Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/WtKDPXHakaj5uooTX9FBBxkpvcQ.roa
File:                     WtKDPXHakaj5uooTX9FBBxkpvcQ.roa (raw, json)
Hash identifier:          fsSco8GDyMhgyhPVTsXqgD7gp8bNYshF7kmIICweVNk=
Subject key identifier:   5A:D2:83:3D:71:DA:91:A8:F9:BA:8A:13:5F:D1:41:07:19:29:BD:C4
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0290
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/WtKDPXHakaj5uooTX9FBBxkpvcQ.roa
Signing time:             Sat 31 Aug 2024 01:38:58 +0000
ROA not before:           Sat 31 Aug 2024 01:38:58 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     9824
IP address blocks:        182.50.192.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 656 (0x290)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug 31 01:38:58 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=5AD2833D71DA91A8F9BA8A135FD141071929BDC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f0:0f:2b:4b:12:8b:8b:14:21:3d:2f:7d:a9:
                    ad:b7:bf:0d:81:89:50:6c:12:29:13:1a:ad:45:7d:
                    64:c1:ce:f6:05:2f:29:64:fe:c7:8d:d3:d4:6a:ab:
                    de:0e:c8:da:ee:a6:7b:4d:9c:f7:89:0c:16:8c:28:
                    31:60:13:d6:8b:34:e6:31:21:9b:8f:9b:d7:c5:00:
                    a9:2f:75:39:9c:5f:93:75:51:c7:36:00:7d:48:00:
                    02:0c:20:94:0e:e8:f3:3c:5d:22:19:9c:9e:9d:a4:
                    0e:37:27:fe:b2:82:56:34:fe:17:3d:45:0b:12:38:
                    89:cf:78:b6:2f:ce:9e:ac:9b:a9:38:69:18:35:7d:
                    33:05:1a:4d:98:86:16:c6:d6:d9:1d:6c:46:4d:12:
                    62:f1:82:98:98:42:1b:6d:a6:b9:58:36:ae:2c:a9:
                    c6:d9:c8:73:55:e7:7c:97:aa:94:77:68:19:91:b2:
                    28:b9:14:1b:fe:44:95:a4:9b:67:29:71:45:c1:06:
                    2c:98:e0:91:0f:f8:7b:28:2c:9c:a9:0b:cb:bf:c8:
                    14:f6:64:14:95:08:2b:98:47:4a:41:e5:e2:12:c1:
                    26:09:da:10:50:14:eb:c1:7d:72:ad:60:24:70:da:
                    9c:cf:1f:de:40:33:cc:ab:85:f4:0b:0f:12:b2:ce:
                    5b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:D2:83:3D:71:DA:91:A8:F9:BA:8A:13:5F:D1:41:07:19:29:BD:C4
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/WtKDPXHakaj5uooTX9FBBxkpvcQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.50.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         45:1d:d9:3f:a2:2a:a5:3b:c3:2c:0b:20:1a:9b:65:a3:6c:56:
         80:4e:ea:be:f1:3a:2b:6d:6e:f1:34:e9:56:a2:1b:85:48:e6:
         92:50:a4:ff:71:16:de:d9:37:83:a6:e0:dc:b0:d5:84:9d:21:
         f4:87:e7:92:5e:d3:14:2c:eb:e5:0c:4e:82:b0:48:f8:23:25:
         f4:c4:a2:7f:f0:bc:2e:7d:d2:4b:f1:9e:99:c0:98:90:b9:ba:
         70:6e:c4:25:98:98:20:6c:63:34:75:19:53:f2:87:b0:2a:4a:
         6f:2a:45:10:2f:3e:12:94:45:43:ff:b2:b8:0a:56:66:63:09:
         b6:89:19:81:07:47:85:d7:90:22:a6:76:fb:25:fa:5c:fd:22:
         28:3c:81:60:37:4e:bb:48:67:08:8c:15:40:0b:c2:4f:aa:02:
         4b:93:e8:8b:64:8e:95:66:a2:5c:e6:15:61:ab:bc:9f:64:6e:
         ee:d4:46:09:a7:f6:e0:48:18:b5:23:37:88:13:cf:4c:90:52:
         d9:ad:65:03:0d:24:70:9e:ee:7f:7d:a6:e4:16:ea:1a:6f:9e:
         49:9b:9b:3d:04:a5:06:21:e2:5a:c0:3e:da:67:47:a0:d1:7c:
         31:01:67:1f:b8:39:41:55:74:b5:dd:79:53:4f:bb:3b:f8:14:
         3e:66:77:16
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICApAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNDA4MzEw
MTM4NThaFw0yNTA4MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDVBRDI4MzNENzFEQTkx
QThGOUJBOEExMzVGRDE0MTA3MTkyOUJEQzQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCf8A8rSxKLixQhPS99qa23vw2BiVBsEikTGq1FfWTBzvYFLylk
/seN09Rqq94OyNrupntNnPeJDBaMKDFgE9aLNOYxIZuPm9fFAKkvdTmcX5N1Ucc2
AH1IAAIMIJQO6PM8XSIZnJ6dpA43J/6yglY0/hc9RQsSOInPeLYvzp6sm6k4aRg1
fTMFGk2YhhbG1tkdbEZNEmLxgpiYQhttprlYNq4sqcbZyHNV53yXqpR3aBmRsii5
FBv+RJWkm2cpcUXBBiyY4JEP+HsoLJypC8u/yBT2ZBSVCCuYR0pB5eISwSYJ2hBQ
FOvBfXKtYCRw2pzPH95AM8yrhfQLDxKyzlt1AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUWtKDPXHakaj5uooTX9FBBxkpvcQwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNjcxL1d0S0RQWEhha2FqNXVvb1RYOUZCQnhrcHZjUS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAW2MsAwDQYJKoZIhvcNAQELBQADggEBAEUd2T+iKqU7wywLIBqbZaNsVoBO
6r7xOittbvE06VaiG4VI5pJQpP9xFt7ZN4Om4Nyw1YSdIfSH55Je0xQs6+UMToKw
SPgjJfTEon/wvC590kvxnpnAmJC5unBuxCWYmCBsYzR1GVPyh7AqSm8qRRAvPhKU
RUP/srgKVmZjCbaJGYEHR4XXkCKmdvsl+lz9Iig8gWA3TrtIZwiMFUALwk+qAkuT
6ItkjpVmolzmFWGrvJ9kbu7URgmn9uBIGLUjN4gTz0yQUtmtZQMNJHCe7n99puQW
6hpvnkmbmz0EpQYh4lrAPtpnR6DRfDEBZx+4OUFVdLXdeVNPuzv4FD5mdxY=
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:31:34 2024 by rpki-client on console-fra.rpki-client.org