Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/q7whRR60it5Cz_TDToFrU1g7KoA.roa
File:                     q7whRR60it5Cz_TDToFrU1g7KoA.roa (raw, json)
Hash identifier:          tW52rfus8nu1oMMH8Bjjwlw+S42OD5tZiEILG1WtJAQ=
Subject key identifier:   AB:BC:21:45:1E:B4:8A:DE:42:CF:F4:C3:4E:81:6B:53:58:3B:2A:80
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0231
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/q7whRR60it5Cz_TDToFrU1g7KoA.roa
Signing time:             Sat 31 Aug 2024 01:33:25 +0000
ROA not before:           Sat 31 Aug 2024 01:33:25 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     9824
IP address blocks:        61.215.160.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 561 (0x231)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug 31 01:33:25 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=ABBC21451EB48ADE42CFF4C34E816B53583B2A80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:df:a0:fb:30:29:f4:8e:21:6c:ae:95:f9:9f:
                    54:f2:86:80:39:e1:1e:60:ea:19:87:4c:c7:9c:14:
                    8c:f5:ff:a5:e2:d0:c2:29:b7:d6:04:d7:16:72:ab:
                    ca:ed:5f:ba:60:2e:18:da:28:d5:2e:84:30:f3:88:
                    3f:4d:8b:a9:67:2e:7c:cf:ec:47:13:8b:5a:f5:cb:
                    73:ef:c2:73:cb:92:14:ff:c8:aa:1b:93:91:60:e1:
                    d8:0b:a2:58:f3:11:d4:e6:be:6b:df:d4:90:0e:8c:
                    6f:6c:e3:f4:ec:71:03:c9:37:98:2d:1a:e9:1b:f0:
                    9b:83:35:14:0d:f9:17:b4:7e:8a:e9:24:6b:cb:f5:
                    6a:cc:d9:21:54:8e:99:9a:9d:4d:64:97:18:ae:3f:
                    bd:08:c2:64:91:64:0c:61:6f:32:3c:4e:96:95:2c:
                    8a:7f:f8:2f:eb:2a:a7:d3:11:27:e0:cb:b5:9f:38:
                    4a:26:45:12:7a:f5:0e:06:74:fe:8c:a2:dd:dd:03:
                    24:c5:e8:73:54:79:d2:e1:db:32:3a:49:10:a7:66:
                    5d:7e:1f:54:0a:4d:9c:ad:75:ac:7e:06:48:ab:d4:
                    cc:99:70:d3:fa:7e:7a:e7:58:42:e6:b1:7c:3b:e4:
                    91:2a:4a:a4:5c:e3:c9:2f:e8:dc:37:db:ac:68:50:
                    c0:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:BC:21:45:1E:B4:8A:DE:42:CF:F4:C3:4E:81:6B:53:58:3B:2A:80
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/q7whRR60it5Cz_TDToFrU1g7KoA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.215.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         cb:d1:c9:40:1c:33:9a:15:2b:08:7c:40:66:6c:e7:30:5b:53:
         4f:91:e9:ab:b1:5d:42:3b:05:45:75:f5:f8:76:88:82:3c:67:
         48:17:0c:c0:93:fb:95:6b:c9:29:29:29:62:9c:07:b7:0c:80:
         60:ae:37:f5:6c:0d:3a:d2:24:8c:63:28:7b:db:d1:d5:a9:66:
         8e:40:3f:4a:77:77:e7:6e:3d:55:cf:07:b8:92:12:fc:50:33:
         19:52:0b:e2:d4:a0:f0:78:5f:2c:64:2e:3c:67:96:0c:fb:75:
         92:ee:f1:5c:94:b3:4f:79:4f:1f:53:81:da:75:3a:35:09:73:
         5c:fa:5d:b9:f3:63:01:d1:59:58:da:2a:0c:30:7d:a3:73:2e:
         f3:8f:66:5e:3a:ef:cd:75:c6:7a:49:59:f2:1c:0d:9d:37:a4:
         ab:93:f0:db:78:fb:5a:5d:72:29:89:2e:2f:51:1c:fc:62:10:
         c4:12:6e:8f:12:c9:63:4e:dd:96:58:ce:44:f3:31:c6:7c:95:
         a9:15:ca:bc:fe:5b:81:da:1c:b1:2a:c6:cd:71:b7:f1:a5:db:
         94:59:01:3b:46:e7:5f:70:07:92:ca:af:59:53:8e:da:1b:71:
         f7:73:1d:39:5a:8a:9d:ff:16:22:14:75:bb:7a:f7:2c:4f:57:
         b1:6e:35:f2
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAjEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNDA4MzEw
MTMzMjVaFw0yNTA4MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEFCQkMyMTQ1MUVCNDhB
REU0MkNGRjRDMzRFODE2QjUzNTgzQjJBODAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCx36D7MCn0jiFsrpX5n1TyhoA54R5g6hmHTMecFIz1/6Xi0MIp
t9YE1xZyq8rtX7pgLhjaKNUuhDDziD9Ni6lnLnzP7EcTi1r1y3PvwnPLkhT/yKob
k5Fg4dgLoljzEdTmvmvf1JAOjG9s4/TscQPJN5gtGukb8JuDNRQN+Re0forpJGvL
9WrM2SFUjpmanU1klxiuP70IwmSRZAxhbzI8TpaVLIp/+C/rKqfTESfgy7WfOEom
RRJ69Q4GdP6Mot3dAyTF6HNUedLh2zI6SRCnZl1+H1QKTZytdax+Bkir1MyZcNP6
fnrnWELmsXw75JEqSqRc48kv6Nw326xoUMDlAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUq7whRR60it5Cz/TDToFrU1g7KoAwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNjcxL3E3d2hSUjYwaXQ1Q3pfVERUb0ZyVTFnN0tvQS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAQ916AwDQYJKoZIhvcNAQELBQADggEBAMvRyUAcM5oVKwh8QGZs5zBbU0+R
6auxXUI7BUV19fh2iII8Z0gXDMCT+5VrySkpKWKcB7cMgGCuN/VsDTrSJIxjKHvb
0dWpZo5AP0p3d+duPVXPB7iSEvxQMxlSC+LUoPB4XyxkLjxnlgz7dZLu8VyUs095
Tx9Tgdp1OjUJc1z6XbnzYwHRWVjaKgwwfaNzLvOPZl467811xnpJWfIcDZ03pKuT
8Nt4+1pdcimJLi9RHPxiEMQSbo8SyWNO3ZZYzkTzMcZ8lakVyrz+W4HaHLEqxs1x
t/Gl25RZATtG519wB5LKr1lTjtobcfdzHTlaip3/FiIUdbt69yxPV7FuNfI=
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:31:34 2024 by rpki-client on console-fra.rpki-client.org