Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/nn4yDorzwsG32aZTbNzQaMqf8u4.roa
File:                     nn4yDorzwsG32aZTbNzQaMqf8u4.roa (raw, json)
Hash identifier:          Ky5QZRVj+KaYLMQXuFxwILVcMKr3lpUJr+DXKm9rBJQ=
Subject key identifier:   9E:7E:32:0E:8A:F3:C2:C1:B7:D9:A6:53:6C:DC:D0:68:CA:9F:F2:EE
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0186
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/nn4yDorzwsG32aZTbNzQaMqf8u4.roa
Signing time:             Sun 01 Oct 2023 01:34:32 +0000
ROA not before:           Sun 01 Oct 2023 01:34:32 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     4721
IP address blocks:        114.134.192.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 01:34:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 390 (0x186)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct  1 01:34:32 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=9E7E320E8AF3C2C1B7D9A6536CDCD068CA9FF2EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8c:a7:f4:5a:b2:c9:83:d9:cf:8b:57:19:d8:
                    ce:b1:b9:4d:24:f4:76:f3:79:18:c0:79:90:c3:45:
                    19:21:d1:a3:68:5e:bf:8f:34:3b:9c:da:93:ad:77:
                    8b:e8:2d:e2:5c:04:84:63:f7:45:44:10:2d:c1:44:
                    c0:39:fe:8a:fa:d7:fa:93:e8:d8:a1:09:e9:96:9a:
                    5c:cd:a8:f7:ba:41:38:99:f6:de:77:d9:d8:62:35:
                    b5:58:2b:9c:88:8f:a4:f5:89:69:4a:64:0e:79:02:
                    42:36:46:30:33:1c:df:ba:1b:50:c2:9d:69:41:4e:
                    ef:bf:4f:0b:42:c9:a8:10:44:cc:0c:df:80:f2:8a:
                    a8:a8:ac:90:3b:a3:15:1a:b5:3d:41:ed:a4:76:a9:
                    dd:b5:7a:26:89:89:a8:d0:c4:f5:b3:ab:0b:61:17:
                    8a:9c:d0:64:7b:ab:8e:d6:ef:aa:64:d9:4e:01:82:
                    bd:67:41:4c:11:fe:40:76:b3:41:28:43:23:95:a7:
                    f2:2b:35:1b:ae:5b:28:19:d9:ae:20:19:12:dd:ed:
                    79:06:e4:81:2d:58:78:2d:08:42:6b:94:dd:d8:ef:
                    94:6d:57:08:9e:58:2e:39:c0:db:c7:17:48:4f:b4:
                    b0:c7:62:b9:8d:97:1d:d5:6b:67:96:d0:ed:e8:5a:
                    0c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:7E:32:0E:8A:F3:C2:C1:B7:D9:A6:53:6C:DC:D0:68:CA:9F:F2:EE
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/nn4yDorzwsG32aZTbNzQaMqf8u4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.134.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         04:a5:52:fb:04:06:e0:f2:f3:96:85:74:d8:b3:9b:2a:89:e9:
         e2:a5:13:e3:d7:40:44:ea:a8:83:bb:c9:f1:3f:22:9f:ba:95:
         26:6e:88:bb:c9:21:90:dc:bf:a0:ae:06:7f:d9:09:bd:44:1b:
         33:4b:9a:85:eb:cd:89:51:65:fc:21:d8:e7:23:55:e1:5a:a0:
         ff:d1:19:87:e5:6b:48:91:e7:37:d4:5b:4d:04:de:04:78:45:
         9e:e5:60:80:e5:ca:9b:4c:6e:bb:09:1b:fd:f9:d5:06:3a:0a:
         77:2f:88:a6:76:6f:2f:e7:9f:5a:da:88:b0:e9:6d:8a:ad:ed:
         c5:06:49:39:cd:f2:23:2e:64:25:5e:84:18:cb:4b:32:cc:44:
         5b:f2:46:15:4f:53:8d:d2:69:86:e7:c5:74:3a:bd:63:e7:ae:
         86:ed:e9:87:13:d6:e9:1b:6f:6b:4c:eb:fd:44:35:f2:cd:f8:
         c9:57:9c:6a:c8:f5:08:92:f8:f8:a6:87:b9:44:24:f6:ca:1c:
         ca:e8:85:04:fc:a3:8c:bb:ec:7b:a3:b2:6a:07:8f:55:d8:ca:
         97:32:c7:be:ac:05:79:3e:79:d8:d9:3d:dc:83:5f:aa:b9:b2:
         b0:ee:c9:d5:3e:46:f9:54:2d:f3:53:11:65:7f:aa:d0:62:89:
         c0:c4:94:ce
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAYYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yMzEwMDEw
MTM0MzJaFw0yNDA5MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDlFN0UzMjBFOEFGM0My
QzFCN0Q5QTY1MzZDRENEMDY4Q0E5RkYyRUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCzjKf0WrLJg9nPi1cZ2M6xuU0k9HbzeRjAeZDDRRkh0aNoXr+P
NDuc2pOtd4voLeJcBIRj90VEEC3BRMA5/or61/qT6NihCemWmlzNqPe6QTiZ9t53
2dhiNbVYK5yIj6T1iWlKZA55AkI2RjAzHN+6G1DCnWlBTu+/TwtCyagQRMwM34Dy
iqiorJA7oxUatT1B7aR2qd21eiaJiajQxPWzqwthF4qc0GR7q47W76pk2U4Bgr1n
QUwR/kB2s0EoQyOVp/IrNRuuWygZ2a4gGRLd7XkG5IEtWHgtCEJrlN3Y75RtVwie
WC45wNvHF0hPtLDHYrmNlx3Va2eW0O3oWgwtAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUnn4yDorzwsG32aZTbNzQaMqf8u4wHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNjcxL25uNHlEb3J6d3NHMzJhWlRiTnpRYU1xZjh1NC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAZyhsAwDQYJKoZIhvcNAQELBQADggEBAASlUvsEBuDy85aFdNizmyqJ6eKl
E+PXQETqqIO7yfE/Ip+6lSZuiLvJIZDcv6CuBn/ZCb1EGzNLmoXrzYlRZfwh2Ocj
VeFaoP/RGYfla0iR5zfUW00E3gR4RZ7lYIDlyptMbrsJG/351QY6CncviKZ2by/n
n1raiLDpbYqt7cUGSTnN8iMuZCVehBjLSzLMRFvyRhVPU43SaYbnxXQ6vWPnrobt
6YcT1ukbb2tM6/1ENfLN+MlXnGrI9QiS+Pimh7lEJPbKHMrohQT8o4y77HujsmoH
j1XYypcyx76sBXk+edjZPdyDX6q5srDuydU+RvlULfNTEWV/qtBiicDElM4=
-----END CERTIFICATE-----
Generated at Sat May 18 12:40:39 2024 by rpki-client on console-ams.rpki-client.org