Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/FRxTkb7ZyQwgu6A7esgUtni240Y.roa
File:                     FRxTkb7ZyQwgu6A7esgUtni240Y.roa (raw, json)
Hash identifier:          IsWf7A7/5H1PzubdbZ7QBQ0dm+N+9YgUvChRCmMTFaY=
Subject key identifier:   15:1C:53:91:BE:D9:C9:0C:20:BB:A0:3B:7A:C8:14:B6:78:B6:E3:46
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0128
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/FRxTkb7ZyQwgu6A7esgUtni240Y.roa
Signing time:             Fri 01 Sep 2023 01:30:31 +0000
ROA not before:           Fri 01 Sep 2023 01:30:31 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     9824
IP address blocks:        103.192.68.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 296 (0x128)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Sep  1 01:30:31 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=151C5391BED9C90C20BBA03B7AC814B678B6E346
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ee:ac:61:8f:64:f3:ee:45:82:e2:05:7d:bc:
                    ea:4d:af:77:3f:02:04:64:57:f8:b3:8c:4e:c9:4f:
                    7b:f4:4d:c0:20:56:d1:32:15:fc:a4:1a:07:c6:08:
                    b9:77:bb:b0:d9:87:af:fa:0c:58:e7:ee:da:7b:59:
                    2b:61:bc:7d:3b:d7:1f:8f:4b:ee:5c:3a:ff:8c:a7:
                    62:69:fc:f1:23:82:af:65:c1:e2:a5:7a:29:e0:7e:
                    ef:42:c9:f0:0c:56:e0:ef:12:d0:c6:22:47:07:ce:
                    ba:c6:a6:73:de:1a:33:86:3d:d5:f4:cd:00:e4:e3:
                    0e:98:38:4e:9a:0d:1a:91:2e:35:20:da:c6:43:b2:
                    a0:61:d3:34:e2:4d:30:e6:4f:5a:94:de:9e:b6:94:
                    01:7a:81:88:d4:74:25:43:b3:53:09:96:07:37:c4:
                    3f:10:ed:30:a4:9d:86:62:8f:df:20:5e:69:62:8d:
                    e7:40:b7:00:17:97:e9:19:b1:4d:2a:86:70:39:7a:
                    41:c0:10:0a:07:ed:64:59:89:64:e5:d9:fa:a7:38:
                    b6:7e:d8:7c:e3:aa:10:64:21:1a:ec:30:d9:4d:35:
                    77:d0:1a:5d:de:91:34:be:71:05:9c:dd:c0:7d:a6:
                    ea:4b:a0:be:36:d6:3a:5d:15:72:c9:3f:7e:fd:26:
                    33:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:1C:53:91:BE:D9:C9:0C:20:BB:A0:3B:7A:C8:14:B6:78:B6:E3:46
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/FRxTkb7ZyQwgu6A7esgUtni240Y.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.192.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ee:54:7b:b2:10:f9:ad:e4:be:a4:5f:77:6a:15:8f:1e:59:e2:
         11:21:94:df:93:1e:c3:8a:36:fb:ea:8d:03:ef:8b:f2:47:9b:
         22:59:84:dd:49:7d:0c:af:87:a7:17:8b:b2:7c:59:47:1d:7f:
         26:5e:91:8c:d8:a1:15:eb:2a:33:a8:41:28:30:b6:1f:74:04:
         f4:35:59:f0:1d:be:17:6f:2b:4d:50:30:9b:f9:fd:1f:e9:c3:
         13:f4:9b:7c:8e:e5:e7:07:03:aa:52:80:53:92:63:75:b5:7f:
         0c:e7:bf:bb:06:84:a8:d0:34:1c:6c:a5:71:27:28:36:a0:40:
         e6:98:25:7e:b0:53:28:d7:9f:ae:af:36:5e:7b:fa:9d:95:10:
         be:df:56:01:81:f7:5c:61:f4:2c:cf:2b:31:0f:99:e8:e5:e9:
         39:58:0d:f5:20:22:2c:f7:26:db:97:89:06:c7:a3:a3:e5:05:
         0f:fe:4f:e5:ae:73:66:c8:ba:0b:ad:c5:1f:2b:e8:15:65:8e:
         6b:a4:38:06:ed:86:23:53:78:5f:fc:5d:ea:ec:0a:62:14:9d:
         7f:87:58:4d:c7:d4:de:91:4a:bd:b7:e9:27:22:af:14:60:a4:
         d8:f1:63:8a:82:11:17:8a:1f:f9:17:0f:ef:e0:26:63:ec:40:
         6d:b4:2f:74
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICASgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yMzA5MDEw
MTMwMzFaFw0yNDA4MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDE1MUM1MzkxQkVEOUM5
MEMyMEJCQTAzQjdBQzgxNEI2NzhCNkUzNDYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCe7qxhj2Tz7kWC4gV9vOpNr3c/AgRkV/izjE7JT3v0TcAgVtEy
FfykGgfGCLl3u7DZh6/6DFjn7tp7WSthvH071x+PS+5cOv+Mp2Jp/PEjgq9lweKl
eingfu9CyfAMVuDvEtDGIkcHzrrGpnPeGjOGPdX0zQDk4w6YOE6aDRqRLjUg2sZD
sqBh0zTiTTDmT1qU3p62lAF6gYjUdCVDs1MJlgc3xD8Q7TCknYZij98gXmlijedA
twAXl+kZsU0qhnA5ekHAEAoH7WRZiWTl2fqnOLZ+2HzjqhBkIRrsMNlNNXfQGl3e
kTS+cQWc3cB9pupLoL421jpdFXLJP379JjPtAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUFRxTkb7ZyQwgu6A7esgUtni240YwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNjcxL0ZSeFRrYjdaeVF3Z3U2QTdlc2dVdG5pMjQwWS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAJnwEQwDQYJKoZIhvcNAQELBQADggEBAO5Ue7IQ+a3kvqRfd2oVjx5Z4hEh
lN+THsOKNvvqjQPvi/JHmyJZhN1JfQyvh6cXi7J8WUcdfyZekYzYoRXrKjOoQSgw
th90BPQ1WfAdvhdvK01QMJv5/R/pwxP0m3yO5ecHA6pSgFOSY3W1fwznv7sGhKjQ
NBxspXEnKDagQOaYJX6wUyjXn66vNl57+p2VEL7fVgGB91xh9CzPKzEPmejl6TlY
DfUgIiz3JtuXiQbHo6PlBQ/+T+Wuc2bIugutxR8r6BVljmukOAbthiNTeF/8Xers
CmIUnX+HWE3H1N6RSr236ScirxRgpNjxY4qCEReKH/kXD+/gJmPsQG20L3Q=
-----END CERTIFICATE-----
Generated at Thu May 30 03:08:55 2024 by rpki-client on console-fra.rpki-client.org