Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/qdvSdXjrc5RYxtVH2h5PpW9B2co.roa
File:                     qdvSdXjrc5RYxtVH2h5PpW9B2co.roa (raw, json)
Hash identifier:          LHk3bwLV4lSsPZW8XdRJhVsZFLgu4+XG5kcA11szoQA=
Subject key identifier:   A9:DB:D2:75:78:EB:73:94:58:C6:D5:47:DA:1E:4F:A5:6F:41:D9:CA
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       023B
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/qdvSdXjrc5RYxtVH2h5PpW9B2co.roa
Signing time:             Sat 31 Aug 2024 01:33:30 +0000
ROA not before:           Sat 31 Aug 2024 01:33:30 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     9824
IP address blocks:        202.179.224.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 571 (0x23b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug 31 01:33:30 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=A9DBD27578EB739458C6D547DA1E4FA56F41D9CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6f:9e:d0:72:97:fa:7a:3c:0a:3f:de:dd:21:
                    b5:35:0c:85:57:30:5f:36:2c:0a:56:e2:08:08:a2:
                    37:2b:c9:6c:69:df:f6:a9:d1:3d:80:d2:7d:00:7b:
                    08:94:04:b6:f8:29:72:d3:45:ef:b8:43:11:7e:31:
                    bd:19:44:39:83:7c:9b:63:15:5d:e9:59:69:d2:0f:
                    71:56:26:33:b2:f6:ca:15:a3:c0:6a:77:a7:81:cd:
                    eb:7d:fd:67:c7:59:5d:0c:30:e6:10:1b:e7:6e:b4:
                    eb:5a:41:3e:59:ee:08:ff:cf:1c:8a:de:e3:dd:51:
                    46:e3:1e:75:f2:dc:fe:df:be:00:75:73:78:eb:27:
                    f7:fd:d8:21:99:1c:1d:90:75:8a:9d:89:a9:cf:76:
                    6d:7f:5a:58:19:c9:e1:18:03:41:ab:80:d4:c8:15:
                    94:c4:37:1a:94:84:08:d5:3a:c2:1d:31:62:58:6a:
                    22:3b:36:13:6e:e9:9e:c1:6f:13:d6:e4:31:6d:a1:
                    42:c1:dd:99:2f:a1:24:c0:a3:ec:03:02:fb:35:c6:
                    35:27:b0:d3:c8:61:d1:f6:3f:22:ba:35:36:f0:31:
                    56:0a:d5:b3:01:b1:1f:e8:c9:4f:10:5e:5d:f3:d3:
                    c0:ac:33:24:99:a2:2d:5b:54:69:42:76:56:0d:ee:
                    a1:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:DB:D2:75:78:EB:73:94:58:C6:D5:47:DA:1E:4F:A5:6F:41:D9:CA
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/qdvSdXjrc5RYxtVH2h5PpW9B2co.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.179.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9c:b9:ee:1b:06:ad:14:9b:b2:e2:f6:eb:bf:4b:56:68:d0:34:
         ef:32:23:b8:ce:ce:a1:56:7c:0c:81:0c:09:24:eb:e7:2e:7c:
         3a:c6:b0:1a:9c:6c:a5:3c:ec:c4:39:b1:bf:ac:8b:93:dd:29:
         f1:e9:26:3b:2e:a4:1f:c5:80:3b:9e:21:4d:9f:8a:59:d1:4d:
         ee:23:17:44:cd:dd:e1:80:ad:69:9d:b0:dd:e8:7c:bb:f2:2c:
         44:43:04:c8:55:ef:ac:65:50:f0:a8:33:7d:08:9b:80:59:b9:
         66:83:3e:fd:f5:43:a8:b3:91:98:45:fe:e7:d9:72:e9:2e:ca:
         25:b1:cc:a5:42:e4:d9:2a:1e:b8:4f:89:31:dd:a6:50:87:18:
         d0:08:76:eb:7e:d4:fb:d2:30:8e:e6:5a:58:ef:2d:d9:65:88:
         9f:1e:f9:f3:c0:e1:93:92:69:cb:fa:32:14:be:aa:2f:de:64:
         37:e1:d6:ff:87:ed:49:2c:82:cf:5d:7a:0c:c8:32:0a:9b:5a:
         f4:3e:a4:77:fc:b9:d7:50:8a:98:03:77:b6:16:29:17:e8:62:
         88:c4:ce:e3:5c:82:8b:bc:0b:a7:76:84:6b:e5:b5:0a:6e:0c:
         cb:8d:c7:91:19:30:96:3f:cc:a8:9a:b2:ec:7a:f6:df:07:dd:
         39:84:a2:79
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAjswDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNDA4MzEw
MTMzMzBaFw0yNTA4MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEE5REJEMjc1NzhFQjcz
OTQ1OEM2RDU0N0RBMUU0RkE1NkY0MUQ5Q0EwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC8b57Qcpf6ejwKP97dIbU1DIVXMF82LApW4ggIojcryWxp3/ap
0T2A0n0AewiUBLb4KXLTRe+4QxF+Mb0ZRDmDfJtjFV3pWWnSD3FWJjOy9soVo8Bq
d6eBzet9/WfHWV0MMOYQG+dutOtaQT5Z7gj/zxyK3uPdUUbjHnXy3P7fvgB1c3jr
J/f92CGZHB2QdYqdianPdm1/WlgZyeEYA0GrgNTIFZTENxqUhAjVOsIdMWJYaiI7
NhNu6Z7BbxPW5DFtoULB3ZkvoSTAo+wDAvs1xjUnsNPIYdH2PyK6NTbwMVYK1bMB
sR/oyU8QXl3z08CsMySZoi1bVGlCdlYN7qF7AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUqdvSdXjrc5RYxtVH2h5PpW9B2cowHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNjcxL3FkdlNkWGpyYzVSWXh0VkgyaDVQcFc5QjJjby5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBATKs+AwDQYJKoZIhvcNAQELBQADggEBAJy57hsGrRSbsuL2679LVmjQNO8y
I7jOzqFWfAyBDAkk6+cufDrGsBqcbKU87MQ5sb+si5PdKfHpJjsupB/FgDueIU2f
ilnRTe4jF0TN3eGArWmdsN3ofLvyLERDBMhV76xlUPCoM30Im4BZuWaDPv31Q6iz
kZhF/ufZcukuyiWxzKVC5NkqHrhPiTHdplCHGNAIdut+1PvSMI7mWljvLdlliJ8e
+fPA4ZOSacv6MhS+qi/eZDfh1v+H7Uksgs9degzIMgqbWvQ+pHf8uddQipgDd7YW
KRfoYojEzuNcgou8C6d2hGvltQpuDMuNx5EZMJY/zKiasux69t8H3TmEonk=
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:45:58 2024 by rpki-client on console-ams.rpki-client.org