Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/SfmWiHiqdFrRT7SFU2IH17cJZMY.roa
File:                     SfmWiHiqdFrRT7SFU2IH17cJZMY.roa (raw, json)
Hash identifier:          ZeissOxMqWEPuX5SVnzRsloidCT3DZcV3tqMyTjPGvc=
Subject key identifier:   49:F9:96:88:78:AA:74:5A:D1:4F:B4:85:53:62:07:D7:B7:09:64:C6
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       018D
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/SfmWiHiqdFrRT7SFU2IH17cJZMY.roa
Signing time:             Sun 01 Oct 2023 01:34:34 +0000
ROA not before:           Sun 01 Oct 2023 01:34:34 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     9824
IP address blocks:        115.42.96.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 397 (0x18d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct  1 01:34:34 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=49F9968878AA745AD14FB485536207D7B70964C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:68:5a:78:4b:98:f0:d8:ff:4b:c2:2b:bf:10:
                    0f:24:4d:34:e9:c2:a2:78:53:6c:51:d7:f2:3e:1d:
                    e7:54:fb:a1:1f:72:fb:bf:f2:40:d9:ad:d6:85:c2:
                    6b:b2:26:43:e3:ac:8c:69:8c:c2:50:5d:b3:b1:15:
                    b9:e0:c1:eb:03:59:c3:2f:38:da:08:3b:5f:24:aa:
                    4a:e5:32:06:9a:16:3f:c0:76:86:6d:96:1e:89:87:
                    1b:80:42:e7:c9:fe:5f:c3:93:bb:cb:c4:85:d8:32:
                    14:44:53:81:78:0a:47:f7:2e:7c:ac:2d:31:9c:34:
                    f4:ef:b0:f1:22:62:d9:03:c9:60:77:59:19:10:ce:
                    90:73:3d:dd:e8:03:f1:8d:d2:a1:cb:85:23:54:31:
                    c5:16:2c:9f:34:b9:69:6f:79:3a:d0:d0:b8:71:ee:
                    af:e9:c5:ba:87:06:a5:bd:77:59:52:93:72:0d:b0:
                    cd:1c:2a:4c:6b:fa:5b:42:08:75:d0:3c:9e:c9:82:
                    3f:19:62:4f:9a:d4:33:1e:65:d6:6f:79:3f:9b:df:
                    e5:79:2d:96:7a:b0:b8:f2:63:ec:8b:39:8c:86:5f:
                    97:80:de:73:b8:21:13:55:a5:4b:bb:23:18:c0:0a:
                    39:7d:1c:e1:7b:d0:0b:67:08:5c:22:51:db:70:6e:
                    c1:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:F9:96:88:78:AA:74:5A:D1:4F:B4:85:53:62:07:D7:B7:09:64:C6
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/SfmWiHiqdFrRT7SFU2IH17cJZMY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.42.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         27:b8:90:5c:bf:53:1f:82:5b:b8:98:80:44:b2:d0:3a:ba:95:
         2f:4d:80:05:fc:23:00:ae:cd:02:4f:1a:e8:d3:9e:3d:9f:2f:
         63:40:0c:4b:77:f5:b0:02:ed:a7:7e:f0:5c:25:c7:cc:da:e5:
         91:76:e5:36:28:52:51:ea:60:11:2b:02:81:9d:13:ec:5b:10:
         4c:26:d8:72:98:28:ed:12:2b:78:40:38:f3:6f:f4:bd:29:94:
         de:f7:4b:38:d1:b1:cd:93:58:dd:d1:22:f4:7f:8f:17:92:a8:
         2c:30:66:75:6f:4a:93:5e:38:f1:04:b7:23:21:a9:ed:a6:35:
         f9:77:ff:17:d4:77:d1:88:7b:5f:a6:6a:d9:71:69:31:a2:15:
         d5:22:7c:84:f3:80:54:97:a2:32:7b:31:1b:d5:d7:39:5a:07:
         97:aa:8a:26:05:e5:f3:fa:b6:e8:a6:c2:ff:7d:0a:c5:f0:c9:
         02:cb:5b:28:30:97:75:3a:5f:cb:e0:c0:ab:75:de:91:48:7b:
         59:15:1c:38:7d:af:c1:82:db:a5:4a:a9:49:78:87:46:7d:2f:
         dd:d8:34:5e:3c:53:80:5e:d5:35:2a:4f:06:1c:7a:e9:b4:fc:
         c7:4c:e4:cc:2a:7f:e0:f6:d0:c6:0f:b3:8a:f3:e8:2d:98:b9:
         aa:3f:c9:10
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAY0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yMzEwMDEw
MTM0MzRaFw0yNDA5MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDQ5Rjk5Njg4NzhBQTc0
NUFEMTRGQjQ4NTUzNjIwN0Q3QjcwOTY0QzYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDUaFp4S5jw2P9Lwiu/EA8kTTTpwqJ4U2xR1/I+HedU+6Efcvu/
8kDZrdaFwmuyJkPjrIxpjMJQXbOxFbngwesDWcMvONoIO18kqkrlMgaaFj/AdoZt
lh6JhxuAQufJ/l/Dk7vLxIXYMhREU4F4Ckf3LnysLTGcNPTvsPEiYtkDyWB3WRkQ
zpBzPd3oA/GN0qHLhSNUMcUWLJ80uWlveTrQ0Lhx7q/pxbqHBqW9d1lSk3INsM0c
Kkxr+ltCCHXQPJ7Jgj8ZYk+a1DMeZdZveT+b3+V5LZZ6sLjyY+yLOYyGX5eA3nO4
IRNVpUu7IxjACjl9HOF70AtnCFwiUdtwbsFNAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUSfmWiHiqdFrRT7SFU2IH17cJZMYwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNjcxL1NmbVdpSGlxZEZyUlQ3U0ZVMklIMTdjSlpNWS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBARzKmAwDQYJKoZIhvcNAQELBQADggEBACe4kFy/Ux+CW7iYgESy0Dq6lS9N
gAX8IwCuzQJPGujTnj2fL2NADEt39bAC7ad+8Fwlx8za5ZF25TYoUlHqYBErAoGd
E+xbEEwm2HKYKO0SK3hAOPNv9L0plN73SzjRsc2TWN3RIvR/jxeSqCwwZnVvSpNe
OPEEtyMhqe2mNfl3/xfUd9GIe1+matlxaTGiFdUifITzgFSXojJ7MRvV1zlaB5eq
iiYF5fP6tuimwv99CsXwyQLLWygwl3U6X8vgwKt13pFIe1kVHDh9r8GC26VKqUl4
h0Z9L93YNF48U4Be1TUqTwYceum0/MdM5Mwqf+D20MYPs4rz6C2Yuao/yRA=
-----END CERTIFICATE-----
Generated at Thu May 30 03:38:52 2024 by rpki-client on console-ams.rpki-client.org