Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/EoaJHT6jmhDk0MbrdzhMhwgBFgc.roa
File:                     EoaJHT6jmhDk0MbrdzhMhwgBFgc.roa (raw, json)
Hash identifier:          zQspwRet4QsDF849lFZNFABqn88p/em9mmg523TfmAs=
Subject key identifier:   12:86:89:1D:3E:A3:9A:10:E4:D0:C6:EB:77:38:4C:87:08:01:16:07
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       01A3
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/EoaJHT6jmhDk0MbrdzhMhwgBFgc.roa
Signing time:             Sun 01 Oct 2023 01:36:32 +0000
ROA not before:           Sun 01 Oct 2023 01:36:32 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     9824
IP address blocks:        203.89.32.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 419 (0x1a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct  1 01:36:32 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=1286891D3EA39A10E4D0C6EB77384C8708011607
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:aa:5f:7e:1e:c5:5b:10:c1:4b:09:31:2b:1e:
                    12:ec:1f:8e:2f:8d:f9:9a:8a:b3:2c:15:e7:29:b7:
                    f6:4b:fc:28:bb:81:48:25:54:7f:14:8d:fc:86:bc:
                    de:db:dc:2a:d1:1e:7a:52:00:d4:9c:07:fb:8d:f1:
                    56:87:e7:0b:7f:a4:85:52:6e:31:17:58:a5:a0:46:
                    e8:72:27:2b:10:a2:bc:99:4e:f6:dc:5a:14:8a:23:
                    26:9e:90:86:cb:ab:e2:2a:ae:77:db:68:7f:7b:9b:
                    51:a8:a5:ef:a5:15:28:98:36:c2:89:c9:ed:d1:2f:
                    40:dd:09:2b:b2:fe:e1:b9:53:8f:4f:13:da:c4:3e:
                    bf:ca:25:b6:a0:cb:45:91:49:f4:ec:f1:fb:ec:ca:
                    13:37:5f:8b:dd:5b:3d:ac:d9:6c:cf:5f:61:a8:bd:
                    17:46:1f:70:f0:2f:47:55:af:20:97:da:e2:83:ac:
                    fd:b8:6b:f2:9c:13:98:e4:fa:1a:46:81:27:b0:73:
                    6d:73:36:f6:e7:3c:c9:eb:2f:41:eb:82:99:7d:d2:
                    11:42:bf:cd:88:a0:81:df:9c:7b:76:86:e3:b4:04:
                    f7:6e:8f:e4:ed:17:62:6b:c2:b8:a8:5c:8f:70:c7:
                    fe:f5:b1:68:ad:ec:f6:8e:76:41:c0:37:32:f8:96:
                    3c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:86:89:1D:3E:A3:9A:10:E4:D0:C6:EB:77:38:4C:87:08:01:16:07
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/EoaJHT6jmhDk0MbrdzhMhwgBFgc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.89.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         36:3e:30:84:d8:4a:b1:50:0f:ce:2a:6e:de:00:02:3d:47:f5:
         2a:8e:5b:3d:3d:e8:6f:96:85:da:09:b0:ff:56:f7:bb:5b:62:
         a5:2f:6a:4f:5e:42:2a:6f:64:f2:41:db:9e:a6:e9:ff:6d:7d:
         fd:69:0e:4c:3b:de:e7:9e:f4:45:20:52:0f:70:fa:49:63:65:
         f1:4c:55:fe:a7:aa:aa:f7:b5:20:f7:af:d0:71:84:ba:34:46:
         6f:e5:39:4a:a7:1b:74:99:4a:13:e6:e4:41:75:5e:cd:08:4a:
         6b:2e:13:17:17:b4:d4:f3:c2:d4:c7:df:c5:36:ad:7d:93:ac:
         bc:81:15:2c:ee:8c:46:45:21:46:a1:58:91:45:91:53:44:96:
         c9:f5:5d:98:a5:74:41:12:4d:2a:5f:b5:04:a1:7a:5d:fc:d9:
         30:90:a9:92:83:2c:05:86:0f:de:80:5c:c6:fe:e7:bd:34:46:
         94:3c:43:41:cc:ed:17:24:0a:2f:c8:b3:30:5d:2b:3b:d7:44:
         d5:1d:e8:e5:29:49:1e:13:5b:be:d2:2b:ba:c3:21:06:24:df:
         9a:cd:fc:c9:5c:94:88:2c:a8:0e:f0:e8:5f:56:81:7a:f6:fb:
         e6:e2:d8:90:af:42:67:b4:b5:88:09:9d:01:a1:d1:03:c1:9b:
         44:5e:45:6f
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAaMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yMzEwMDEw
MTM2MzJaFw0yNDA5MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDEyODY4OTFEM0VBMzlB
MTBFNEQwQzZFQjc3Mzg0Qzg3MDgwMTE2MDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCcql9+HsVbEMFLCTErHhLsH44vjfmairMsFecpt/ZL/Ci7gUgl
VH8UjfyGvN7b3CrRHnpSANScB/uN8VaH5wt/pIVSbjEXWKWgRuhyJysQoryZTvbc
WhSKIyaekIbLq+IqrnfbaH97m1Gope+lFSiYNsKJye3RL0DdCSuy/uG5U49PE9rE
Pr/KJbagy0WRSfTs8fvsyhM3X4vdWz2s2WzPX2GovRdGH3DwL0dVryCX2uKDrP24
a/KcE5jk+hpGgSewc21zNvbnPMnrL0Hrgpl90hFCv82IoIHfnHt2huO0BPduj+Tt
F2JrwrioXI9wx/71sWit7PaOdkHANzL4ljw/AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUEoaJHT6jmhDk0MbrdzhMhwgBFgcwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNjcxL0VvYUpIVDZqbWhEazBNYnJkemhNaHdnQkZnYy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAXLWSAwDQYJKoZIhvcNAQELBQADggEBADY+MITYSrFQD84qbt4AAj1H9SqO
Wz096G+WhdoJsP9W97tbYqUvak9eQipvZPJB256m6f9tff1pDkw73uee9EUgUg9w
+kljZfFMVf6nqqr3tSD3r9BxhLo0Rm/lOUqnG3SZShPm5EF1Xs0ISmsuExcXtNTz
wtTH38U2rX2TrLyBFSzujEZFIUahWJFFkVNElsn1XZildEESTSpftQShel382TCQ
qZKDLAWGD96AXMb+5700RpQ8Q0HM7RckCi/IszBdKzvXRNUd6OUpSR4TW77SK7rD
IQYk35rN/MlclIgsqA7w6F9WgXr2++bi2JCvQme0tYgJnQGh0QPBm0ReRW8=
-----END CERTIFICATE-----
Generated at Thu May 30 03:38:52 2024 by rpki-client on console-ams.rpki-client.org