Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/wE8BKDyEAar3VZ-Blbm_Ms6dKY8.roa
File:                     wE8BKDyEAar3VZ-Blbm_Ms6dKY8.roa (raw, json)
Hash identifier:          btnWAKnqrsxWLJyWq9/hNmaRVxTq7Ki+2fHez1EwiFs=
Subject key identifier:   C0:4F:01:28:3C:84:01:AA:F7:55:9F:81:95:B9:BF:32:CE:9D:29:8F
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       02A9
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/wE8BKDyEAar3VZ-Blbm_Ms6dKY8.roa
Signing time:             Sat 31 Aug 2024 01:40:46 +0000
ROA not before:           Sat 31 Aug 2024 01:40:46 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     9824
IP address blocks:        219.113.96.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 681 (0x2a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug 31 01:40:46 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=C04F01283C8401AAF7559F8195B9BF32CE9D298F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:65:7e:b4:58:65:9e:2b:e1:2a:e8:81:8f:20:
                    18:53:50:ad:1d:95:f7:45:ae:df:60:bc:1f:86:0e:
                    8c:ad:71:14:95:00:3f:63:18:f4:7b:79:80:db:3e:
                    43:6e:a2:0a:4b:e6:91:2d:53:11:2c:9b:d7:2b:bf:
                    2a:c3:b3:9a:d4:a2:ef:51:57:fb:30:63:e2:cf:f1:
                    c5:02:1f:b1:a6:1b:5b:c6:ac:a7:0a:fe:99:e0:68:
                    48:3b:74:79:5d:44:3e:d3:4a:a7:c8:f3:67:4f:02:
                    89:a4:a5:04:41:33:ac:05:16:ea:27:f5:23:06:8d:
                    d0:fa:7e:52:d8:b4:9e:8b:86:1e:1d:4f:ab:34:11:
                    d9:e6:fa:72:81:03:09:f5:07:46:c4:d1:3f:2d:c3:
                    40:5d:55:5c:f5:cf:0f:23:ad:0e:7a:1f:f1:7a:e1:
                    95:bc:a4:f0:a8:08:00:b0:db:d6:b3:a4:97:58:ec:
                    b1:cb:52:8b:93:43:88:0d:70:9e:dc:45:09:db:83:
                    e0:f2:2d:cc:c4:a5:5e:c9:8f:d0:ec:a7:69:14:8e:
                    60:80:0b:d6:99:28:3b:00:24:0d:c4:77:f6:d4:7e:
                    dc:58:39:57:ff:ec:8a:90:7a:b6:70:30:89:6b:66:
                    fd:01:13:40:2f:86:49:c7:65:d7:ab:4d:bd:9f:cd:
                    ca:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:4F:01:28:3C:84:01:AA:F7:55:9F:81:95:B9:BF:32:CE:9D:29:8F
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/wE8BKDyEAar3VZ-Blbm_Ms6dKY8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.113.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7e:f6:2c:21:93:ed:86:e7:e7:b7:5d:40:07:95:8e:d9:fb:7f:
         d9:60:8c:a2:62:34:17:6a:45:88:cc:b3:11:ca:14:ff:69:92:
         c1:bd:67:cf:84:7a:ba:ef:e5:34:d1:49:d0:03:12:72:99:6b:
         cc:fe:23:d5:03:4c:20:79:e9:36:60:7e:9f:23:d6:13:e5:bd:
         21:cc:31:61:4a:15:70:76:9e:25:7a:f9:26:e8:5d:d6:be:b0:
         0e:08:11:ee:53:cd:9e:43:32:b4:8f:28:03:91:9b:83:d6:2e:
         05:c5:b9:33:c8:b3:66:7b:64:5f:02:76:f6:36:ca:31:18:de:
         4c:44:5a:7f:25:f1:00:62:cb:98:0b:34:c7:3a:c1:cf:e3:a0:
         09:4b:26:de:c7:1e:c7:f2:51:72:db:f9:1d:58:9c:4c:59:0f:
         9a:4a:50:ff:f5:24:a8:d0:3f:29:e9:96:44:7b:e2:bc:c1:42:
         ae:f8:49:b1:a9:93:8c:71:c8:65:29:6e:8e:0c:f8:49:b6:5e:
         c7:ea:1a:d1:3e:04:31:50:56:0b:8a:f0:f7:70:37:00:ec:f2:
         2a:0b:bf:97:55:cd:8d:bf:02:61:c7:ef:ad:73:54:62:de:db:
         b6:0b:1d:b9:c1:95:92:82:eb:8c:87:38:5c:4c:ff:c4:b6:6e:
         79:62:c4:a9
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAqkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNDA4MzEw
MTQwNDZaFw0yNTA4MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEMwNEYwMTI4M0M4NDAx
QUFGNzU1OUY4MTk1QjlCRjMyQ0U5RDI5OEYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDPZX60WGWeK+Eq6IGPIBhTUK0dlfdFrt9gvB+GDoytcRSVAD9j
GPR7eYDbPkNuogpL5pEtUxEsm9crvyrDs5rUou9RV/swY+LP8cUCH7GmG1vGrKcK
/pngaEg7dHldRD7TSqfI82dPAomkpQRBM6wFFuon9SMGjdD6flLYtJ6Lhh4dT6s0
Ednm+nKBAwn1B0bE0T8tw0BdVVz1zw8jrQ56H/F64ZW8pPCoCACw29azpJdY7LHL
UouTQ4gNcJ7cRQnbg+DyLczEpV7Jj9Dsp2kUjmCAC9aZKDsAJA3Ed/bUftxYOVf/
7IqQerZwMIlrZv0BE0AvhknHZderTb2fzcrZAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUwE8BKDyEAar3VZ+Blbm/Ms6dKY8wHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNjcxL3dFOEJLRHlFQWFyM1ZaLUJsYm1fTXM2ZEtZOC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBATbcWAwDQYJKoZIhvcNAQELBQADggEBAH72LCGT7Ybn57ddQAeVjtn7f9lg
jKJiNBdqRYjMsxHKFP9pksG9Z8+Eerrv5TTRSdADEnKZa8z+I9UDTCB56TZgfp8j
1hPlvSHMMWFKFXB2niV6+SboXda+sA4IEe5TzZ5DMrSPKAORm4PWLgXFuTPIs2Z7
ZF8CdvY2yjEY3kxEWn8l8QBiy5gLNMc6wc/joAlLJt7HHsfyUXLb+R1YnExZD5pK
UP/1JKjQPynplkR74rzBQq74SbGpk4xxyGUpbo4M+Em2XsfqGtE+BDFQVguK8Pdw
NwDs8ioLv5dVzY2/AmHH761zVGLe27YLHbnBlZKC64yHOFxM/8S2bnlixKk=
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:31:34 2024 by rpki-client on console-fra.rpki-client.org