Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/731/dD59vpZ_FFBcpwG1QbHLo2wzhss.roa
File:                     dD59vpZ_FFBcpwG1QbHLo2wzhss.roa (raw, json)
Hash identifier:          F1hUdB9C3Jufvkau2ont0RTPy+5UoEXj5JnS++rf4ZY=
Subject key identifier:   74:3E:7D:BE:96:7F:14:50:5C:A7:01:B5:41:B1:CB:A3:6C:33:86:CB
Certificate issuer:       /CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
Certificate serial:       63
Authority key identifier: 91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/dD59vpZ_FFBcpwG1QbHLo2wzhss.roa
Signing time:             Thu 29 Feb 2024 01:30:56 +0000
ROA not before:           Thu 29 Feb 2024 01:30:56 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     18260
IP address blocks:        220.156.192.0/18 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99 (0x63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
        Validity
            Not Before: Feb 29 01:30:56 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=743E7DBE967F14505CA701B541B1CBA36C3386CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7f:6c:c4:bf:7f:36:63:74:0e:af:39:99:92:
                    c3:37:1c:5e:3b:26:89:80:c8:95:a3:90:e9:67:b7:
                    13:c9:fb:75:f7:a0:54:bb:44:4a:c4:bf:66:33:0f:
                    4f:21:ce:48:12:25:2c:09:9f:0e:cc:c4:f9:18:cb:
                    27:64:8d:0f:75:41:e0:fa:8c:d9:16:69:33:1d:b5:
                    44:73:30:38:b6:c2:02:4f:c4:7b:96:13:a5:ae:09:
                    82:34:dd:54:5f:ee:b9:16:1d:35:85:19:ed:9a:ed:
                    e2:65:82:66:7d:f2:a1:19:ac:0e:e9:e7:a9:f2:de:
                    0b:92:fc:20:90:37:9e:05:8b:2a:a4:92:c9:d2:86:
                    09:05:d3:6e:a7:46:15:98:d1:b9:ab:be:43:e0:5a:
                    08:4f:a3:0c:e2:79:8b:8b:91:f3:82:77:9a:1e:5c:
                    6e:b5:6d:c3:8b:86:3c:70:96:c2:c9:e9:a9:65:28:
                    8e:21:29:f8:3a:06:58:c2:c0:ed:d8:46:8d:65:57:
                    06:f7:da:73:cd:7e:f2:04:c3:0a:51:20:9a:63:8a:
                    00:2c:03:b5:a8:2d:49:b3:6b:82:5d:5d:b2:e4:e9:
                    aa:e7:25:9f:65:0e:ee:78:e9:ab:6d:28:6d:dd:7d:
                    af:39:41:6c:40:06:67:7f:ea:50:73:6d:67:c4:0a:
                    b9:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:3E:7D:BE:96:7F:14:50:5C:A7:01:B5:41:B1:CB:A3:6C:33:86:CB
            X509v3 Authority Key Identifier:
                keyid:91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/dD59vpZ_FFBcpwG1QbHLo2wzhss.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.156.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         70:55:2d:99:4a:80:9e:a9:9f:8f:fb:a4:56:03:f8:53:53:7d:
         60:1c:37:c4:a7:67:6a:4a:16:9c:bb:dd:b9:a4:71:5c:ad:95:
         9e:d3:a7:35:a8:c9:39:e9:99:b9:56:88:85:d3:8c:ec:3b:f7:
         71:d8:a1:a0:af:f6:00:d8:09:fe:30:54:49:e8:18:a7:23:2b:
         a0:65:56:63:bb:69:22:11:43:52:1e:a6:0f:79:44:a6:dd:28:
         60:06:83:4a:61:d9:a0:33:6e:01:c4:a7:25:c0:61:c1:2e:15:
         36:8c:cc:87:b1:6d:b3:d3:92:64:1b:c9:74:26:3b:37:8f:08:
         e4:f9:12:10:14:45:96:60:f8:57:0b:d3:66:55:f2:cd:dc:3c:
         c8:3e:df:8b:66:ea:13:e7:3d:8a:39:f6:3a:26:b0:f5:1e:bf:
         87:d6:9d:22:dd:e1:61:c5:93:7c:4b:0c:2a:81:80:5c:69:1f:
         05:2b:e3:60:13:70:06:7c:72:41:29:e2:bc:c1:a1:ac:dd:15:
         41:83:9a:05:6c:f8:8a:47:9a:61:88:c1:3c:a0:4b:21:40:0f:
         c0:11:93:cb:5f:22:7a:3e:da:d1:c8:43:df:4a:3c:a6:1a:6b:
         f4:f4:73:72:f4:15:67:b9:b2:0f:00:8a:83:d8:e5:46:46:49:
         29:9a:4d:81
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBYzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5MUFD
QTQ0Mjc1RUMwNTcyQkM2OTIxNTAyQjI0MUMxNEQ0NEE5QUExMB4XDTI0MDIyOTAx
MzA1NloXDTI1MDIxNDAxMzAwM1owMzExMC8GA1UEAxMoNzQzRTdEQkU5NjdGMTQ1
MDVDQTcwMUI1NDFCMUNCQTM2QzMzODZDQjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALN/bMS/fzZjdA6vOZmSwzccXjsmiYDIlaOQ6We3E8n7dfegVLtE
SsS/ZjMPTyHOSBIlLAmfDszE+RjLJ2SND3VB4PqM2RZpMx21RHMwOLbCAk/Ee5YT
pa4JgjTdVF/uuRYdNYUZ7Zrt4mWCZn3yoRmsDunnqfLeC5L8IJA3ngWLKqSSydKG
CQXTbqdGFZjRuau+Q+BaCE+jDOJ5i4uR84J3mh5cbrVtw4uGPHCWwsnpqWUojiEp
+DoGWMLA7dhGjWVXBvfac81+8gTDClEgmmOKACwDtagtSbNrgl1dsuTpqucln2UO
7njpq20obd19rzlBbEAGZ3/qUHNtZ8QKuZ0CAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBR0Pn2+ln8UUFynAbVBscujbDOGyzAfBgNVHSMEGDAWgBSRrKRCdewFcrxpIVAr
JBwU1EqaoTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNzMxL2theWtRblhzQlhLOGFTRlFLeVFjRk5SS21xRS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2theWtRblhzQlhLOGFTRlFLeVFjRk5S
S21xRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC83MzEvZEQ1OXZwWl9GRkJjcHdHMVFiSExvMnd6aHNzLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBtycwDANBgkqhkiG9w0BAQsFAAOCAQEAcFUtmUqAnqmfj/ukVgP4U1N9YBw3
xKdnakoWnLvduaRxXK2VntOnNajJOemZuVaIhdOM7Dv3cdihoK/2ANgJ/jBUSegY
pyMroGVWY7tpIhFDUh6mD3lEpt0oYAaDSmHZoDNuAcSnJcBhwS4VNozMh7Fts9OS
ZBvJdCY7N48I5PkSEBRFlmD4VwvTZlXyzdw8yD7fi2bqE+c9ijn2Oiaw9R6/h9ad
It3hYcWTfEsMKoGAXGkfBSvjYBNwBnxyQSnivMGhrN0VQYOaBWz4ikeaYYjBPKBL
IUAPwBGTy18iej7a0chD30o8phpr9PRzcvQVZ7myDwCKg9jlRkZJKZpNgQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 15:06:49 2024 by rpki-client on console-ams.rpki-client.org