Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/ggWVhytIi5F0kgWvg8xnYwtlrQc.roa
File:                     ggWVhytIi5F0kgWvg8xnYwtlrQc.roa (raw, json)
Hash identifier:          gIzLSCzAxyn9kBEw7wFJcAUMWiZ5bSUH57ec1M1ikHY=
Subject key identifier:   82:05:95:87:2B:48:8B:91:74:92:05:AF:83:CC:67:63:0B:65:AD:07
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0115
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/ggWVhytIi5F0kgWvg8xnYwtlrQc.roa
Signing time:             Fri 01 Sep 2023 01:30:22 +0000
ROA not before:           Fri 01 Sep 2023 01:30:22 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     4721
IP address blocks:        202.83.184.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 277 (0x115)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Sep  1 01:30:22 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=820595872B488B91749205AF83CC67630B65AD07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:35:d1:cd:b4:91:df:56:19:96:ed:7c:12:c5:
                    52:cf:34:0a:32:28:81:4e:1b:12:66:67:b7:b3:7e:
                    9b:86:d2:05:48:cc:03:eb:87:04:68:1d:9c:6b:6c:
                    8c:a7:80:12:d5:9a:b0:e4:40:32:56:63:ee:c4:1f:
                    41:42:fa:36:c6:63:7d:80:0d:39:32:f0:13:24:76:
                    a4:a7:d5:c2:54:ee:7d:18:ef:23:a3:c7:c3:ef:23:
                    fd:5c:e7:c6:29:4f:86:27:15:bc:9f:45:79:59:f3:
                    c8:bc:b7:f6:d3:df:f4:a4:06:6e:61:6c:41:2d:8d:
                    8c:da:22:a5:c5:e2:1b:d2:b1:72:52:c4:5a:bc:f5:
                    8e:de:a3:25:7e:20:d4:b9:a9:7f:21:8f:f9:48:da:
                    26:5f:f3:44:ef:20:5c:67:67:d2:7a:6a:01:45:34:
                    de:c4:49:28:21:b6:3d:77:8c:94:6a:9c:18:a7:e1:
                    83:28:80:2d:5d:5f:18:0b:38:c8:8f:b0:97:7e:1d:
                    30:93:7e:5d:00:c8:db:d5:30:6d:79:9f:16:12:9a:
                    b3:1b:a2:31:8e:01:03:47:2a:88:52:b5:42:d1:7e:
                    35:f5:82:a6:c9:a5:e2:bf:d1:5c:9f:48:93:1e:c8:
                    2f:aa:93:ab:fc:63:84:ab:6e:5c:e5:d1:5d:07:8a:
                    c7:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:05:95:87:2B:48:8B:91:74:92:05:AF:83:CC:67:63:0B:65:AD:07
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/ggWVhytIi5F0kgWvg8xnYwtlrQc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.83.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         d7:83:db:2c:9a:78:a5:49:6a:d4:8f:bd:8f:6b:09:ae:a5:3e:
         87:d9:21:27:e6:04:4d:ca:fb:7a:fc:48:3c:19:86:a8:58:06:
         37:6d:8c:a5:1e:6a:a5:0a:58:93:ac:b5:7e:76:a1:44:7e:20:
         06:71:89:b1:84:0f:8e:15:27:f5:c4:ca:fe:3a:6a:68:e9:f4:
         b8:b9:73:95:9c:bb:6d:d9:d1:3a:25:0d:c0:ed:90:f9:97:f0:
         25:3f:b5:56:d2:57:52:d1:1d:fe:b5:ac:3d:6a:06:e4:35:8f:
         31:8c:57:5d:4b:4e:fb:bc:be:07:66:c1:98:c4:89:00:ed:3b:
         04:1c:ed:0f:d8:22:2f:d7:b4:e0:33:ed:d6:be:ec:6f:07:8f:
         9e:5f:9c:9a:80:46:20:7f:7e:a2:52:35:d6:88:21:14:34:af:
         22:ba:3b:c2:53:72:84:c7:3d:71:da:a9:ef:fe:5a:c4:cc:7e:
         3f:a0:af:76:17:2b:9d:5e:84:0b:a4:f1:78:4b:db:70:ea:98:
         14:72:2f:45:93:4e:dc:0b:8f:df:7a:a8:35:1f:15:16:b7:6d:
         c3:bd:24:ca:b4:c2:42:30:46:51:54:4a:55:fb:4c:52:52:03:
         ea:d9:df:09:d1:f7:43:85:7c:b3:d0:ea:f2:5a:e9:26:4a:e8:
         bf:73:e4:61
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICARUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yMzA5MDEw
MTMwMjJaFw0yNDA4MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDgyMDU5NTg3MkI0ODhC
OTE3NDkyMDVBRjgzQ0M2NzYzMEI2NUFEMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC+NdHNtJHfVhmW7XwSxVLPNAoyKIFOGxJmZ7ezfpuG0gVIzAPr
hwRoHZxrbIyngBLVmrDkQDJWY+7EH0FC+jbGY32ADTky8BMkdqSn1cJU7n0Y7yOj
x8PvI/1c58YpT4YnFbyfRXlZ88i8t/bT3/SkBm5hbEEtjYzaIqXF4hvSsXJSxFq8
9Y7eoyV+INS5qX8hj/lI2iZf80TvIFxnZ9J6agFFNN7ESSghtj13jJRqnBin4YMo
gC1dXxgLOMiPsJd+HTCTfl0AyNvVMG15nxYSmrMbojGOAQNHKohStULRfjX1gqbJ
peK/0VyfSJMeyC+qk6v8Y4Srblzl0V0HiseLAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUggWVhytIi5F0kgWvg8xnYwtlrQcwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNjcxL2dnV1ZoeXRJaTVGMGtnV3ZnOHhuWXd0bHJRYy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAPKU7gwDQYJKoZIhvcNAQELBQADggEBANeD2yyaeKVJatSPvY9rCa6lPofZ
ISfmBE3K+3r8SDwZhqhYBjdtjKUeaqUKWJOstX52oUR+IAZxibGED44VJ/XEyv46
amjp9Li5c5Wcu23Z0TolDcDtkPmX8CU/tVbSV1LRHf61rD1qBuQ1jzGMV11LTvu8
vgdmwZjEiQDtOwQc7Q/YIi/XtOAz7da+7G8Hj55fnJqARiB/fqJSNdaIIRQ0ryK6
O8JTcoTHPXHaqe/+WsTMfj+gr3YXK51ehAuk8XhL23DqmBRyL0WTTtwLj996qDUf
FRa3bcO9JMq0wkIwRlFUSlX7TFJSA+rZ3wnR90OFfLPQ6vJa6SZK6L9z5GE=
-----END CERTIFICATE-----
Generated at Thu May 30 03:38:52 2024 by rpki-client on console-ams.rpki-client.org