Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/bCg9Epou-JmUNWSazA1qYSCdW14.roa
File:                     bCg9Epou-JmUNWSazA1qYSCdW14.roa (raw, json)
Hash identifier:          0CflMNzWVgQGqX7lQvinvgvoN2aPHDr8iLvhOsJz1k8=
Subject key identifier:   6C:28:3D:12:9A:2E:F8:99:94:35:64:9A:CC:0D:6A:61:20:9D:5B:5E
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       011A
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/bCg9Epou-JmUNWSazA1qYSCdW14.roa
Signing time:             Fri 01 Sep 2023 01:30:24 +0000
ROA not before:           Fri 01 Sep 2023 01:30:24 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     9824
IP address blocks:        203.153.56.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 01:34:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 282 (0x11a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Sep  1 01:30:24 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=6C283D129A2EF8999435649ACC0D6A61209D5B5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a4:74:a8:1a:80:5c:40:76:55:6f:3e:2f:ee:
                    1f:4e:ec:cd:c5:b0:cc:5b:84:ca:a0:19:e5:65:de:
                    22:6d:63:31:dd:23:42:3b:b3:86:4b:11:07:34:7e:
                    fc:99:af:b5:15:cd:81:58:d6:ff:fc:f2:1b:40:b9:
                    6e:32:22:14:10:6d:94:b8:f4:67:5d:e9:3e:45:76:
                    32:fe:77:fa:49:7e:fb:26:db:a6:96:df:9b:53:8f:
                    cb:78:66:63:7d:46:b2:4e:5d:97:fd:b7:b2:23:37:
                    0e:1a:61:cc:fd:7e:95:55:b7:54:1d:2f:d2:25:73:
                    88:22:54:19:fc:4b:20:92:02:08:3a:b5:ed:e2:80:
                    0a:59:c3:07:8d:c4:72:15:13:67:c0:7b:2c:2b:27:
                    75:44:05:aa:ff:d4:90:57:96:e6:87:43:28:9d:91:
                    ad:b0:dd:9c:52:4d:4d:70:1e:f5:6b:f6:d3:36:cf:
                    0e:3d:11:cc:0c:14:e2:c2:eb:16:62:82:e8:e6:ef:
                    63:9e:ec:23:4f:7c:89:aa:ca:4a:58:22:14:ea:d2:
                    b3:64:36:c6:01:bb:62:c6:31:8b:81:7f:88:5f:d7:
                    02:23:5c:4e:90:6e:51:2f:0f:e6:2d:7b:e1:9c:f9:
                    fe:58:75:60:d9:35:be:4d:14:f4:5c:a8:e3:fe:02:
                    f2:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:28:3D:12:9A:2E:F8:99:94:35:64:9A:CC:0D:6A:61:20:9D:5B:5E
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/bCg9Epou-JmUNWSazA1qYSCdW14.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.153.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c5:bc:b0:64:25:c0:5d:3a:43:87:70:35:0c:1c:a6:7e:1c:67:
         fd:39:9a:f6:73:06:b8:1d:02:e6:08:8b:f1:44:9e:65:38:af:
         12:4b:12:d1:96:28:55:34:c9:8b:a4:15:21:b3:fa:15:4f:db:
         f0:bd:4d:be:89:d5:2c:5b:04:90:8e:77:90:c2:01:42:8a:8f:
         a7:e8:2e:d8:7e:bd:ed:18:7b:c7:15:4a:ad:93:35:5c:38:57:
         09:7f:b7:01:0a:f6:d3:cf:b7:55:00:9d:4e:a9:37:4a:3c:30:
         65:91:f7:b1:9e:92:3f:00:e1:7c:b0:cd:33:58:3b:11:f5:e5:
         d3:e5:eb:6b:3d:49:9d:d7:a5:8a:16:25:ae:fe:0e:d2:5e:90:
         46:7d:a7:76:ec:f3:85:d2:4b:d4:5a:d1:78:70:43:00:75:c4:
         1d:f3:7f:15:b3:97:24:a6:36:7f:1e:f8:90:74:ae:a4:b9:e8:
         c1:4c:9f:0a:4b:77:cb:01:87:8c:6e:c8:0b:00:da:2f:c5:8a:
         55:85:0b:5d:bd:b0:f1:18:0c:44:80:bb:9a:42:14:e2:9e:29:
         6b:b9:a5:f4:5e:55:8a:09:74:ea:a8:c7:69:c1:d9:29:63:76:
         18:18:a1:26:32:c7:50:81:5b:9d:6f:26:a2:44:a2:9c:78:da:
         ae:4f:0b:80
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICARowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yMzA5MDEw
MTMwMjRaFw0yNDA4MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDZDMjgzRDEyOUEyRUY4
OTk5NDM1NjQ5QUNDMEQ2QTYxMjA5RDVCNUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCnpHSoGoBcQHZVbz4v7h9O7M3FsMxbhMqgGeVl3iJtYzHdI0I7
s4ZLEQc0fvyZr7UVzYFY1v/88htAuW4yIhQQbZS49Gdd6T5FdjL+d/pJfvsm26aW
35tTj8t4ZmN9RrJOXZf9t7IjNw4aYcz9fpVVt1QdL9Ilc4giVBn8SyCSAgg6te3i
gApZwweNxHIVE2fAeywrJ3VEBar/1JBXluaHQyidka2w3ZxSTU1wHvVr9tM2zw49
EcwMFOLC6xZigujm72Oe7CNPfImqykpYIhTq0rNkNsYBu2LGMYuBf4hf1wIjXE6Q
blEvD+Yte+Gc+f5YdWDZNb5NFPRcqOP+AvIjAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUbCg9Epou+JmUNWSazA1qYSCdW14wHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNjcxL2JDZzlFcG91LUptVU5XU2F6QTFxWVNDZFcxNC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBALLmTgwDQYJKoZIhvcNAQELBQADggEBAMW8sGQlwF06Q4dwNQwcpn4cZ/05
mvZzBrgdAuYIi/FEnmU4rxJLEtGWKFU0yYukFSGz+hVP2/C9Tb6J1SxbBJCOd5DC
AUKKj6foLth+ve0Ye8cVSq2TNVw4Vwl/twEK9tPPt1UAnU6pN0o8MGWR97Gekj8A
4XywzTNYOxH15dPl62s9SZ3XpYoWJa7+DtJekEZ9p3bs84XSS9Ra0XhwQwB1xB3z
fxWzlySmNn8e+JB0rqS56MFMnwpLd8sBh4xuyAsA2i/FilWFC129sPEYDESAu5pC
FOKeKWu5pfReVYoJdOqox2nB2SljdhgYoSYyx1CBW51vJqJEopx42q5PC4A=
-----END CERTIFICATE-----
Generated at Sat May 18 12:40:39 2024 by rpki-client on console-ams.rpki-client.org