Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/68/seb2Oh5S3qc1vdEY6eJnvvFyD3E.roa
File:                     seb2Oh5S3qc1vdEY6eJnvvFyD3E.roa (raw, json)
Hash identifier:          J57VKb9tBduneZ7sL5fxBwcuIsgC9MTBqs/iG+ZZLOA=
Subject key identifier:   B1:E6:F6:3A:1E:52:DE:A7:35:BD:D1:18:E9:E2:67:BE:F1:72:0F:71
Certificate issuer:       /CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
Certificate serial:       59
Authority key identifier: 65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/seb2Oh5S3qc1vdEY6eJnvvFyD3E.roa
Signing time:             Sat 31 Aug 2024 01:31:52 +0000
ROA not before:           Sat 31 Aug 2024 01:31:52 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     9374
IP address blocks:        210.237.0.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89 (0x59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
        Validity
            Not Before: Aug 31 01:31:52 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=B1E6F63A1E52DEA735BDD118E9E267BEF1720F71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:19:25:09:c8:cd:bd:a6:88:2f:41:7c:82:93:
                    18:e4:9d:b0:9c:0d:83:66:96:97:25:71:8b:59:e5:
                    af:5a:3e:39:c9:6f:62:9f:2f:34:e7:a5:fb:30:2d:
                    08:ce:47:5a:d4:5c:69:ff:d5:b9:36:58:a6:0b:36:
                    eb:9b:71:bd:9c:5f:6e:00:8b:6f:57:a4:2a:43:84:
                    90:e4:99:ea:30:99:ea:f9:78:cf:46:e6:10:6d:38:
                    4a:8f:31:81:81:82:db:c8:ce:ac:e5:99:0c:be:59:
                    24:80:7c:9b:bb:98:a6:9c:ac:bf:2b:5a:af:04:12:
                    4d:67:28:48:2a:4a:d3:b0:c1:fc:5e:8d:e6:a2:f5:
                    b0:04:2d:c6:ea:94:da:45:83:67:13:1a:fe:78:2f:
                    62:44:b3:03:70:81:a5:59:28:ed:1c:3b:1d:46:ec:
                    22:64:94:4b:c0:75:5a:35:39:99:21:ad:db:83:d0:
                    01:f6:d7:e4:66:cb:9b:72:22:aa:52:73:c2:8d:ce:
                    b9:8c:d4:a6:f7:c0:3f:33:97:b0:9a:94:55:21:15:
                    37:f7:49:42:99:02:24:80:74:c7:6c:80:66:cb:9e:
                    58:5f:81:a6:70:c8:1c:ea:21:a2:5b:35:0b:81:15:
                    7b:6d:7e:ca:76:6e:af:b4:e2:09:a8:69:e1:ef:c0:
                    ab:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:E6:F6:3A:1E:52:DE:A7:35:BD:D1:18:E9:E2:67:BE:F1:72:0F:71
            X509v3 Authority Key Identifier:
                keyid:65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/seb2Oh5S3qc1vdEY6eJnvvFyD3E.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.237.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         85:18:95:c9:0f:98:f0:21:dd:1e:e8:f3:b8:43:c6:1f:a6:36:
         ee:87:a3:a8:07:23:60:74:16:5b:ee:1c:e8:4e:9f:40:c0:e6:
         38:53:51:c3:46:1f:d6:60:56:a1:b4:83:68:54:1f:8a:4e:5b:
         63:2f:9e:60:1c:7b:4e:4e:d8:40:69:88:1a:eb:4f:1d:09:5c:
         41:05:ec:b8:fd:31:bb:e7:69:e1:2d:87:0f:a4:4c:c3:c0:da:
         fa:4a:8d:0d:9d:51:38:77:bb:af:10:b3:35:5d:a8:c5:26:65:
         1c:4c:c6:ed:3a:2d:5f:9b:2c:71:f4:29:d3:f4:80:bc:ad:0a:
         08:52:d8:d0:45:f4:90:6f:b6:c9:c0:c0:6a:7a:52:f0:d6:47:
         ea:ad:1b:67:82:2b:57:82:05:31:ac:d7:e3:04:3b:57:e8:65:
         dc:f9:a5:bb:55:bf:23:92:42:58:27:6e:a6:c4:af:28:5f:b0:
         81:9c:fc:7a:45:b8:f0:43:6e:1b:8a:98:67:4e:76:3c:ac:04:
         dd:05:b0:76:85:99:0a:ff:f7:f1:a4:53:88:08:2a:e3:36:7c:
         84:69:44:a1:12:74:06:39:dd:03:89:9c:e3:3f:b4:f7:f8:b6:
         32:96:8e:c0:c3:16:51:28:11:fd:88:f7:3e:07:30:ab:39:a3:
         16:49:93:4d
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIBWTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2NURF
NTJFNjRCRTQzRTMyOEFBNjlGM0FCMkQzNDdGODgzM0VDNjM3MB4XDTI0MDgzMTAx
MzE1MloXDTI1MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoQjFFNkY2M0ExRTUyREVB
NzM1QkREMTE4RTlFMjY3QkVGMTcyMEY3MTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAL8ZJQnIzb2miC9BfIKTGOSdsJwNg2aWlyVxi1nlr1o+OclvYp8v
NOel+zAtCM5HWtRcaf/VuTZYpgs265txvZxfbgCLb1ekKkOEkOSZ6jCZ6vl4z0bm
EG04So8xgYGC28jOrOWZDL5ZJIB8m7uYppysvytarwQSTWcoSCpK07DB/F6N5qL1
sAQtxuqU2kWDZxMa/ngvYkSzA3CBpVko7Rw7HUbsImSUS8B1WjU5mSGt24PQAfbX
5GbLm3IiqlJzwo3OuYzUpvfAPzOXsJqUVSEVN/dJQpkCJIB0x2yAZsueWF+BpnDI
HOohols1C4EVe21+ynZur7TiCahp4e/Aq/kCAwEAAaOCAiIwggIeMB0GA1UdDgQW
BBSx5vY6HlLepzW90Rjp4me+8XIPcTAfBgNVHSMEGDAWgBRl3lLmS+Q+Moqmnzqy
00f4gz7GNzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY
oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNjgvWmQ1UzVrdmtQaktLcHA4NnN0TkgtSU0teGpjLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvWmQ1UzVrdmtQaktLcHA4NnN0TkgtSU0t
eGpjLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgboGCCsGAQUFBwELBIGtMIGqMGAGCCsG
AQUFBzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzY4L3NlYjJPaDVTM3FjMXZkRVk2ZUpudnZGeUQzRS5yb2EwRgYI
KwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRw
L2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAXS7QAwDQYJKoZIhvcNAQELBQADggEBAIUYlckPmPAh3R7o87hDxh+mNu6Ho6gH
I2B0FlvuHOhOn0DA5jhTUcNGH9ZgVqG0g2hUH4pOW2MvnmAce05O2EBpiBrrTx0J
XEEF7Lj9MbvnaeEthw+kTMPA2vpKjQ2dUTh3u68QszVdqMUmZRxMxu06LV+bLHH0
KdP0gLytCghS2NBF9JBvtsnAwGp6UvDWR+qtG2eCK1eCBTGs1+MEO1foZdz5pbtV
vyOSQlgnbqbEryhfsIGc/HpFuPBDbhuKmGdOdjysBN0FsHaFmQr/9/GkU4gIKuM2
fIRpRKESdAY53QOJnOM/tPf4tjKWjsDDFlEoEf2I9z4HMKs5oxZJk00=
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:47 2024 by rpki-client on console-ams.rpki-client.org