Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/68/SyIikmEOVwg236wPQFgN43nqhS0.roa
File:                     SyIikmEOVwg236wPQFgN43nqhS0.roa (raw, json)
Hash identifier:          KL2U8OsX7tkgLnUE9uUsJ7rRDUwZT5E+U11DgD3N0lI=
Subject key identifier:   4B:22:22:92:61:0E:57:08:36:DF:AC:0F:40:58:0D:E3:79:EA:85:2D
Certificate issuer:       /CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
Certificate serial:       31
Authority key identifier: 65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/SyIikmEOVwg236wPQFgN43nqhS0.roa
Signing time:             Fri 06 Oct 2023 06:05:43 +0000
ROA not before:           Fri 06 Oct 2023 06:05:43 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     9374
IP address blocks:        202.222.112.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 16 Jun 2024 02:07:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49 (0x31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
        Validity
            Not Before: Oct  6 06:05:43 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=4B222292610E570836DFAC0F40580DE379EA852D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:86:24:be:28:9b:af:b0:d0:bd:2a:a6:69:6b:
                    86:35:70:15:91:72:28:ec:85:9d:49:0c:f9:69:67:
                    d3:58:bc:3f:26:87:b5:33:12:c0:bc:04:5c:93:2f:
                    3e:77:54:4d:6d:fd:a9:dc:40:c5:a3:00:bb:fa:db:
                    49:a2:0d:88:af:ef:2b:2d:b5:47:f2:94:bd:c3:c7:
                    1d:36:cf:21:8e:bd:81:fc:97:3b:f8:af:3a:0a:31:
                    72:69:3f:c6:dd:4b:4e:81:4e:26:a7:60:cd:0e:87:
                    f8:4c:48:82:47:29:d3:92:b8:43:8a:a8:35:ec:ea:
                    29:f9:14:68:a9:14:0f:8f:82:78:a8:f7:f8:9c:24:
                    f2:b8:19:f3:1d:4e:9c:f8:0e:e5:c9:4f:5e:9c:71:
                    91:65:fb:1e:95:0c:86:7b:ad:a9:b2:44:c0:07:48:
                    32:d3:87:ff:19:d9:05:93:db:af:8a:73:61:9a:c8:
                    36:c9:ea:3f:2f:7c:e9:94:2f:02:f9:7d:a9:6a:76:
                    cc:a9:ea:ef:94:f1:23:58:e9:f4:18:29:26:72:2b:
                    59:6b:25:35:77:98:1f:dd:26:59:96:50:1e:71:d0:
                    cd:a9:fa:38:a8:26:22:f1:b6:91:41:05:88:cd:b1:
                    6b:45:90:2f:3e:1d:1b:26:9f:c2:ad:18:c5:f3:2d:
                    81:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:22:22:92:61:0E:57:08:36:DF:AC:0F:40:58:0D:E3:79:EA:85:2D
            X509v3 Authority Key Identifier:
                keyid:65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/SyIikmEOVwg236wPQFgN43nqhS0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.222.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5d:bc:e3:a2:db:92:a8:b4:32:34:14:3e:2e:3f:0c:23:4e:fa:
