Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/UulYRoDCXPbNL6FfGfQgR7itn1E.roa
File:                     UulYRoDCXPbNL6FfGfQgR7itn1E.roa (raw, json)
Hash identifier:          gejYsrXnKKm1c8bR1ebeNCV2Z5NrUNrCMhvHy0vEA+s=
Subject key identifier:   52:E9:58:46:80:C2:5C:F6:CD:2F:A1:5F:19:F4:20:47:B8:AD:9F:51
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0209
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/UulYRoDCXPbNL6FfGfQgR7itn1E.roa
Signing time:             Wed 31 Jul 2024 01:29:07 +0000
ROA not before:           Wed 31 Jul 2024 01:29:07 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     9824
IP address blocks:        114.142.128.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 521 (0x209)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Jul 31 01:29:07 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=52E9584680C25CF6CD2FA15F19F42047B8AD9F51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b7:21:71:f9:32:f5:b9:8d:23:f0:5b:7c:46:
                    c8:c1:66:69:1a:60:6a:91:59:c1:7f:99:af:b3:2a:
                    81:26:26:a5:ff:16:28:84:ad:2b:06:29:2f:f9:1e:
                    68:ed:8d:ee:2a:8c:14:0a:30:f0:42:eb:b7:16:a6:
                    f8:88:85:dd:71:70:1b:98:a7:a4:38:12:27:75:45:
                    6f:bc:3f:81:12:82:fc:8e:e9:bb:db:1f:44:29:3a:
                    10:f0:69:59:27:3f:4d:4e:c5:0c:6f:57:ce:97:ce:
                    53:c2:d5:db:59:c7:b4:6d:4e:78:67:dd:d7:5d:00:
                    82:ef:66:8e:c7:b7:14:d1:93:d0:19:8b:81:34:b6:
                    9a:d9:01:62:45:f3:9f:42:1c:53:22:c8:d4:65:f6:
                    22:65:01:9d:d0:ab:a1:91:bd:78:ef:ea:8a:7d:8d:
                    af:a9:36:b0:1a:25:da:0b:8c:df:68:5e:8c:b5:26:
                    33:03:72:38:93:b1:ec:59:c3:4e:3c:3b:fa:f5:e3:
                    d6:96:e7:35:be:fd:c7:f6:dd:f9:17:dd:f8:20:c5:
                    12:55:a1:8d:a8:85:33:4c:15:1b:30:10:24:5a:75:
                    d1:c9:2d:d3:cb:63:a4:87:0c:1e:42:c2:d2:38:79:
                    11:db:49:31:c9:65:cc:f1:c7:66:46:df:6d:e0:a8:
                    d4:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:E9:58:46:80:C2:5C:F6:CD:2F:A1:5F:19:F4:20:47:B8:AD:9F:51
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/UulYRoDCXPbNL6FfGfQgR7itn1E.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.142.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         10:50:08:21:0f:0c:86:37:fc:7a:08:ec:50:b9:5d:dc:60:f9:
         a9:0c:a1:c7:35:84:48:21:93:69:4f:da:b2:03:e1:46:14:78:
         01:b0:26:99:65:70:41:06:33:51:3d:0c:4d:84:e1:01:e1:0f:
         b3:5f:56:1e:79:9a:20:a4:bd:db:4f:1a:5c:ee:32:da:95:61:
         c3:18:61:cb:50:bf:b6:3d:47:41:72:2b:b4:6a:ae:97:c8:6c:
         64:eb:ae:39:68:86:a2:4a:98:05:99:93:c4:9b:bf:95:e1:b3:
         84:9c:e0:84:47:ca:85:16:a3:bc:41:bc:ab:b3:b2:b9:bf:c0:
         91:52:15:df:2b:dd:eb:b0:b4:a8:4f:c2:ec:f5:65:8b:83:d6:
         fa:87:13:a8:a5:0b:38:f5:76:a2:f1:18:e0:ec:77:6b:f9:e3:
         4f:ef:3d:a7:5c:92:5f:af:76:65:8f:53:95:4a:72:b2:0f:6c:
         7b:cb:60:db:ff:27:ad:99:7e:7e:1a:0f:1f:61:a3:7d:1e:98:
         25:48:86:fe:e1:31:ab:29:6b:41:60:75:44:45:a3:36:2c:dc:
         72:33:94:fc:93:53:8d:2c:35:82:a4:a4:91:b8:0f:5a:bd:3d:
         66:51:bd:0a:f2:90:a4:6a:72:a4:93:b7:ae:1b:8f:59:8d:4b:
         05:a8:19:14
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAgkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNDA3MzEw
MTI5MDdaFw0yNTA3MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDUyRTk1ODQ2ODBDMjVD
RjZDRDJGQTE1RjE5RjQyMDQ3QjhBRDlGNTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC+tyFx+TL1uY0j8Ft8RsjBZmkaYGqRWcF/ma+zKoEmJqX/FiiE
rSsGKS/5Hmjtje4qjBQKMPBC67cWpviIhd1xcBuYp6Q4Eid1RW+8P4ESgvyO6bvb
H0QpOhDwaVknP01OxQxvV86XzlPC1dtZx7RtTnhn3dddAILvZo7HtxTRk9AZi4E0
tprZAWJF859CHFMiyNRl9iJlAZ3Qq6GRvXjv6op9ja+pNrAaJdoLjN9oXoy1JjMD
cjiTsexZw048O/r149aW5zW+/cf23fkX3fggxRJVoY2ohTNMFRswECRaddHJLdPL
Y6SHDB5CwtI4eRHbSTHJZczxx2ZG323gqNSVAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUUulYRoDCXPbNL6FfGfQgR7itn1EwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNjcxL1V1bFlSb0RDWFBiTkw2RmZHZlFnUjdpdG4xRS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBANyjoAwDQYJKoZIhvcNAQELBQADggEBABBQCCEPDIY3/HoI7FC5Xdxg+akM
occ1hEghk2lP2rID4UYUeAGwJpllcEEGM1E9DE2E4QHhD7NfVh55miCkvdtPGlzu
MtqVYcMYYctQv7Y9R0FyK7RqrpfIbGTrrjlohqJKmAWZk8Sbv5Xhs4Sc4IRHyoUW
o7xBvKuzsrm/wJFSFd8r3euwtKhPwuz1ZYuD1vqHE6ilCzj1dqLxGODsd2v540/v
Padckl+vdmWPU5VKcrIPbHvLYNv/J62Zfn4aDx9ho30emCVIhv7hMaspa0FgdURF
ozYs3HIzlPyTU40sNYKkpJG4D1q9PWZRvQrykKRqcqSTt64bj1mNSwWoGRQ=
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:31:34 2024 by rpki-client on console-fra.rpki-client.org