Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/BITYMr1bGAQovCdPFKP6-Mc07xQ.roa
File:                     BITYMr1bGAQovCdPFKP6-Mc07xQ.roa (raw, json)
Hash identifier:          nctUiBudpxYSxbFdKqnJiff8UmkKVYTf7iGwR7K2MUY=
Subject key identifier:   04:84:D8:32:BD:5B:18:04:28:BC:27:4F:14:A3:FA:F8:C7:34:EF:14
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       01EF
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/BITYMr1bGAQovCdPFKP6-Mc07xQ.roa
Signing time:             Wed 01 Nov 2023 01:30:30 +0000
ROA not before:           Wed 01 Nov 2023 01:30:30 +0000
ROA not after:            Mon 14 Oct 2024 01:30:03 +0000
asID:                     0
IP address blocks:        61.206.96.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 May 2024 21:46:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 495 (0x1ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Nov  1 01:30:30 2023 GMT
            Not After : Oct 14 01:30:03 2024 GMT
        Subject: CN=0484D832BD5B180428BC274F14A3FAF8C734EF14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:57:a3:d5:9a:bd:f5:01:e0:b4:3e:84:b0:85:
                    ba:88:f7:cc:6f:71:f0:c4:2a:d2:84:8d:52:a1:5b:
                    af:1f:0b:96:f2:f6:7f:96:ce:40:c4:90:53:87:48:
                    e1:ce:d2:34:b2:a1:2c:c6:6b:59:5e:7d:b7:1c:52:
                    bc:95:8a:cc:b1:c0:92:10:85:a4:67:57:26:f4:d1:
                    b3:16:61:de:db:32:83:11:6c:ee:a6:0c:a3:d0:dc:
                    73:ce:0c:a1:2b:17:7c:16:2b:ce:c2:0a:a7:8b:72:
                    bf:02:35:cf:af:ea:9f:00:d3:99:2f:e2:0c:cd:74:
                    a4:65:6f:c1:9d:09:db:7e:f9:fd:82:65:ea:0b:d9:
                    80:bd:c1:a5:c3:14:ab:21:f7:7c:65:24:3a:8c:8c:
                    1b:5f:9f:be:5a:19:9c:93:34:d0:7a:44:78:f5:2e:
                    e2:a3:2e:c3:19:65:c8:f9:8e:1b:71:5f:5d:55:c6:
                    ac:cc:9e:ea:89:59:14:73:f7:6d:74:2a:ee:8f:77:
                    a3:0a:22:5d:fa:c6:8b:d9:e9:53:09:60:4f:84:9b:
                    1b:c2:ec:5c:63:5d:ae:40:12:8a:88:ff:05:58:b4:
                    65:ba:9a:c9:99:9d:c5:d5:1b:e7:f4:64:b6:04:3b:
                    74:dd:80:8c:a5:cf:7c:6f:66:6e:99:f4:5b:42:1c:
                    bc:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:84:D8:32:BD:5B:18:04:28:BC:27:4F:14:A3:FA:F8:C7:34:EF:14
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/BITYMr1bGAQovCdPFKP6-Mc07xQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.206.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         28:9b:32:5c:42:5b:d1:8c:fe:87:07:2b:58:a4:d6:04:00:2a:
         9f:8b:a0:41:6d:c9:27:aa:19:bd:2d:e3:e7:b1:7e:93:9c:18:
         1f:21:01:dd:a4:f4:a7:65:44:ce:af:b1:ce:a3:f7:9d:97:2e:
         1d:a4:b7:1b:66:56:51:a1:b1:c1:d6:62:05:65:eb:55:f9:a1:
         7a:33:84:a2:41:9b:58:f8:a9:25:ec:93:be:c0:8f:08:92:ff:
         11:5e:a5:01:bd:81:79:23:ff:aa:bd:df:59:64:d6:5e:c5:4c:
         11:e9:a7:b0:33:13:9a:0a:5b:b2:08:01:54:18:31:99:69:38:
         7c:39:39:96:2f:1f:93:ff:35:a1:38:76:8a:00:75:59:17:7d:
         24:02:15:d4:f9:97:6f:10:63:0f:ba:3f:a4:6b:5b:36:ec:fe:
         e9:b3:53:a0:de:b5:f8:a1:ae:cc:18:44:60:03:0b:48:f6:1a:
         70:46:43:27:f4:fb:cd:4f:17:f4:88:d7:7c:84:69:e8:89:33:
         6e:f9:80:53:d1:e3:c3:9a:c5:72:41:1a:a3:5d:37:c2:bb:ac:
         5d:95:f1:6d:f9:b4:9e:90:08:ee:c0:68:39:11:93:2f:f3:89:
         91:13:fe:cd:41:5f:f7:53:3a:6f:92:37:40:ab:9e:5d:72:2e:
         08:65:be:db
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAe8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yMzExMDEw
MTMwMzBaFw0yNDEwMTQwMTMwMDNaMDMxMTAvBgNVBAMTKDA0ODREODMyQkQ1QjE4
MDQyOEJDMjc0RjE0QTNGQUY4QzczNEVGMTQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC8V6PVmr31AeC0PoSwhbqI98xvcfDEKtKEjVKhW68fC5by9n+W
zkDEkFOHSOHO0jSyoSzGa1lefbccUryVisyxwJIQhaRnVyb00bMWYd7bMoMRbO6m
DKPQ3HPODKErF3wWK87CCqeLcr8CNc+v6p8A05kv4gzNdKRlb8GdCdt++f2CZeoL
2YC9waXDFKsh93xlJDqMjBtfn75aGZyTNNB6RHj1LuKjLsMZZcj5jhtxX11VxqzM
nuqJWRRz9210Ku6Pd6MKIl36xovZ6VMJYE+EmxvC7FxjXa5AEoqI/wVYtGW6msmZ
ncXVG+f0ZLYEO3TdgIylz3xvZm6Z9FtCHLzHAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUBITYMr1bGAQovCdPFKP6+Mc07xQwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNjcxL0JJVFlNcjFiR0FRb3ZDZFBGS1A2LU1jMDd4US5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAQ9zmAwDQYJKoZIhvcNAQELBQADggEBACibMlxCW9GM/ocHK1ik1gQAKp+L
oEFtySeqGb0t4+exfpOcGB8hAd2k9KdlRM6vsc6j952XLh2ktxtmVlGhscHWYgVl
61X5oXozhKJBm1j4qSXsk77AjwiS/xFepQG9gXkj/6q931lk1l7FTBHpp7AzE5oK
W7IIAVQYMZlpOHw5OZYvH5P/NaE4dooAdVkXfSQCFdT5l28QYw+6P6RrWzbs/umz
U6DetfihrswYRGADC0j2GnBGQyf0+81PF/SI13yEaeiJM275gFPR48OaxXJBGqNd
N8K7rF2V8W35tJ6QCO7AaDkRky/ziZET/s1BX/dTOm+SN0Crnl1yLghlvts=
-----END CERTIFICATE-----
Generated at Thu Apr 25 00:30:36 2024 by rpki-client on console-fra.rpki-client.org