Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/UWr1HfVgi8hCGGPNFtzMBnwlNc4.roa
File:                     UWr1HfVgi8hCGGPNFtzMBnwlNc4.roa (raw, json)
Hash identifier:          2SV/q9QMgDUdtnj46qv51iWDA5UrmqBfR8Y85xfWZPA=
Subject key identifier:   51:6A:F5:1D:F5:60:8B:C8:42:18:63:CD:16:DC:CC:06:7C:25:35:CE
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       02AC
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/UWr1HfVgi8hCGGPNFtzMBnwlNc4.roa
Signing time:             Sat 31 Aug 2024 01:40:47 +0000
ROA not before:           Sat 31 Aug 2024 01:40:47 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     4721
IP address blocks:        219.117.160.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 684 (0x2ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug 31 01:40:47 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=516AF51DF5608BC8421863CD16DCCC067C2535CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7b:47:6e:f8:27:7b:ab:0f:b8:02:ab:f9:bc:
                    a7:02:96:46:5f:c9:39:59:9e:41:a8:10:c3:8e:e6:
                    61:5c:8e:01:c8:5f:22:f3:4f:4e:f4:49:9f:80:40:
                    03:e0:7f:98:c7:0e:25:8e:a7:7d:35:a9:3a:e9:a9:
                    65:db:f6:27:a1:aa:bf:48:28:57:cb:95:09:54:76:
                    7d:64:96:1c:b8:10:2b:50:20:d1:81:96:21:ee:4d:
                    43:28:d7:71:df:84:55:d6:d2:21:0d:42:92:4b:25:
                    2a:88:60:d1:5b:f0:e4:88:f2:fb:4e:af:ec:b9:13:
                    bc:bb:60:cb:4e:cf:a6:26:3b:39:2c:d2:9d:fa:25:
                    81:1d:d0:ca:41:4b:ce:3b:b7:80:02:ad:13:d7:e9:
                    ef:c5:d6:88:83:13:07:f3:a6:0f:a4:a4:a8:13:62:
                    8c:fe:37:55:38:7f:ba:ca:e4:98:bb:a6:08:b2:57:
                    1b:62:16:f7:3b:e0:44:b4:41:b7:22:18:a2:39:bb:
                    1d:9d:9b:97:7e:98:b7:96:f4:92:d5:77:ec:cb:ee:
                    34:98:63:e2:b2:3b:2b:62:2c:84:3e:93:ac:61:de:
                    8a:85:bb:da:45:42:7e:2e:66:ce:9a:dd:8a:d6:df:
                    d8:af:56:97:8e:45:a1:6c:94:5e:62:4f:15:52:d0:
                    0f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:6A:F5:1D:F5:60:8B:C8:42:18:63:CD:16:DC:CC:06:7C:25:35:CE
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/UWr1HfVgi8hCGGPNFtzMBnwlNc4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.117.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         31:9e:a1:34:32:24:96:21:f9:2a:5f:c2:5b:5d:b2:4b:94:07:
         72:4d:39:28:e9:46:53:0c:eb:4e:00:5c:03:1e:e1:ca:1f:e6:
         db:0e:a1:d3:8a:63:0f:f0:1c:69:52:cd:82:dd:92:a6:17:45:
         f5:d6:43:4a:f5:73:66:2e:b8:22:12:6e:49:51:d4:83:4a:59:
         c3:e7:a4:4d:7f:a2:1f:7b:9f:19:86:ef:e6:64:d9:61:94:e4:
         33:36:c5:dd:16:b3:f0:2c:a9:b2:7e:49:22:c6:48:d4:bb:09:
         e6:0e:0d:ab:a5:1a:7c:d9:35:1b:c8:8a:c6:a5:bd:7a:0a:ee:
         59:27:19:5b:a2:1d:2a:58:88:9f:33:f0:ba:d0:a5:55:6a:84:
         27:50:1d:d7:b7:6e:2d:fa:7f:74:97:fd:29:8d:85:b0:f7:98:
         8c:8f:e6:62:1a:f3:2a:39:99:e4:c0:8a:77:3a:57:b8:a6:f7:
         ba:e9:d9:d6:ea:04:e5:29:14:4a:7b:dc:1a:c0:86:81:a3:67:
         63:8f:21:c1:e8:6c:7c:1b:92:b4:79:f3:63:d6:ef:79:92:d7:
         f7:e4:39:a4:91:7d:2f:13:f8:40:df:1f:b0:ad:2a:eb:26:17:
         e0:20:d9:8f:8b:81:c9:0c:9f:eb:bc:e3:40:9f:c5:35:5d:0b:
         90:97:67:9c
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAqwwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNDA4MzEw
MTQwNDdaFw0yNTA4MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDUxNkFGNTFERjU2MDhC
Qzg0MjE4NjNDRDE2RENDQzA2N0MyNTM1Q0UwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDGe0du+Cd7qw+4Aqv5vKcClkZfyTlZnkGoEMOO5mFcjgHIXyLz
T070SZ+AQAPgf5jHDiWOp301qTrpqWXb9iehqr9IKFfLlQlUdn1klhy4ECtQINGB
liHuTUMo13HfhFXW0iENQpJLJSqIYNFb8OSI8vtOr+y5E7y7YMtOz6YmOzks0p36
JYEd0MpBS847t4ACrRPX6e/F1oiDEwfzpg+kpKgTYoz+N1U4f7rK5Ji7pgiyVxti
Fvc74ES0QbciGKI5ux2dm5d+mLeW9JLVd+zL7jSYY+KyOytiLIQ+k6xh3oqFu9pF
Qn4uZs6a3YrW39ivVpeORaFslF5iTxVS0A/5AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUUWr1HfVgi8hCGGPNFtzMBnwlNc4wHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNjcxL1VXcjFIZlZnaThoQ0dHUE5GdHpNQm53bE5jNC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAXbdaAwDQYJKoZIhvcNAQELBQADggEBADGeoTQyJJYh+SpfwltdskuUB3JN
OSjpRlMM604AXAMe4cof5tsOodOKYw/wHGlSzYLdkqYXRfXWQ0r1c2YuuCISbklR
1INKWcPnpE1/oh97nxmG7+Zk2WGU5DM2xd0Ws/AsqbJ+SSLGSNS7CeYODaulGnzZ
NRvIisalvXoK7lknGVuiHSpYiJ8z8LrQpVVqhCdQHde3bi36f3SX/SmNhbD3mIyP
5mIa8yo5meTAinc6V7im97rp2dbqBOUpFEp73BrAhoGjZ2OPIcHobHwbkrR582PW
73mS1/fkOaSRfS8T+EDfH7CtKusmF+Ag2Y+LgckMn+u840CfxTVdC5CXZ5w=
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:45:58 2024 by rpki-client on console-ams.rpki-client.org