Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/hmJEOaApHLSJG8UbpTPr6zBzsno.roa
File:                     hmJEOaApHLSJG8UbpTPr6zBzsno.roa (raw, json)
Hash identifier:          6oJpzkMNJ3PqlcLuV/jeS3OAT4oxvoMMrao9KKdLExI=
Subject key identifier:   86:62:44:39:A0:29:1C:B4:89:1B:C5:1B:A5:33:EB:EB:30:73:B2:7A
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       01A5
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/hmJEOaApHLSJG8UbpTPr6zBzsno.roa
Signing time:             Sun 01 Oct 2023 01:36:33 +0000
ROA not before:           Sun 01 Oct 2023 01:36:33 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     9824
IP address blocks:        203.124.64.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 421 (0x1a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct  1 01:36:33 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=86624439A0291CB4891BC51BA533EBEB3073B27A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:14:e7:52:f4:99:47:21:50:59:c7:b3:67:a4:
                    7b:5a:57:83:51:fa:ac:15:6e:88:4f:d0:ce:5c:8a:
                    5c:f1:ff:9b:0b:70:a1:2d:21:e6:b7:dc:00:a8:bc:
                    00:87:8a:9f:9f:7b:e1:9e:5e:45:cc:23:7f:52:f3:
                    a4:e1:bf:36:65:d6:d6:12:a0:c4:67:1c:8a:df:96:
                    34:93:27:f5:22:ff:f4:3f:09:57:97:9a:e2:c6:69:
                    23:48:ec:78:69:43:4a:51:5f:52:3d:34:60:44:1d:
                    bc:70:b9:67:03:02:55:ba:2e:9d:ba:90:8b:c4:02:
                    3b:33:2d:61:24:96:7f:e0:7a:15:08:4c:bd:8b:2c:
                    8e:0b:49:7a:d0:cc:3f:52:64:a5:e4:05:66:0b:50:
                    2f:85:6f:a6:18:c8:45:9a:66:86:0f:77:a9:82:6a:
                    71:3d:65:0d:40:2c:9b:e5:48:07:fe:91:40:87:56:
                    3a:d4:f2:6e:c4:f3:c6:2a:5b:2a:9b:41:57:70:8b:
                    88:85:6e:8a:ec:b8:b1:31:41:02:53:a9:20:d0:0d:
                    5d:3d:6c:2f:ce:97:65:54:94:49:1e:93:69:b3:74:
                    9e:8e:c6:13:54:86:7a:3c:33:97:f1:3d:e6:f5:d4:
                    b6:99:20:ab:93:eb:7c:9b:7c:3c:a0:49:63:b8:6d:
                    f5:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:62:44:39:A0:29:1C:B4:89:1B:C5:1B:A5:33:EB:EB:30:73:B2:7A
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/hmJEOaApHLSJG8UbpTPr6zBzsno.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.124.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         de:f9:06:59:68:3b:b1:98:64:2c:bf:39:f8:60:68:51:9a:28:
         9f:cc:5c:c1:88:44:2a:2f:17:50:c7:36:83:ba:49:53:fc:25:
         05:f4:8e:ad:59:2c:95:8d:9e:75:40:db:0f:bc:49:f2:63:47:
         a4:c3:ff:2a:d4:4b:52:6d:7a:50:6f:e8:48:aa:86:18:fa:7d:
         71:18:7e:0e:82:8d:35:49:ce:bf:ce:f2:a1:13:66:14:6f:50:
         98:2d:5f:81:41:95:99:44:06:86:c8:f8:c6:d4:8d:1a:9c:01:
         87:cf:97:f8:be:a0:2c:e5:69:21:eb:1f:b2:26:2f:6a:05:4d:
         fc:93:2d:e3:83:37:e8:44:2e:87:98:62:81:f6:86:2b:94:6e:
         4b:7d:d0:32:43:65:db:7a:5f:b2:52:c5:83:ca:2d:31:68:56:
         4a:68:44:0b:a6:5a:ad:66:ce:eb:52:a5:ad:f7:c5:69:e7:74:
         16:61:9b:b1:33:0b:24:af:3f:dc:37:96:7d:0e:a1:c4:e2:c6:
         09:40:e7:90:55:5c:83:74:2b:14:7a:19:02:fa:01:69:e3:c1:
         2d:1e:14:9e:5f:1c:ca:b0:a3:b9:86:dd:10:7b:46:b9:01:61:
         ea:14:18:7f:c9:db:ac:cb:f5:ca:6c:81:49:2a:85:42:1d:8f:
         05:58:e8:4d
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAaUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yMzEwMDEw
MTM2MzNaFw0yNDA5MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDg2NjI0NDM5QTAyOTFD
QjQ4OTFCQzUxQkE1MzNFQkVCMzA3M0IyN0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCoFOdS9JlHIVBZx7NnpHtaV4NR+qwVbohP0M5cilzx/5sLcKEt
Iea33ACovACHip+fe+GeXkXMI39S86ThvzZl1tYSoMRnHIrfljSTJ/Ui//Q/CVeX
muLGaSNI7HhpQ0pRX1I9NGBEHbxwuWcDAlW6Lp26kIvEAjszLWEkln/gehUITL2L
LI4LSXrQzD9SZKXkBWYLUC+Fb6YYyEWaZoYPd6mCanE9ZQ1ALJvlSAf+kUCHVjrU
8m7E88YqWyqbQVdwi4iFborsuLExQQJTqSDQDV09bC/Ol2VUlEkek2mzdJ6OxhNU
hno8M5fxPeb11LaZIKuT63ybfDygSWO4bfWtAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUhmJEOaApHLSJG8UbpTPr6zBzsnowHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNjcxL2htSkVPYUFwSExTSkc4VWJwVFByNnpCenNuby5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAXLfEAwDQYJKoZIhvcNAQELBQADggEBAN75BlloO7GYZCy/OfhgaFGaKJ/M
XMGIRCovF1DHNoO6SVP8JQX0jq1ZLJWNnnVA2w+8SfJjR6TD/yrUS1JtelBv6Eiq
hhj6fXEYfg6CjTVJzr/O8qETZhRvUJgtX4FBlZlEBobI+MbUjRqcAYfPl/i+oCzl
aSHrH7ImL2oFTfyTLeODN+hELoeYYoH2hiuUbkt90DJDZdt6X7JSxYPKLTFoVkpo
RAumWq1mzutSpa33xWnndBZhm7EzCySvP9w3ln0OocTixglA55BVXIN0KxR6GQL6
AWnjwS0eFJ5fHMqwo7mG3RB7RrkBYeoUGH/J26zL9cpsgUkqhUIdjwVY6E0=
-----END CERTIFICATE-----
Generated at Thu May 30 03:08:56 2024 by rpki-client on console-fra.rpki-client.org