Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/68/PBcSOYil01W_8v2BgJhPzTa3A0k.roa
File:                     PBcSOYil01W_8v2BgJhPzTa3A0k.roa (raw, json)
Hash identifier:          LSr0m0oWzCFGv80Mpjgc0m8nM02S/ov9HVD0Phu2K/k=
Subject key identifier:   3C:17:12:39:88:A5:D3:55:BF:F2:FD:81:80:98:4F:CD:36:B7:03:49
Certificate issuer:       /CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
Certificate serial:       27
Authority key identifier: 65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/PBcSOYil01W_8v2BgJhPzTa3A0k.roa
Signing time:             Fri 06 Oct 2023 06:05:39 +0000
ROA not before:           Fri 06 Oct 2023 06:05:39 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     9374
IP address blocks:        117.18.88.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39 (0x27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
        Validity
            Not Before: Oct  6 06:05:39 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=3C17123988A5D355BFF2FD8180984FCD36B70349
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:fb:84:41:10:c6:de:01:af:04:35:43:e9:33:
                    8b:4a:d5:a0:01:92:09:1f:62:cb:ac:68:94:4c:9b:
                    f8:06:a6:91:66:1c:e6:b0:40:2b:0f:7f:39:fe:db:
                    36:37:49:e9:52:a6:36:2d:9c:a5:80:30:03:55:8d:
                    4f:e8:82:e5:e3:57:bc:5e:d0:a9:f6:23:7c:73:e9:
                    2f:08:24:c8:72:39:f6:8f:75:e3:cb:ad:0b:e9:b5:
                    4c:72:84:fc:d0:2f:de:11:a4:5c:1c:2a:88:8e:3a:
                    28:15:6c:5d:df:5a:73:e3:ac:da:4a:c0:99:65:ac:
                    8c:9f:1c:f5:59:b4:fb:00:92:4d:76:41:0d:85:2b:
                    2e:26:32:ef:c0:df:df:60:0b:3e:ed:47:0b:09:f7:
                    8c:70:86:bc:54:46:8e:db:96:fa:1f:f7:64:8a:b3:
                    c8:4b:b3:6b:87:9a:8e:b5:05:eb:48:69:83:39:f0:
                    31:e5:c7:93:d4:59:4c:4e:1d:9a:e2:df:59:fa:71:
                    3f:47:42:a1:42:0c:d6:12:8e:95:94:ba:da:91:64:
                    45:94:46:7d:e9:37:b3:0f:55:a5:86:50:74:3b:87:
                    b9:33:36:92:f5:84:8d:00:94:0b:ca:af:0c:f6:3a:
                    22:6f:c2:d9:34:dd:23:27:1e:33:7e:66:49:4e:b6:
                    73:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:17:12:39:88:A5:D3:55:BF:F2:FD:81:80:98:4F:CD:36:B7:03:49
            X509v3 Authority Key Identifier:
                keyid:65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/PBcSOYil01W_8v2BgJhPzTa3A0k.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.18.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         95:72:03:2f:df:40:79:dc:eb:64:57:7f:b0:ed:83:4e:cf:74:
