Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/b7ymI7BquRv09l1zzw5g7Vshu_A.roa
File:                     b7ymI7BquRv09l1zzw5g7Vshu_A.roa (raw, json)
Hash identifier:          JzdKEUcU07ZCmaOdJ0sPBnRauQsi0AlZ5gtLJjxi8SE=
Subject key identifier:   6F:BC:A6:23:B0:6A:B9:1B:F4:F6:5D:73:CF:0E:60:ED:5B:21:BB:F0
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       013A
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/b7ymI7BquRv09l1zzw5g7Vshu_A.roa
Signing time:             Sun 01 Oct 2023 01:30:16 +0000
ROA not before:           Sun 01 Oct 2023 01:30:16 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     9378
IP address blocks:        110.93.96.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 314 (0x13a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct  1 01:30:16 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=6FBCA623B06AB91BF4F65D73CF0E60ED5B21BBF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c7:22:db:1f:78:84:12:9f:41:22:f2:b2:2b:
                    ff:e2:9d:1f:62:5e:d4:bf:e9:a5:85:4c:86:50:32:
                    e5:83:37:30:aa:ae:f4:c9:bd:f7:cf:df:5e:c5:10:
                    b6:3b:2a:bb:5f:4d:d3:9f:f4:50:14:ac:5b:8d:f0:
                    27:bd:4a:99:b1:f9:64:27:90:bb:21:5b:38:f8:4e:
                    c6:14:9d:f6:13:34:60:b8:7f:aa:8c:ef:15:d1:1f:
                    35:4d:91:7b:16:a0:c7:27:ac:76:02:26:23:12:0d:
                    8a:ca:f2:2d:60:5b:10:78:3f:a2:fd:07:0d:50:a2:
                    02:47:7c:b6:3f:7e:0e:42:3f:a4:0e:5b:d0:ab:36:
                    b5:db:f1:08:7a:9f:2f:22:79:c8:fa:da:32:2d:2c:
                    7c:0f:31:e5:fd:49:11:bc:9c:47:c8:f1:72:99:42:
                    27:05:5e:09:2d:5b:09:d0:36:83:88:bd:cb:8e:56:
                    3e:08:93:a8:24:75:60:f9:20:b0:9d:88:09:21:76:
                    ff:e4:71:d9:18:e2:e8:44:51:d3:8a:4f:ea:d4:95:
                    fe:c3:62:00:1b:59:62:48:eb:5a:cb:ca:44:65:41:
                    52:f5:ee:f6:82:8b:41:6b:0b:85:53:c7:21:29:89:
                    39:08:3c:00:23:19:26:35:e3:de:69:5c:cd:ea:92:
                    db:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:BC:A6:23:B0:6A:B9:1B:F4:F6:5D:73:CF:0E:60:ED:5B:21:BB:F0
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/b7ymI7BquRv09l1zzw5g7Vshu_A.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.93.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         cd:f0:a4:df:ff:84:a3:a6:8b:52:b3:9b:36:e8:ca:21:43:d8:
         07:6e:b4:46:d4:bb:8a:e9:93:f4:ca:7d:0b:70:9e:55:6a:31:
         66:9b:19:2a:24:f5:b6:e1:39:c5:e1:56:78:a6:5e:df:43:0c:
         84:71:75:c1:6f:10:52:01:f3:a3:f1:55:92:6a:f8:6d:59:ef:
         29:c7:49:f6:fa:48:4c:c1:75:38:1d:1d:ab:9f:d7:ea:85:97:
         3a:e9:5d:0f:98:51:83:7c:43:7b:59:40:ea:57:df:9f:4a:68:
         4f:e6:f5:de:db:9f:5e:8e:88:e9:d4:d5:e8:c4:87:6d:51:30:
         11:08:f1:95:45:89:f2:d5:62:c7:ba:37:d2:cb:6e:ff:57:52:
         eb:a5:7a:fb:9d:75:81:47:a5:c3:07:99:ec:d9:cd:d6:6a:37:
         ea:6a:63:d5:b0:05:ae:f8:21:13:76:64:b4:09:e8:a6:a4:38:
         4e:74:eb:56:5b:98:07:0a:bf:44:ac:38:08:d1:2f:0d:93:12:
         d5:a1:43:bd:52:27:94:4d:41:d0:15:d3:75:9f:13:79:0e:da:
         54:3b:f6:60:de:57:80:95:36:e9:d5:43:9a:dc:2a:c9:81:5b:
         ac:50:bf:05:d9:56:cd:92:35:62:a0:b3:bd:e8:f2:ef:6e:f7:
         36:b6:8b:8e
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICATowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yMzEwMDEw
MTMwMTZaFw0yNDA5MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDZGQkNBNjIzQjA2QUI5
MUJGNEY2NUQ3M0NGMEU2MEVENUIyMUJCRjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC3xyLbH3iEEp9BIvKyK//inR9iXtS/6aWFTIZQMuWDNzCqrvTJ
vffP317FELY7KrtfTdOf9FAUrFuN8Ce9Spmx+WQnkLshWzj4TsYUnfYTNGC4f6qM
7xXRHzVNkXsWoMcnrHYCJiMSDYrK8i1gWxB4P6L9Bw1QogJHfLY/fg5CP6QOW9Cr
NrXb8Qh6ny8iecj62jItLHwPMeX9SRG8nEfI8XKZQicFXgktWwnQNoOIvcuOVj4I
k6gkdWD5ILCdiAkhdv/kcdkY4uhEUdOKT+rUlf7DYgAbWWJI61rLykRlQVL17vaC
i0FrC4VTxyEpiTkIPAAjGSY1495pXM3qkttBAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUb7ymI7BquRv09l1zzw5g7Vshu/AwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNjcxL2I3eW1JN0JxdVJ2MDlsMXp6dzVnN1ZzaHVfQS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBARuXWAwDQYJKoZIhvcNAQELBQADggEBAM3wpN//hKOmi1KzmzboyiFD2Adu
tEbUu4rpk/TKfQtwnlVqMWabGSok9bbhOcXhVnimXt9DDIRxdcFvEFIB86PxVZJq
+G1Z7ynHSfb6SEzBdTgdHauf1+qFlzrpXQ+YUYN8Q3tZQOpX359KaE/m9d7bn16O
iOnU1ejEh21RMBEI8ZVFifLVYse6N9LLbv9XUuulevuddYFHpcMHmezZzdZqN+pq
Y9WwBa74IRN2ZLQJ6KakOE5061ZbmAcKv0SsOAjRLw2TEtWhQ71SJ5RNQdAV03Wf
E3kO2lQ79mDeV4CVNunVQ5rcKsmBW6xQvwXZVs2SNWKgs73o8u9u9za2i44=
-----END CERTIFICATE-----
Generated at Thu May 30 03:38:52 2024 by rpki-client on console-ams.rpki-client.org