Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/6i8ts6ZLYLb5NEPksZCQBX6w2oQ.roa
File:                     6i8ts6ZLYLb5NEPksZCQBX6w2oQ.roa (raw, json)
Hash identifier:          n1GOTqrBM6a3iqoSUr76Favp5DN0DrF7bqoJN2cOM/I=
Subject key identifier:   EA:2F:2D:B3:A6:4B:60:B6:F9:34:43:E4:B1:90:90:05:7E:B0:DA:84
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       01D0
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/6i8ts6ZLYLb5NEPksZCQBX6w2oQ.roa
Signing time:             Sun 01 Oct 2023 01:38:23 +0000
ROA not before:           Sun 01 Oct 2023 01:38:23 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     9617
IP address blocks:        125.4.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 01:34:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 464 (0x1d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct  1 01:38:23 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=EA2F2DB3A64B60B6F93443E4B19090057EB0DA84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e6:be:1b:65:f3:7c:7c:89:d2:79:8b:28:d8:
                    30:58:14:fe:b8:06:1a:e4:9f:70:54:91:0e:c6:27:
                    37:e1:1a:a3:1e:9e:61:e6:54:a6:2a:93:c1:c4:c8:
                    a8:44:6c:10:ca:c3:15:7d:cd:18:58:c2:14:19:93:
                    3b:56:db:5d:af:8c:7d:14:01:af:ed:dc:c3:91:c4:
                    c1:b7:f4:c6:83:35:40:e8:f2:fa:01:d5:06:fc:26:
                    e3:6e:b4:bc:fc:31:11:c8:57:c5:cc:6f:c7:ce:37:
                    89:51:00:2a:91:8b:89:1e:a3:a8:b1:b4:e6:d7:b8:
                    fb:20:87:0f:de:22:93:62:ef:50:b1:9d:d8:03:fd:
                    ad:e5:40:b3:50:e3:86:b3:30:09:ef:94:79:21:3d:
                    07:0d:9d:98:de:07:94:26:91:56:1e:50:6c:6f:69:
                    b1:d7:b1:b9:a6:05:e4:ba:08:74:64:85:85:c0:88:
                    f0:b0:d4:86:9d:7f:75:1a:97:de:4a:57:e3:4e:b4:
                    29:e8:90:64:15:75:5d:55:f3:b1:b0:87:02:da:86:
                    ce:85:46:20:8d:af:de:df:fd:e1:d8:c9:6a:73:03:
                    25:54:95:64:9f:93:66:47:33:48:43:a2:12:6d:0a:
                    b3:83:cb:cd:50:c0:4a:63:a9:eb:a9:a3:a0:55:95:
                    bc:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:2F:2D:B3:A6:4B:60:B6:F9:34:43:E4:B1:90:90:05:7E:B0:DA:84
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/6i8ts6ZLYLb5NEPksZCQBX6w2oQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.4.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         e8:1e:19:d2:7b:0b:93:ed:08:57:d1:c6:dc:f6:54:d7:98:5c:
         20:6e:78:d4:15:b1:51:63:d3:33:12:c1:cf:64:65:e8:85:07:
         da:2e:b9:5b:ab:c8:54:e5:a7:be:23:52:dc:8f:f5:16:06:44:
         36:9e:5a:5d:a2:31:35:4b:5a:17:b3:9c:77:96:8c:f1:04:5a:
         1a:a2:be:c7:1d:fc:5b:c7:de:c6:84:e7:63:8d:cc:49:9a:68:
         3b:5f:17:ef:a3:31:7f:0a:6b:8a:30:79:ca:dd:49:78:ca:39:
         04:a6:ff:a5:86:ea:c3:ba:62:4b:b7:a2:bd:b5:0f:f7:81:59:
         fd:5b:92:2f:b2:10:f8:dd:e1:b8:af:b3:fb:1a:5f:1c:42:e5:
         75:7c:da:3f:8e:67:a4:29:dd:d3:41:2b:bb:72:d7:8a:e2:97:
         5a:88:f1:1d:35:46:b6:01:f1:bd:51:c2:3f:7c:2f:d5:e6:7b:
         c8:38:6f:43:b2:36:ec:53:87:81:fe:83:de:b3:7a:af:69:8f:
         67:d5:be:68:4b:e2:b7:38:ad:0c:81:7c:c3:dc:21:b3:99:44:
         9f:dc:e4:63:fa:2d:d6:5c:b1:2a:7a:9d:cf:7c:e6:d0:7a:e8:
         f9:24:66:6a:ae:cd:90:13:42:89:74:04:12:8a:24:86:25:86:
         0a:9b:62:69
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICAdAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yMzEwMDEw
MTM4MjNaFw0yNDA5MTQwMTMwMDNaMDMxMTAvBgNVBAMTKEVBMkYyREIzQTY0QjYw
QjZGOTM0NDNFNEIxOTA5MDA1N0VCMERBODQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDH5r4bZfN8fInSeYso2DBYFP64Bhrkn3BUkQ7GJzfhGqMenmHm
VKYqk8HEyKhEbBDKwxV9zRhYwhQZkztW212vjH0UAa/t3MORxMG39MaDNUDo8voB
1Qb8JuNutLz8MRHIV8XMb8fON4lRACqRi4keo6ixtObXuPsghw/eIpNi71CxndgD
/a3lQLNQ44azMAnvlHkhPQcNnZjeB5QmkVYeUGxvabHXsbmmBeS6CHRkhYXAiPCw
1Iadf3Ual95KV+NOtCnokGQVdV1V87GwhwLahs6FRiCNr97f/eHYyWpzAyVUlWSf
k2ZHM0hDohJtCrODy81QwEpjqeupo6BVlbx7AgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQU6i8ts6ZLYLb5NEPksZCQBX6w2oQwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNjcxLzZpOHRzNlpMWUxiNU5FUGtzWkNRQlg2dzJvUS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwB9BDANBgkqhkiG9w0BAQsFAAOCAQEA6B4Z0nsLk+0IV9HG3PZU15hcIG54
1BWxUWPTMxLBz2Rl6IUH2i65W6vIVOWnviNS3I/1FgZENp5aXaIxNUtaF7Ocd5aM
8QRaGqK+xx38W8fexoTnY43MSZpoO18X76MxfwprijB5yt1JeMo5BKb/pYbqw7pi
S7eivbUP94FZ/VuSL7IQ+N3huK+z+xpfHELldXzaP45npCnd00Eru3LXiuKXWojx
HTVGtgHxvVHCP3wv1eZ7yDhvQ7I27FOHgf6D3rN6r2mPZ9W+aEvitzitDIF8w9wh
s5lEn9zkY/ot1lyxKnqdz3zm0Hro+SRmaq7NkBNCiXQEEookhiWGCptiaQ==
-----END CERTIFICATE-----
Generated at Sat May 18 12:40:38 2024 by rpki-client on console-ams.rpki-client.org