Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/q5LPzg8jNkize1KCeJFOs2rRulg.roa
File:                     q5LPzg8jNkize1KCeJFOs2rRulg.roa (raw, json)
Hash identifier:          sA1Cy5k2s+5XltsWDQ1btu1kHhwt/AoXftGKyzSxcQc=
Subject key identifier:   AB:92:CF:CE:0F:23:36:48:B3:7B:52:82:78:91:4E:B3:6A:D1:BA:58
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       02DE
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/q5LPzg8jNkize1KCeJFOs2rRulg.roa
Signing time:             Sat 31 Aug 2024 01:44:38 +0000
ROA not before:           Sat 31 Aug 2024 01:44:38 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     4721
IP address blocks:        118.83.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 734 (0x2de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug 31 01:44:38 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=AB92CFCE0F233648B37B528278914EB36AD1BA58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b6:da:f6:58:ec:90:f1:20:9d:8a:f9:1b:a7:
                    7b:dc:16:a0:e3:35:20:3b:d4:46:51:87:4c:ef:e2:
                    ff:0c:67:6a:ba:7a:ce:fb:d7:b2:24:e9:37:b9:75:
                    c3:b8:0d:66:06:99:be:60:0c:0b:6f:b5:28:be:59:
                    96:3c:b2:9c:6e:bf:47:31:83:12:84:bf:1e:90:a1:
                    88:9a:5e:e7:5a:06:12:f4:21:9e:57:c1:9b:12:23:
                    a2:c9:c5:59:e5:0b:84:6d:9c:30:53:54:2b:1a:c2:
                    43:be:be:54:5b:fd:7b:6c:77:70:ae:f5:a1:08:79:
                    c4:0d:e8:92:ce:1c:c4:f4:6d:2d:1d:5e:c1:b7:ed:
                    c1:be:b9:c9:7d:1f:a1:63:e3:ef:ea:17:13:d3:42:
                    69:95:9a:85:00:ff:af:a1:a8:e9:50:0d:a5:db:9f:
                    fb:a9:fe:f6:c1:ed:1c:cb:80:4d:e8:2c:04:94:1b:
                    9e:e0:de:ea:7b:00:6e:c9:fb:28:c4:c6:4a:7b:c6:
                    23:f5:75:a0:2e:36:56:04:6b:5c:bd:5e:13:8f:a9:
                    2c:e9:c3:68:ad:82:94:f0:09:04:28:98:ab:74:ee:
                    aa:ff:89:20:b1:dc:2b:7b:7a:01:47:fe:ca:4c:e9:
                    8c:2a:b6:03:69:3a:cf:71:cf:5f:4b:89:e6:77:9d:
                    a6:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:92:CF:CE:0F:23:36:48:B3:7B:52:82:78:91:4E:B3:6A:D1:BA:58
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/q5LPzg8jNkize1KCeJFOs2rRulg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.83.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         22:d3:c6:21:e1:b4:84:a7:67:31:1b:e0:7c:bc:05:58:2c:e7:
         66:2f:82:7c:23:47:3a:a8:a6:2d:6c:6b:dc:51:8d:9d:7d:a9:
         75:e8:21:52:76:7f:10:38:b7:89:0b:05:8a:fe:4b:f9:23:ea:
         df:7e:32:3c:bc:f3:90:6a:e7:cb:0c:e7:de:39:b5:28:79:3e:
         f5:7d:59:37:6e:73:0f:f5:f6:b4:ea:70:55:ec:d2:b0:3c:68:
         94:83:22:31:fa:1b:65:9b:97:bc:e1:63:cf:e7:e2:9d:f8:e2:
         c3:99:7f:09:00:d9:4a:81:b3:71:44:ce:8b:20:fd:d3:03:0e:
         15:95:b5:66:73:e5:94:3e:08:94:39:4f:5b:94:80:36:ca:65:
         e7:61:f9:fa:a8:c3:25:9b:0e:24:a9:df:0b:20:81:e8:46:8d:
         bb:2a:e3:6c:2a:84:21:2d:46:c5:08:a6:66:c0:d7:18:e6:e9:
         9d:c0:b5:1f:9b:b8:d6:9f:96:19:1e:8c:74:5b:6e:54:51:af:
         8c:16:25:b7:3d:1c:e0:6c:13:94:31:07:16:33:0a:99:2b:05:
         6d:75:51:00:82:00:74:9f:14:18:34:fd:cf:5e:bf:05:15:97:
         18:7b:56:5e:30:08:5c:4a:94:6c:f5:2b:90:38:a9:cf:74:90:
         9c:71:90:9b
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICAt4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNDA4MzEw
MTQ0MzhaFw0yNTA4MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEFCOTJDRkNFMEYyMzM2
NDhCMzdCNTI4Mjc4OTE0RUIzNkFEMUJBNTgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDHttr2WOyQ8SCdivkbp3vcFqDjNSA71EZRh0zv4v8MZ2q6es77
17Ik6Te5dcO4DWYGmb5gDAtvtSi+WZY8spxuv0cxgxKEvx6QoYiaXudaBhL0IZ5X
wZsSI6LJxVnlC4RtnDBTVCsawkO+vlRb/Xtsd3Cu9aEIecQN6JLOHMT0bS0dXsG3
7cG+ucl9H6Fj4+/qFxPTQmmVmoUA/6+hqOlQDaXbn/up/vbB7RzLgE3oLASUG57g
3up7AG7J+yjExkp7xiP1daAuNlYEa1y9XhOPqSzpw2itgpTwCQQomKt07qr/iSCx
3Ct7egFH/spM6YwqtgNpOs9xz19LieZ3nabHAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQUq5LPzg8jNkize1KCeJFOs2rRulgwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNjcxL3E1TFB6ZzhqTmtpemUxS0NlSkZPczJyUnVsZy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwB2UzANBgkqhkiG9w0BAQsFAAOCAQEAItPGIeG0hKdnMRvgfLwFWCznZi+C
fCNHOqimLWxr3FGNnX2pdeghUnZ/EDi3iQsFiv5L+SPq334yPLzzkGrnywzn3jm1
KHk+9X1ZN25zD/X2tOpwVezSsDxolIMiMfobZZuXvOFjz+finfjiw5l/CQDZSoGz
cUTOiyD90wMOFZW1ZnPllD4IlDlPW5SANspl52H5+qjDJZsOJKnfCyCB6EaNuyrj
bCqEIS1GxQimZsDXGObpncC1H5u41p+WGR6MdFtuVFGvjBYltz0c4GwTlDEHFjMK
mSsFbXVRAIIAdJ8UGDT9z16/BRWXGHtWXjAIXEqUbPUrkDipz3SQnHGQmw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:45:58 2024 by rpki-client on console-ams.rpki-client.org