Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/Ktg8cvXgtVcvoGT27_atBlGC_rI.roa
File:                     Ktg8cvXgtVcvoGT27_atBlGC_rI.roa (raw, json)
Hash identifier:          rTER7svJaXJVKBuFTfbTacZb8ly1WGp8pbLkNwLMM4s=
Subject key identifier:   2A:D8:3C:72:F5:E0:B5:57:2F:A0:64:F6:EF:F6:AD:06:51:82:FE:B2
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0120
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/Ktg8cvXgtVcvoGT27_atBlGC_rI.roa
Signing time:             Fri 01 Sep 2023 01:30:27 +0000
ROA not before:           Fri 01 Sep 2023 01:30:27 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     9824
IP address blocks:        103.55.196.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 01:34:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 288 (0x120)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Sep  1 01:30:27 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=2AD83C72F5E0B5572FA064F6EFF6AD065182FEB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:56:a7:cb:f2:bf:89:f8:0a:64:f6:e6:4a:dc:
                    a4:33:5f:db:2b:06:89:b4:8b:39:cb:fc:72:ff:24:
                    73:ee:86:c1:23:f1:46:6c:6c:6a:1d:47:b1:3f:cb:
                    c9:1d:ae:a5:a3:66:95:c5:0f:4d:10:10:5a:b0:d5:
                    51:e0:1c:19:27:d3:02:11:6d:fe:4c:c6:ea:28:7f:
                    07:62:75:c9:43:c6:4e:3d:84:2f:88:09:f9:96:ff:
                    e2:2a:7a:4b:d4:4b:8f:ca:7b:20:86:53:08:bd:7d:
                    7f:6d:62:8c:db:7c:33:7b:d4:7b:90:24:bf:c0:a4:
                    ed:86:87:af:4c:c6:ef:64:86:35:5f:bf:69:44:23:
                    f4:4f:d3:4c:d7:9b:43:41:eb:a2:6d:c7:24:fc:9f:
                    cd:95:45:54:af:ec:25:ce:8f:0b:fb:4e:05:ea:36:
                    7b:dd:2a:3b:63:d5:d3:d5:94:2b:ce:97:44:9a:45:
                    80:34:c8:b3:91:c0:52:c9:5d:69:4f:86:bb:a7:7c:
                    78:d4:fd:b5:9a:c5:8a:d5:fc:37:17:0b:cd:e6:bf:
                    04:aa:dd:3a:95:48:29:8d:4e:f0:03:1a:7a:92:e6:
                    9b:a9:e7:0d:0e:b0:2f:c2:4f:95:80:2f:09:da:ac:
                    d8:65:c9:24:91:31:9a:66:e7:95:22:40:c0:b6:29:
                    16:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:D8:3C:72:F5:E0:B5:57:2F:A0:64:F6:EF:F6:AD:06:51:82:FE:B2
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/Ktg8cvXgtVcvoGT27_atBlGC_rI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.55.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:bf:1e:b6:07:d4:5e:cb:98:9a:4e:01:46:6b:2e:83:2a:99:
         5f:c1:23:91:71:9d:2b:44:12:fe:4a:c2:54:c7:76:aa:e8:e8:
         e3:ec:85:ac:21:fe:f8:be:c1:06:39:3b:b5:d4:e0:87:35:ff:
         1b:29:e6:b1:2e:96:52:4d:6d:c0:93:79:3c:b7:ce:64:d7:92:
         77:cd:3e:d0:b7:2f:cd:1b:56:f8:3b:97:4b:9e:e3:cf:c8:23:
         fb:69:82:15:96:f1:0b:6c:2c:23:e4:e3:97:07:8a:16:be:52:
         4c:ca:5e:92:c1:99:38:c6:4e:8a:f4:bb:39:e3:bf:80:13:c2:
         70:ba:20:4d:f9:26:dd:10:11:2f:32:45:4c:97:c1:79:c1:85:
         50:48:d8:27:c6:ab:cb:a1:26:b0:a2:96:83:c5:f3:b5:71:fe:
         4d:ed:0f:8e:92:fb:22:4e:bc:7e:3c:65:4f:c6:8e:89:10:dc:
         67:5e:22:28:40:13:b3:e2:7d:29:01:3b:e8:36:a2:ac:a3:1c:
         87:a9:c6:df:27:f4:0f:b6:25:06:06:26:13:97:a1:ae:02:57:
         be:8f:a4:c8:67:ac:cf:a3:4c:57:89:38:e7:0c:d4:a5:b8:54:
         c6:1a:15:16:c5:c1:a2:11:58:5b:b1:14:93:88:d4:0f:08:c2:
         bb:49:03:cf
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICASAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yMzA5MDEw
MTMwMjdaFw0yNDA4MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDJBRDgzQzcyRjVFMEI1
NTcyRkEwNjRGNkVGRjZBRDA2NTE4MkZFQjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDaVqfL8r+J+Apk9uZK3KQzX9srBom0iznL/HL/JHPuhsEj8UZs
bGodR7E/y8kdrqWjZpXFD00QEFqw1VHgHBkn0wIRbf5MxuoofwdidclDxk49hC+I
CfmW/+IqekvUS4/KeyCGUwi9fX9tYozbfDN71HuQJL/ApO2Gh69Mxu9khjVfv2lE
I/RP00zXm0NB66JtxyT8n82VRVSv7CXOjwv7TgXqNnvdKjtj1dPVlCvOl0SaRYA0
yLORwFLJXWlPhrunfHjU/bWaxYrV/DcXC83mvwSq3TqVSCmNTvADGnqS5pup5w0O
sC/CT5WALwnarNhlySSRMZpm55UiQMC2KRb1AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUKtg8cvXgtVcvoGT27/atBlGC/rIwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNjcxL0t0ZzhjdlhndFZjdm9HVDI3X2F0QmxHQ19ySS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAJnN8QwDQYJKoZIhvcNAQELBQADggEBAGq/HrYH1F7LmJpOAUZrLoMqmV/B
I5FxnStEEv5KwlTHdqro6OPshawh/vi+wQY5O7XU4Ic1/xsp5rEullJNbcCTeTy3
zmTXknfNPtC3L80bVvg7l0ue48/II/tpghWW8QtsLCPk45cHiha+UkzKXpLBmTjG
Tor0uznjv4ATwnC6IE35Jt0QES8yRUyXwXnBhVBI2CfGq8uhJrCiloPF87Vx/k3t
D46S+yJOvH48ZU/GjokQ3GdeIihAE7PifSkBO+g2oqyjHIepxt8n9A+2JQYGJhOX
oa4CV76PpMhnrM+jTFeJOOcM1KW4VMYaFRbFwaIRWFuxFJOI1A8IwrtJA88=
-----END CERTIFICATE-----
Generated at Sat May 18 12:40:39 2024 by rpki-client on console-ams.rpki-client.org