Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/eOggytOjD9NIKUEvKe_6M-zRmi4.roa
File:                     eOggytOjD9NIKUEvKe_6M-zRmi4.roa (raw, json)
Hash identifier:          6gruBk2IkKdFBU+1kLwedRvLdiWN+xhipmjb1K3pih0=
Subject key identifier:   78:E8:20:CA:D3:A3:0F:D3:48:29:41:2F:29:EF:FA:33:EC:D1:9A:2E
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       012A
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/eOggytOjD9NIKUEvKe_6M-zRmi4.roa
Signing time:             Fri 01 Sep 2023 01:30:32 +0000
ROA not before:           Fri 01 Sep 2023 01:30:32 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     9824
IP address blocks:        219.100.152.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 01:34:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 298 (0x12a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Sep  1 01:30:32 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=78E820CAD3A30FD34829412F29EFFA33ECD19A2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0a:b7:7d:e2:b8:7b:36:70:2c:58:9c:74:d9:
                    36:02:0f:c4:a6:d1:26:1e:f7:b3:34:c6:50:00:53:
                    e1:f3:83:ed:84:a5:29:81:45:c7:7a:38:94:18:e7:
                    f8:54:db:69:27:f3:46:09:43:b2:aa:95:ca:69:7d:
                    3d:d6:80:eb:43:36:30:53:6e:df:01:e6:6c:df:d4:
                    47:3d:b3:04:16:ee:7f:e2:10:3d:23:a6:e3:48:29:
                    7c:dd:62:7e:ab:e3:a0:80:4c:1a:b2:88:29:91:47:
                    ad:73:87:79:5d:c7:ac:47:74:9f:4e:9e:5d:5c:a3:
                    6b:ee:5b:be:66:fd:d4:0d:5d:77:34:00:11:bf:4f:
                    d7:90:0e:39:7c:8d:09:eb:79:04:7f:af:df:94:7c:
                    0d:0c:66:03:9f:c5:99:85:9e:53:7a:77:fe:bc:64:
                    f8:da:a3:52:08:ae:46:14:00:28:cb:03:ad:22:4d:
                    cb:a7:e6:50:79:47:96:24:71:a7:98:4d:c0:a6:83:
                    fb:83:df:db:5b:04:a7:d6:79:6d:4b:f9:d5:0f:b9:
                    ed:67:e1:d2:30:b9:91:20:b1:27:74:51:9d:44:dc:
                    7a:46:44:fb:be:f1:28:f2:00:e5:66:b4:fe:26:40:
                    40:56:51:a5:1b:20:0a:ca:26:4b:a3:b7:6e:cd:30:
                    2d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:E8:20:CA:D3:A3:0F:D3:48:29:41:2F:29:EF:FA:33:EC:D1:9A:2E
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/eOggytOjD9NIKUEvKe_6M-zRmi4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.100.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:dd:c6:8f:f6:9d:51:1b:b9:6b:f3:7a:66:64:5f:b6:65:b8:
         6d:f9:65:2a:8a:b8:2d:8d:19:9e:a5:84:6f:56:5a:35:85:3a:
         25:18:15:7f:80:5e:5d:af:c4:96:56:da:a1:a3:75:a2:9c:51:
         4b:41:d4:40:59:2a:42:10:d2:d9:b4:91:32:67:a1:b8:89:50:
         18:a1:c3:05:b5:fe:6d:a4:a0:32:5f:79:4f:33:69:c5:99:52:
         0e:2a:77:44:97:6a:94:2c:40:c4:21:a4:ed:21:b8:dc:de:61:
         04:24:fd:8b:3f:9d:ea:79:3f:ba:15:80:96:4f:5a:a5:92:4f:
         fd:00:76:dd:a2:ad:01:bd:12:d0:1e:dd:d2:25:af:6c:e2:a1:
         03:4b:b2:cb:89:c9:5c:e0:b7:b4:00:80:0a:7c:da:53:b1:cb:
         bb:ba:90:50:d4:db:32:6d:64:d5:4f:ec:c1:45:f9:26:67:56:
         27:1f:f7:e8:4d:8c:12:a9:fe:da:ab:78:16:15:bb:ca:35:da:
         3f:96:42:5f:5c:6b:08:09:53:43:da:ac:01:7f:69:1b:2d:ea:
         ef:bd:5a:b9:ca:ac:6e:1d:81:4f:09:a1:c7:f4:ce:4a:e0:b1:
         68:28:41:c4:16:27:b1:02:ef:9f:a9:27:d5:8c:45:a3:b2:7a:
         8e:e8:12:d0
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICASowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yMzA5MDEw
MTMwMzJaFw0yNDA4MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDc4RTgyMENBRDNBMzBG
RDM0ODI5NDEyRjI5RUZGQTMzRUNEMTlBMkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCwCrd94rh7NnAsWJx02TYCD8Sm0SYe97M0xlAAU+Hzg+2EpSmB
Rcd6OJQY5/hU22kn80YJQ7KqlcppfT3WgOtDNjBTbt8B5mzf1Ec9swQW7n/iED0j
puNIKXzdYn6r46CATBqyiCmRR61zh3ldx6xHdJ9Onl1co2vuW75m/dQNXXc0ABG/
T9eQDjl8jQnreQR/r9+UfA0MZgOfxZmFnlN6d/68ZPjao1IIrkYUACjLA60iTcun
5lB5R5YkcaeYTcCmg/uD39tbBKfWeW1L+dUPue1n4dIwuZEgsSd0UZ1E3HpGRPu+
8SjyAOVmtP4mQEBWUaUbIArKJkujt27NMC0JAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUeOggytOjD9NIKUEvKe/6M+zRmi4wHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNjcxL2VPZ2d5dE9qRDlOSUtVRXZLZV82TS16Um1pNC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBALbZJgwDQYJKoZIhvcNAQELBQADggEBACTdxo/2nVEbuWvzemZkX7ZluG35
ZSqKuC2NGZ6lhG9WWjWFOiUYFX+AXl2vxJZW2qGjdaKcUUtB1EBZKkIQ0tm0kTJn
obiJUBihwwW1/m2koDJfeU8zacWZUg4qd0SXapQsQMQhpO0huNzeYQQk/Ys/nep5
P7oVgJZPWqWST/0Adt2irQG9EtAe3dIlr2zioQNLssuJyVzgt7QAgAp82lOxy7u6
kFDU2zJtZNVP7MFF+SZnVicf9+hNjBKp/tqreBYVu8o12j+WQl9cawgJU0ParAF/
aRst6u+9WrnKrG4dgU8Jocf0zkrgsWgoQcQWJ7EC75+pJ9WMRaOyeo7oEtA=
-----END CERTIFICATE-----
Generated at Sat May 18 11:39:42 2024 by rpki-client on console-fra.rpki-client.org