Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/TjobmhudrYzQka2nAHpB0jESw2w.roa
File:                     TjobmhudrYzQka2nAHpB0jESw2w.roa (raw, json)
Hash identifier:          ve2AQuEywl5S25HKHs41xFzHmCAzzvDVnq0JauY9UVw=
Subject key identifier:   4E:3A:1B:9A:1B:9D:AD:8C:D0:91:AD:A7:00:7A:41:D2:31:12:C3:6C
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0136
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/TjobmhudrYzQka2nAHpB0jESw2w.roa
Signing time:             Sun 01 Oct 2023 01:30:14 +0000
ROA not before:           Sun 01 Oct 2023 01:30:14 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     9378
IP address blocks:        61.215.128.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 01:34:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 310 (0x136)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct  1 01:30:14 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=4E3A1B9A1B9DAD8CD091ADA7007A41D23112C36C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:d6:58:74:99:97:6f:75:8a:71:ef:f8:1d:07:
                    c8:78:ae:a9:68:be:1a:4d:ce:ac:3a:3d:a7:71:b0:
                    eb:37:3a:65:b7:ff:23:68:6d:3f:14:bf:cc:8c:f2:
                    79:11:9a:af:31:7e:23:bb:ab:af:cf:a5:b6:bc:5e:
                    9f:95:5f:cf:79:7d:88:35:c1:6c:21:9f:3a:ff:43:
                    ea:a5:64:d0:7a:3c:cf:56:63:d8:8a:42:39:3b:b4:
                    20:11:1c:a5:4e:b3:af:77:32:11:91:97:71:a8:56:
                    56:5a:03:83:3b:9d:3b:c1:2a:c9:9d:a8:59:c2:9b:
                    a1:64:5b:50:df:32:58:ef:92:2f:f6:4d:16:f7:97:
                    eb:af:02:d3:24:9e:e7:2e:ce:aa:cd:00:a3:f1:de:
                    6f:11:2a:dd:50:51:b6:72:27:97:1c:08:cc:0f:8a:
                    fe:fa:0a:9f:39:de:9a:d8:b4:ec:c5:c2:ea:6f:82:
                    a3:7b:c0:1d:04:06:7c:42:0e:59:f0:62:b8:92:7f:
                    45:f2:2f:9e:26:a8:d9:7d:d7:d7:ce:38:1f:7d:05:
                    97:b0:91:a1:de:7e:2f:e7:b6:41:a5:bf:0f:8c:d8:
                    a3:95:ab:22:e4:ac:74:0b:43:24:25:48:c6:4c:6f:
                    6b:8b:60:06:25:8e:40:01:53:e8:be:9d:c5:48:59:
                    f6:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:3A:1B:9A:1B:9D:AD:8C:D0:91:AD:A7:00:7A:41:D2:31:12:C3:6C
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/TjobmhudrYzQka2nAHpB0jESw2w.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.215.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         d3:be:27:6e:be:f0:c7:b8:fe:30:24:ea:86:cd:8c:28:01:15:
         b2:61:95:f4:22:59:82:a4:57:04:32:b9:19:a6:2c:09:c1:41:
         06:89:a3:8c:5c:7a:c7:58:db:e0:57:06:9f:a0:aa:9b:24:fc:
         d9:b9:2c:88:76:16:b1:39:44:d5:65:33:92:ef:88:b8:4b:b3:
         33:7e:af:4b:f3:5d:b8:ab:79:7c:76:f1:22:72:c1:8f:c8:5a:
         b5:be:e6:d5:57:07:d5:fb:9b:9f:db:81:e7:f4:6e:11:1f:fc:
         35:ac:59:33:1e:f5:7e:d6:14:dc:5b:75:22:18:fd:85:85:f7:
         79:fb:ef:9e:a1:3d:58:bf:c4:98:19:1f:26:7b:14:32:3c:9b:
         7a:28:9e:15:64:8d:7c:6f:fb:a4:9e:48:f7:ac:d5:d8:5a:d8:
         c7:ff:6e:6e:f9:a7:6a:8c:2a:7d:b7:8a:13:d0:a3:4f:07:9b:
         4e:7c:70:c9:5e:43:c4:c9:fd:4e:75:1e:70:46:10:6e:7f:81:
         b9:65:d4:85:da:96:9a:c5:dd:aa:2a:0b:79:04:99:c9:37:9b:
         dd:50:8a:cc:74:2b:3f:95:2f:d0:9c:a5:6c:88:28:6d:b8:63:
         f6:3d:a7:f6:ec:51:ab:94:28:96:21:9d:09:2a:c9:9b:f0:44:
         15:d0:c8:73
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICATYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yMzEwMDEw
MTMwMTRaFw0yNDA5MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDRFM0ExQjlBMUI5REFE
OENEMDkxQURBNzAwN0E0MUQyMzExMkMzNkMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQD71lh0mZdvdYpx7/gdB8h4rqlovhpNzqw6PadxsOs3OmW3/yNo
bT8Uv8yM8nkRmq8xfiO7q6/Ppba8Xp+VX895fYg1wWwhnzr/Q+qlZNB6PM9WY9iK
Qjk7tCARHKVOs693MhGRl3GoVlZaA4M7nTvBKsmdqFnCm6FkW1DfMljvki/2TRb3
l+uvAtMknucuzqrNAKPx3m8RKt1QUbZyJ5ccCMwPiv76Cp853prYtOzFwupvgqN7
wB0EBnxCDlnwYriSf0XyL54mqNl919fOOB99BZewkaHefi/ntkGlvw+M2KOVqyLk
rHQLQyQlSMZMb2uLYAYljkABU+i+ncVIWfZXAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUTjobmhudrYzQka2nAHpB0jESw2wwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNjcxL1Rqb2JtaHVkcll6UWthMm5BSHBCMGpFU3cydy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAU914AwDQYJKoZIhvcNAQELBQADggEBANO+J26+8Me4/jAk6obNjCgBFbJh
lfQiWYKkVwQyuRmmLAnBQQaJo4xcesdY2+BXBp+gqpsk/Nm5LIh2FrE5RNVlM5Lv
iLhLszN+r0vzXbireXx28SJywY/IWrW+5tVXB9X7m5/bgef0bhEf/DWsWTMe9X7W
FNxbdSIY/YWF93n7756hPVi/xJgZHyZ7FDI8m3oonhVkjXxv+6SeSPes1dha2Mf/
bm75p2qMKn23ihPQo08Hm058cMleQ8TJ/U51HnBGEG5/gbll1IXalprF3aoqC3kE
mck3m91Qisx0Kz+VL9CcpWyIKG24Y/Y9p/bsUauUKJYhnQkqyZvwRBXQyHM=
-----END CERTIFICATE-----
Generated at Sat May 18 12:40:39 2024 by rpki-client on console-ams.rpki-client.org