         ad:90:f6:fc:42:08:40:52:73:cf:47:bd:26:1e:29:93:86:4b:
         57:f0:3a:a7:aa:01:55:bd:b2:ae:86:3a:bd:a7:22:a1:79:8e:
         fb:db:1b:cf:9c:81:b2:9a:84:5f:72:7d:57:a2:30:da:1c:27:
         c2:00:7f:0a:3d:9a:74:95:96:67:d3:45:cb:e2:d4:04:5b:fc:
         59:d1:57:48:7c:ad:aa:d2:c4:9a:db:5e:4a:98:43:51:ab:ba:
         bb:f3:da:40:5d:3a:3c:3c:58:f5:16:3f:15:3c:26:42:d9:8b:
         4c:cc:ee:6c:93:4f:56:6c:78:0c:28:0c:1a:84:30:f8:e7:12:
         b0:5a:b8:54:61:5b:b9:43:fa:03:f3:62:bd:8e:7b:fc:de:a5:
         af:cb:3f:cf:6c:0f:96:9c:5d:0c:fa:1f:4f:47:71:44:9b:34:
         c6:6a:ae:1e:08:ec:bc:9f:dc:37:e5:f1:2b:a9:61:a8:fd:64:
         aa:55:56:83:eb:9e:31:29:bb:72:15:3a:ff:39:ff:bf:8e:62:
         20:45:ff:4c:86:9c:2d:36:ee:32:9d:d0:68:93:66:5c:93:f8:
         79:21:fc:7d:8a:30:aa:49:e0:9b:e7:2e:a2:1f:b6:77:d8:a7:
         03:7f:bf:3e
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIBMTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2NURF
NTJFNjRCRTQzRTMyOEFBNjlGM0FCMkQzNDdGODgzM0VDNjM3MB4XDTIzMTAwNjA2
MDU0M1oXDTI0MDkxNDAxMzAwM1owMzExMC8GA1UEAxMoNEIyMjIyOTI2MTBFNTcw
ODM2REZBQzBGNDA1ODBERTM3OUVBODUyRDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANCGJL4om6+w0L0qpmlrhjVwFZFyKOyFnUkM+Wln01i8PyaHtTMS
wLwEXJMvPndUTW39qdxAxaMAu/rbSaINiK/vKy21R/KUvcPHHTbPIY69gfyXO/iv
Ogoxcmk/xt1LToFOJqdgzQ6H+ExIgkcp05K4Q4qoNezqKfkUaKkUD4+CeKj3+Jwk
8rgZ8x1OnPgO5clPXpxxkWX7HpUMhnutqbJEwAdIMtOH/xnZBZPbr4pzYZrINsnq
Py986ZQvAvl9qWp2zKnq75TxI1jp9BgpJnIrWWslNXeYH90mWZZQHnHQzan6OKgm
IvG2kUEFiM2xa0WQLz4dGyafwq0YxfMtgZkCAwEAAaOCAiIwggIeMB0GA1UdDgQW
BBRLIiKSYQ5XCDbfrA9AWA3jeeqFLTAfBgNVHSMEGDAWgBRl3lLmS+Q+Moqmnzqy
00f4gz7GNzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY
oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNjgvWmQ1UzVrdmtQaktLcHA4NnN0TkgtSU0teGpjLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvWmQ1UzVrdmtQaktLcHA4NnN0TkgtSU0t
eGpjLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgboGCCsGAQUFBwELBIGtMIGqMGAGCCsG
AQUFBzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzY4L1N5SWlrbUVPVndnMjM2d1BRRmdONDNucWhTMC5yb2EwRgYI
KwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRw
L2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BATK3nAwDQYJKoZIhvcNAQELBQADggEBAF2846Lbkqi0MjQUPi4/DCNO+q2Q9vxC
CEBSc89HvSYeKZOGS1fwOqeqAVW9sq6GOr2nIqF5jvvbG8+cgbKahF9yfVeiMNoc
J8IAfwo9mnSVlmfTRcvi1ARb/FnRV0h8rarSxJrbXkqYQ1Grurvz2kBdOjw8WPUW
PxU8JkLZi0zM7myTT1ZseAwoDBqEMPjnErBauFRhW7lD+gPzYr2Oe/zepa/LP89s
D5acXQz6H09HcUSbNMZqrh4I7Lyf3Dfl8SupYaj9ZKpVVoPrnjEpu3IVOv85/7+O
YiBF/0yGnC027jKd0GiTZlyT+Hkh/H2KMKpJ4JvnLqIftnfYpwN/vz4=
-----END CERTIFICATE-----
Generated at Mon Jun 10 09:56:21 2024 by rpki-client on console-ams.rpki-client.org