         ef:69:78:4f:54:9a:f5:e4:5b:1d:4a:0a:ed:84:2f:ce:fc:8b:
         a5:18:cd:ec:2d:35:ad:77:16:3d:fa:a6:5c:75:51:1e:6a:6f:
         2f:1e:f5:57:fe:f7:9d:0a:db:1a:cd:7a:47:93:12:62:aa:04:
         88:3d:c8:8d:b2:f0:e0:06:f1:4b:66:37:24:87:3c:95:86:34:
         e6:59:71:2c:ca:55:f8:02:cf:6e:c0:bf:00:1f:2b:89:d6:43:
         61:44:38:a2:bf:be:ab:cc:65:25:52:93:43:52:3b:b8:fb:02:
         1a:88:fe:94:13:19:88:83:ee:9c:81:1f:ea:11:2d:f5:dd:77:
         20:c3:17:60:02:61:ca:ef:21:0a:23:47:d2:55:57:39:4f:1b:
         c2:0a:ba:94:02:5c:3f:dc:6b:50:da:a1:eb:fe:dc:a2:47:24:
         3e:c8:10:b1:39:7a:9c:bc:48:3e:e5:01:80:28:ae:1f:25:4e:
         d8:65:b9:40:18:5e:86:c4:c2:07:f8:92:c8:e0:4a:4e:8d:44:
         8a:9c:e6:08:9d:3b:e4:4c:f3:2a:8d:d9:ad:86:e8:59:a2:c5:
         25:57:df:df:85:9a:4c:ac:4a:7f:78:5c:5c:c2:37:3a:25:67:
         df:9a:5c:22
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIBJzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2NURF
NTJFNjRCRTQzRTMyOEFBNjlGM0FCMkQzNDdGODgzM0VDNjM3MB4XDTIzMTAwNjA2
MDUzOVoXDTI0MDkxNDAxMzAwM1owMzExMC8GA1UEAxMoM0MxNzEyMzk4OEE1RDM1
NUJGRjJGRDgxODA5ODRGQ0QzNkI3MDM0OTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALz7hEEQxt4BrwQ1Q+kzi0rVoAGSCR9iy6xolEyb+AamkWYc5rBA
Kw9/Of7bNjdJ6VKmNi2cpYAwA1WNT+iC5eNXvF7QqfYjfHPpLwgkyHI59o9148ut
C+m1THKE/NAv3hGkXBwqiI46KBVsXd9ac+Os2krAmWWsjJ8c9Vm0+wCSTXZBDYUr
LiYy78Df32ALPu1HCwn3jHCGvFRGjtuW+h/3ZIqzyEuza4eajrUF60hpgznwMeXH
k9RZTE4dmuLfWfpxP0dCoUIM1hKOlZS62pFkRZRGfek3sw9VpYZQdDuHuTM2kvWE
jQCUC8qvDPY6Im/C2TTdIyceM35mSU62c1kCAwEAAaOCAiIwggIeMB0GA1UdDgQW
BBQ8FxI5iKXTVb/y/YGAmE/NNrcDSTAfBgNVHSMEGDAWgBRl3lLmS+Q+Moqmnzqy
00f4gz7GNzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY
oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNjgvWmQ1UzVrdmtQaktLcHA4NnN0TkgtSU0teGpjLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvWmQ1UzVrdmtQaktLcHA4NnN0TkgtSU0t
eGpjLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgboGCCsGAQUFBwELBIGtMIGqMGAGCCsG
AQUFBzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzY4L1BCY1NPWWlsMDFXXzh2MkJnSmhQelRhM0Eway5yb2EwRgYI
KwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRw
L2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAN1ElgwDQYJKoZIhvcNAQELBQADggEBAJVyAy/fQHnc62RXf7Dtg07PdO9peE9U
mvXkWx1KCu2EL878i6UYzewtNa13Fj36plx1UR5qby8e9Vf+950K2xrNekeTEmKq
BIg9yI2y8OAG8UtmNySHPJWGNOZZcSzKVfgCz27AvwAfK4nWQ2FEOKK/vqvMZSVS
k0NSO7j7AhqI/pQTGYiD7pyBH+oRLfXddyDDF2ACYcrvIQojR9JVVzlPG8IKupQC
XD/ca1Daoev+3KJHJD7IELE5epy8SD7lAYAorh8lTthluUAYXobEwgf4ksjgSk6N
RIqc5gidO+RM8yqN2a2G6FmixSVX39+FmkysSn94XFzCNzolZ9+aXCI=
-----END CERTIFICATE-----
Generated at Thu May 30 03:38:53 2024 by rpki-client on console-ams.rpki-client.org