Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/CS8_XCvfxHzpBBUpM2ZUg9YhcyU.roa
File:                     CS8_XCvfxHzpBBUpM2ZUg9YhcyU.roa (raw, json)
Hash identifier:          oh5ndm0x3Kt9uULcaLhxZL5i2EaUxiKbeayMkGYiPHg=
Subject key identifier:   09:2F:3F:5C:2B:DF:C4:7C:E9:04:15:29:33:66:54:83:D6:21:73:25
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       01D4
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/CS8_XCvfxHzpBBUpM2ZUg9YhcyU.roa
Signing time:             Sun 01 Oct 2023 01:38:25 +0000
ROA not before:           Sun 01 Oct 2023 01:38:25 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     9617
IP address blocks:        211.124.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 468 (0x1d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct  1 01:38:25 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=092F3F5C2BDFC47CE904152933665483D6217325
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:58:db:4e:e7:44:51:b1:27:02:5b:16:bf:b4:
                    b1:d3:33:de:ef:da:61:aa:45:dc:68:47:68:e4:35:
                    d6:f1:6d:5e:a7:55:89:c6:c6:b2:f5:fe:2e:a6:05:
                    b5:91:dd:3a:c2:a1:9e:8b:63:49:c3:25:00:bb:dc:
                    8f:3f:e7:fe:86:29:64:c0:58:2e:bb:ff:82:26:46:
                    7e:04:66:17:87:4a:b1:fe:6c:1e:53:0c:e7:b3:5b:
                    a4:6c:50:12:3e:49:38:53:bf:c0:4e:be:30:18:c4:
                    19:36:b7:2e:dd:49:ca:9e:0e:62:70:c5:35:e7:a8:
                    8d:e2:2b:66:d2:80:e6:73:ee:a9:6f:f4:e0:54:15:
                    f0:64:b0:d2:3b:3b:46:84:83:24:b9:03:44:11:7d:
                    b6:b5:55:f6:a1:ef:22:c1:e2:97:2d:4b:e9:25:ca:
                    61:b2:c5:8f:57:a0:5b:f9:8f:9f:a1:fd:a9:ff:5c:
                    de:96:a7:4e:51:5e:d2:a8:28:95:0c:81:03:62:ce:
                    40:d1:f0:46:53:ea:37:35:e5:17:97:ca:f5:85:9b:
                    71:f8:87:1b:d8:98:1b:c9:31:be:b6:0c:7a:4d:36:
                    64:f0:09:3a:41:58:4d:87:df:70:54:52:ec:2d:44:
                    9d:ad:8b:a6:76:f2:13:24:0e:cd:0c:e6:09:b9:a0:
                    f8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:2F:3F:5C:2B:DF:C4:7C:E9:04:15:29:33:66:54:83:D6:21:73:25
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/CS8_XCvfxHzpBBUpM2ZUg9YhcyU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.124.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         d4:4a:4c:62:81:b4:4f:69:bd:70:0a:cd:e1:d2:e9:b6:fb:b7:
         f6:d4:4d:69:e9:13:b9:59:a4:6d:0e:f9:94:5f:19:98:6c:25:
         81:0d:a9:9b:b8:c8:4f:13:22:4a:26:30:6e:f1:40:14:61:62:
         cd:de:81:24:33:c3:43:c2:09:17:4a:0c:c7:d1:75:ef:ad:a2:
         e5:f8:77:97:7f:54:eb:2f:a0:d4:e4:10:93:03:ed:36:d9:2e:
         35:d2:66:b0:27:fc:ed:79:d8:0b:37:85:9f:11:60:f9:d0:94:
         4f:24:fe:d7:df:ee:e4:56:51:7a:1d:dd:8e:aa:2c:95:6d:50:
         00:04:54:4f:9a:ff:5e:da:d9:94:0a:38:e3:af:5a:da:6b:a3:
         36:ef:5e:f9:7c:bf:a7:3e:03:a0:49:36:a8:de:68:63:44:fb:
         d3:eb:74:0c:78:3a:38:69:fe:6e:82:f4:94:1c:68:54:40:f8:
         ab:c8:dd:03:a1:08:f0:82:2f:4f:38:ff:f4:91:4e:5f:d8:15:
         86:e7:2a:95:cb:04:78:08:b7:89:c9:d2:35:5d:83:51:e1:b1:
         35:a2:c5:e6:0b:4f:c1:89:db:cb:87:d1:08:f3:4e:f4:db:c5:
         5d:40:a4:0e:48:cf:14:00:60:be:e7:32:17:c4:f0:ba:03:1c:
         72:16:7b:06
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICAdQwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yMzEwMDEw
MTM4MjVaFw0yNDA5MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDA5MkYzRjVDMkJERkM0
N0NFOTA0MTUyOTMzNjY1NDgzRDYyMTczMjUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDxWNtO50RRsScCWxa/tLHTM97v2mGqRdxoR2jkNdbxbV6nVYnG
xrL1/i6mBbWR3TrCoZ6LY0nDJQC73I8/5/6GKWTAWC67/4ImRn4EZheHSrH+bB5T
DOezW6RsUBI+SThTv8BOvjAYxBk2ty7dScqeDmJwxTXnqI3iK2bSgOZz7qlv9OBU
FfBksNI7O0aEgyS5A0QRfba1Vfah7yLB4pctS+klymGyxY9XoFv5j5+h/an/XN6W
p05RXtKoKJUMgQNizkDR8EZT6jc15ReXyvWFm3H4hxvYmBvJMb62DHpNNmTwCTpB
WE2H33BUUuwtRJ2ti6Z28hMkDs0M5gm5oPjtAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQUCS8/XCvfxHzpBBUpM2ZUg9YhcyUwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNjcxL0NTOF9YQ3ZmeEh6cEJCVXBNMlpVZzlZaGN5VS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwDTfDANBgkqhkiG9w0BAQsFAAOCAQEA1EpMYoG0T2m9cArN4dLptvu39tRN
aekTuVmkbQ75lF8ZmGwlgQ2pm7jITxMiSiYwbvFAFGFizd6BJDPDQ8IJF0oMx9F1
762i5fh3l39U6y+g1OQQkwPtNtkuNdJmsCf87XnYCzeFnxFg+dCUTyT+19/u5FZR
eh3djqoslW1QAARUT5r/XtrZlAo4469a2mujNu9e+Xy/pz4DoEk2qN5oY0T70+t0
DHg6OGn+boL0lBxoVED4q8jdA6EI8IIvTzj/9JFOX9gVhucqlcsEeAi3icnSNV2D
UeGxNaLF5gtPwYnby4fRCPNO9NvFXUCkDkjPFABgvucyF8TwugMcchZ7Bg==
-----END CERTIFICATE-----
Generated at Thu May 30 03:08:55 2024 by rpki-client on console-fra.rpki-client.org