3:49:db:ae:46:15:df:07:b0:e1:
                    f1:c6:b4:eb:14:11:0a:07:16:b1:99:37:0a:64:44:
                    26:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:AF:DC:C0:B4:25:BA:28:47:9B:4A:0A:38:4E:B7:76:EA:EB:12:0F
            X509v3 Authority Key Identifier:
                keyid:EE:5C:4F:77:37:7D:7F:50:75:C6:4B:A4:B5:79:98:BC:79:32:6C:5E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/653/7lxPdzd9f1B1xkuktXmYvHkybF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7lxPdzd9f1B1xkuktXmYvHkybF4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/653/Oq_cwLQluihHm0oKOE63durrEg8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.238.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d9:88:0a:ca:10:37:27:ac:88:53:da:83:a4:bd:9e:bd:c6:4a:
         79:ea:e0:13:37:53:d6:d1:95:70:2b:67:87:0b:5e:81:be:0c:
         cc:1c:28:64:f5:2d:66:3d:a5:35:75:81:6b:19:f3:22:84:6a:
         3e:e8:33:b2:81:4c:9c:06:56:5b:dc:4d:1f:eb:a5:ed:09:1f:
         2f:76:8d:87:d6:70:d2:54:da:ce:9a:5d:13:ff:10:4b:2a:ce:
         53:d8:79:97:93:76:07:10:b8:be:32:34:5a:88:b0:58:ce:93:
         6a:03:ff:ce:37:1a:9e:96:b2:61:48:5f:3e:92:a7:05:c3:d6:
         5b:93:c8:b5:a4:75:40:b5:a4:67:e0:f1:3e:d0:02:da:1a:31:
         b4:f0:80:d4:63:36:ec:d3:95:66:95:f8:59:e2:e8:3b:26:31:
         2b:30:03:d5:27:9c:14:d5:d7:20:ad:c4:f4:a6:77:cf:7f:a1:
         07:87:fb:0b:a5:7f:4d:b8:1a:88:9c:b1:6e:e9:10:68:a3:31:
         c4:f6:83:84:a4:5a:07:c5:69:ee:ef:78:a0:d3:c5:5d:0a:23:
         5c:9d:25:b3:32:c3:01:f9:af:c2:71:53:f6:02:1d:8b:ad:19:
         1e:40:95:a7:80:3c:e4:eb:c8:38:7b:7a:05:40:27:25:be:78:
         76:86:0c:12
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBAjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFRTVD
NEY3NzM3N0Q3RjUwNzVDNjRCQTRCNTc5OThCQzc5MzI2QzVFMB4XDTI0MDQxNjA1
MDE0NFoXDTI1MDQxNjA0NTQwNFowMzExMC8GA1UEAxMoM0FBRkRDQzBCNDI1QkEy
ODQ3OUI0QTBBMzg0RUI3NzZFQUVCMTIwRjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKm0R5WW8dKtPQP8CIT3iM3GQzSt3oxI31tZvFdmNq40XPEFol1c
GRr0idJGzslkRAdt36IDhwvYf3LTEzJzGdnv/066j0iwKN/VRwLPBMuc1aV/rKiQ
8e/nnZQGzrnH9aPYX5rU303bBZMHFl+lyAtGRGAdkcQ0WHolBTBpg/ot/5rItDZg
sbPp0pM8FWikLfeQqSaz/3HXvmI/tWeL4tDMESqivXR6p3sBdn1X/pz7O2s2eEOi
Bo/atwRN6vEHtulfTIZMGfObTpnRRyMNICdWPoihYqdXgWl9yYaCD1A7yQUlA5/j
SduuRhXfB7Dh8ca06xQRCgcWsZk3CmREJm0CAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBQ6r9zAtCW6KEebSgo4Trd26usSDzAfBgNVHSMEGDAWgBTuXE93N31/UHXGS6S1
eZi8eTJsXjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNjUzLzdseFBkemQ5ZjFCMXhrdWt0WG1ZdkhreWJGNC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzdseFBkemQ5ZjFCMXhrdWt0WG1Zdkhr
eWJGNC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC82NTMvT3FfY3dMUWx1aWhIbTBvS09FNjNkdXJyRWc4LnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAmfu7DANBgkqhkiG9w0BAQsFAAOCAQEA2YgKyhA3J6yIU9qDpL2evcZKeerg
EzdT1tGVcCtnhwtegb4MzBwoZPUtZj2lNXWBaxnzIoRqPugzsoFMnAZWW9xNH+ul
7QkfL3aNh9Zw0lTazppdE/8QSyrOU9h5l5N2BxC4vjI0WoiwWM6TagP/zjcanpay
YUhfPpKnBcPWW5PItaR1QLWkZ+DxPtAC2hoxtPCA1GM27NOVZpX4WeLoOyYxKzAD
1SecFNXXIK3E9KZ3z3+hB4f7C6V/TbgaiJyxbukQaKMxxPaDhKRaB8Vp7u94oNPF
XQojXJ0lszLDAfmvwnFT9gIdi60ZHkCVp4A85OvIOHt6BUAnJb54doYMEg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:24 2024 by rpki-client on console-fra.rpki-client.org