Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/9w30Pnj_vO0MnKKazWcIelQ9GIc.roa
File:                     9w30Pnj_vO0MnKKazWcIelQ9GIc.roa (raw, json)
Hash identifier:          aJw3qE3tEn0GgspxPsZxRpEVDPM2U1DoXtz6G43kqiA=
Subject key identifier:   F7:0D:F4:3E:78:FF:BC:ED:0C:9C:A2:9A:CD:67:08:7A:54:3D:18:87
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0179
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/9w30Pnj_vO0MnKKazWcIelQ9GIc.roa
Signing time:             Sun 01 Oct 2023 01:34:26 +0000
ROA not before:           Sun 01 Oct 2023 01:34:26 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     9824
IP address blocks:        110.92.80.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 01:34:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 377 (0x179)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct  1 01:34:26 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=F70DF43E78FFBCED0C9CA29ACD67087A543D1887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:91:9f:ff:e9:0f:de:b5:aa:87:f5:a8:e0:d9:
                    b1:9e:e2:08:6f:83:fc:20:99:13:ec:f4:5a:8f:8f:
                    87:dd:10:e3:56:1d:cd:ad:d4:7a:c7:cf:48:5c:68:
                    f9:06:4d:13:9f:59:f3:6e:58:a9:0f:98:46:0d:65:
                    4d:7e:38:be:0e:cf:77:b9:2f:c6:19:d7:6d:8f:21:
                    b1:4b:db:02:91:7b:cb:88:56:cc:a3:ba:7f:be:b0:
                    dc:29:d9:38:2e:0f:e7:63:7c:95:5f:d3:61:5f:90:
                    54:a2:ed:c0:60:cc:21:87:c5:3b:a3:7f:20:61:8f:
                    4f:31:69:13:00:40:ba:ef:e2:6f:57:c7:dd:ec:db:
                    a4:56:f6:bd:b8:a7:c4:80:c7:6f:34:c9:8e:9a:98:
                    d5:62:4c:7f:4b:80:9a:f4:7b:26:d8:d8:6c:2d:49:
                    91:40:23:2f:8c:8b:ab:a0:79:3f:49:07:4d:8d:7b:
                    9d:29:2b:7f:b6:ba:02:0f:c1:3e:25:6d:51:2f:f9:
                    24:a7:79:b7:84:9f:15:27:7f:6a:c4:5c:ba:7c:19:
                    2e:09:4a:0b:3a:87:60:34:5b:48:33:f2:9a:a5:bb:
                    0d:77:62:61:d4:ef:64:8d:1e:37:79:b7:57:30:5d:
                    0a:56:6b:03:6a:68:b6:64:06:de:62:b1:ea:b5:9a:
                    88:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:0D:F4:3E:78:FF:BC:ED:0C:9C:A2:9A:CD:67:08:7A:54:3D:18:87
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/9w30Pnj_vO0MnKKazWcIelQ9GIc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.92.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         bf:36:a2:b7:20:b3:4d:d3:e5:ca:cb:d7:0e:d7:b5:17:1a:f0:
         84:b6:44:1c:7b:7b:e1:62:19:a7:fe:f3:b8:ed:58:89:52:14:
         a2:7f:3f:9d:d5:67:39:ea:07:4b:2a:c6:c6:d0:a5:8b:d8:6a:
         fc:26:ce:70:89:45:94:b9:b9:f7:e2:88:a2:d1:46:02:76:0f:
         6b:e9:58:8a:95:d4:47:e7:ed:a2:ac:65:c6:a7:7e:4a:98:49:
         47:32:36:67:a1:61:8a:f9:14:94:e0:b8:fb:da:a0:6a:ba:5a:
         26:48:51:2b:e6:df:97:4a:d4:8d:f5:74:d2:ca:26:0d:50:2c:
         34:5d:54:0f:5f:85:dd:2d:17:94:5f:be:3e:44:67:91:e1:b3:
         16:0f:11:cc:d2:2e:2b:56:62:d7:99:5a:b9:fa:7f:d5:b4:ec:
         9b:a7:29:e0:91:bd:eb:2b:a8:93:e3:1c:02:76:07:75:35:e8:
         c0:66:96:1c:cf:9a:53:8a:9d:a2:7b:3c:e5:10:c8:c5:57:57:
         24:3f:c8:92:19:6c:33:75:06:25:b6:37:68:3e:47:de:35:c7:
         d8:c8:0e:91:18:02:fa:68:6d:00:e3:50:c2:6a:21:cd:35:7c:
         ad:80:c5:ec:8d:79:30:2a:27:64:7d:54:df:fb:81:8a:b3:28:
         9e:6e:cd:2e
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAXkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yMzEwMDEw
MTM0MjZaFw0yNDA5MTQwMTMwMDNaMDMxMTAvBgNVBAMTKEY3MERGNDNFNzhGRkJD
RUQwQzlDQTI5QUNENjcwODdBNTQzRDE4ODcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCxkZ//6Q/etaqH9ajg2bGe4ghvg/wgmRPs9FqPj4fdEONWHc2t
1HrHz0hcaPkGTROfWfNuWKkPmEYNZU1+OL4Oz3e5L8YZ122PIbFL2wKRe8uIVsyj
un++sNwp2TguD+djfJVf02FfkFSi7cBgzCGHxTujfyBhj08xaRMAQLrv4m9Xx93s
26RW9r24p8SAx280yY6amNViTH9LgJr0eybY2GwtSZFAIy+Mi6ugeT9JB02Ne50p
K3+2ugIPwT4lbVEv+SSnebeEnxUnf2rEXLp8GS4JSgs6h2A0W0gz8pqluw13YmHU
72SNHjd5t1cwXQpWawNqaLZkBt5iseq1mohvAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU9w30Pnj/vO0MnKKazWcIelQ9GIcwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNjcxLzl3MzBQbmpfdk8wTW5LS2F6V2NJZWxROUdJYy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBARuXFAwDQYJKoZIhvcNAQELBQADggEBAL82orcgs03T5crL1w7XtRca8IS2
RBx7e+FiGaf+87jtWIlSFKJ/P53VZznqB0sqxsbQpYvYavwmznCJRZS5uffiiKLR
RgJ2D2vpWIqV1Efn7aKsZcanfkqYSUcyNmehYYr5FJTguPvaoGq6WiZIUSvm35dK
1I31dNLKJg1QLDRdVA9fhd0tF5Rfvj5EZ5HhsxYPEczSLitWYteZWrn6f9W07Jun
KeCRvesrqJPjHAJ2B3U16MBmlhzPmlOKnaJ7POUQyMVXVyQ/yJIZbDN1BiW2N2g+
R941x9jIDpEYAvpobQDjUMJqIc01fK2AxeyNeTAqJ2R9VN/7gYqzKJ5uzS4=
-----END CERTIFICATE-----
Generated at Sat May 18 12:40:38 2024 by rpki-client on console-ams.rpki-client.org