Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/PoDFBDesEKBHxRbMPY_R0rmfOtA.roa
File:                     PoDFBDesEKBHxRbMPY_R0rmfOtA.roa (raw, json)
Hash identifier:          swPeSLgvP/g29UQ+kLwqvnUDy6EwLB30gvgYUsaDi/E=
Subject key identifier:   3E:80:C5:04:37:AC:10:A0:47:C5:16:CC:3D:8F:D1:D2:B9:9F:3A:D0
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       01B8
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/PoDFBDesEKBHxRbMPY_R0rmfOtA.roa
Signing time:             Sun 01 Oct 2023 01:38:14 +0000
ROA not before:           Sun 01 Oct 2023 01:38:14 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     4721
IP address blocks:        220.208.64.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 01:34:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 440 (0x1b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct  1 01:38:14 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=3E80C50437AC10A047C516CC3D8FD1D2B99F3AD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:23:d6:9a:0a:16:71:f4:dd:a4:6b:2f:75:47:
                    ca:e6:65:be:fc:82:3e:c9:ba:0e:f9:2d:36:8a:6a:
                    e2:d0:35:4d:58:f8:f0:92:ef:e8:71:7f:a3:dd:9a:
                    eb:a9:6a:d8:9c:a9:9c:ca:e8:23:7e:a4:e9:b9:33:
                    e3:7a:e4:8b:41:dd:15:39:2b:07:97:2a:41:a4:aa:
                    6c:82:d3:ed:56:af:c7:fe:d6:ba:7f:db:bd:69:ee:
                    cc:49:79:46:23:66:6f:26:1c:bf:e4:4b:94:9a:92:
                    5d:8b:1f:23:dc:95:e2:54:0b:fb:5f:e4:36:f2:6c:
                    d0:d1:c2:3b:2a:31:ae:b4:36:cf:10:69:75:9c:65:
                    a5:77:c7:92:1e:2e:26:c7:ba:16:a1:67:09:7e:fc:
                    3c:13:e5:5e:50:9d:51:fa:f1:7d:ff:a7:bb:3a:0d:
                    86:e1:50:ee:e1:48:6e:43:ab:2b:74:b0:08:90:b1:
                    0c:21:18:1d:4b:5f:9c:14:3f:b0:fd:00:cc:a0:4e:
                    68:75:22:2c:5f:f1:94:6e:cb:45:4a:69:9a:40:8b:
                    8f:a8:dc:8f:ad:d1:02:55:42:24:5f:08:b6:62:81:
                    4e:ea:d6:24:21:c0:ca:13:09:8e:2b:6c:92:07:c8:
                    26:c6:13:a7:04:7b:0d:5f:91:fe:16:3a:01:c9:63:
                    5e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:80:C5:04:37:AC:10:A0:47:C5:16:CC:3D:8F:D1:D2:B9:9F:3A:D0
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/PoDFBDesEKBHxRbMPY_R0rmfOtA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.208.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         71:82:dc:08:cc:48:d4:6a:23:0b:80:d8:3c:48:24:3f:b6:2e:
         3c:ba:34:e6:96:1c:ae:9f:4e:77:94:11:02:4a:37:d0:cf:12:
         8a:34:92:5e:de:37:c0:14:87:4f:bf:ba:6f:b0:22:b8:0a:3d:
         9a:62:d7:fb:ab:05:0c:4e:14:9f:33:ba:6d:4e:6e:51:2e:27:
         a1:aa:33:3d:16:f4:08:c5:15:dc:b1:5c:3e:f8:f5:7d:1e:2e:
         87:07:69:80:d5:b0:4f:28:a2:48:8e:47:87:1f:d8:c7:03:e1:
         1a:f8:fa:fb:0f:0e:9c:10:1f:c6:b3:29:bc:2b:89:33:67:1c:
         e9:3f:4b:35:0d:72:3d:2b:ee:89:5c:a7:29:c0:77:6e:bc:67:
         0f:45:45:02:e1:61:94:ca:79:00:ff:9d:8f:5e:35:f8:57:10:
         32:68:10:01:9a:84:26:10:d7:85:1e:57:1a:b9:47:62:65:b0:
         14:16:2d:d0:35:d8:1e:73:1e:b2:f4:68:c4:97:52:2b:f5:76:
         5d:86:fc:84:ca:87:24:46:93:0f:c4:e7:79:61:02:90:8e:29:
         c7:3f:cb:a7:1c:f7:0d:26:e8:1e:e7:cd:79:40:22:cb:d6:fa:
         1c:85:0b:22:8f:e2:cc:7d:a6:56:01:29:41:e6:65:91:a8:c5:
         fb:b3:9a:cc
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAbgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yMzEwMDEw
MTM4MTRaFw0yNDA5MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDNFODBDNTA0MzdBQzEw
QTA0N0M1MTZDQzNEOEZEMUQyQjk5RjNBRDAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDAI9aaChZx9N2kay91R8rmZb78gj7Jug75LTaKauLQNU1Y+PCS
7+hxf6PdmuupaticqZzK6CN+pOm5M+N65ItB3RU5KweXKkGkqmyC0+1Wr8f+1rp/
271p7sxJeUYjZm8mHL/kS5Sakl2LHyPcleJUC/tf5DbybNDRwjsqMa60Ns8QaXWc
ZaV3x5IeLibHuhahZwl+/DwT5V5QnVH68X3/p7s6DYbhUO7hSG5Dqyt0sAiQsQwh
GB1LX5wUP7D9AMygTmh1Iixf8ZRuy0VKaZpAi4+o3I+t0QJVQiRfCLZigU7q1iQh
wMoTCY4rbJIHyCbGE6cEew1fkf4WOgHJY17PAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUPoDFBDesEKBHxRbMPY/R0rmfOtAwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNjcxL1BvREZCRGVzRUtCSHhSYk1QWV9SMHJtZk90QS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAbc0EAwDQYJKoZIhvcNAQELBQADggEBAHGC3AjMSNRqIwuA2DxIJD+2Ljy6
NOaWHK6fTneUEQJKN9DPEoo0kl7eN8AUh0+/um+wIrgKPZpi1/urBQxOFJ8zum1O
blEuJ6GqMz0W9AjFFdyxXD749X0eLocHaYDVsE8ookiOR4cf2McD4Rr4+vsPDpwQ
H8azKbwriTNnHOk/SzUNcj0r7olcpynAd268Zw9FRQLhYZTKeQD/nY9eNfhXEDJo
EAGahCYQ14UeVxq5R2JlsBQWLdA12B5zHrL0aMSXUiv1dl2G/ITKhyRGkw/E53lh
ApCOKcc/y6cc9w0m6B7nzXlAIsvW+hyFCyKP4sx9plYBKUHmZZGoxfuzmsw=
-----END CERTIFICATE-----
Generated at Sat May 18 12:40:39 2024 by rpki-client on console-ams.rpki-client.org