Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/731/sRJB8WxmpMF6JgJrwGODBwsUqHo.roa
File:                     sRJB8WxmpMF6JgJrwGODBwsUqHo.roa (raw, json)
Hash identifier:          2vTUqNL918pR++pQeWpURlayaDdcwBzaian5KzFVrJ8=
Subject key identifier:   B1:12:41:F1:6C:66:A4:C1:7A:26:02:6B:C0:63:83:07:0B:14:A8:7A
Certificate issuer:       /CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
Certificate serial:       51
Authority key identifier: 91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/sRJB8WxmpMF6JgJrwGODBwsUqHo.roa
Signing time:             Wed 22 Nov 2023 06:48:06 +0000
ROA not before:           Wed 22 Nov 2023 06:48:06 +0000
ROA not after:            Thu 14 Nov 2024 01:30:03 +0000
asID:                     18260
IP address blocks:        210.141.212.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
        Validity
            Not Before: Nov 22 06:48:06 2023 GMT
            Not After : Nov 14 01:30:03 2024 GMT
        Subject: CN=B11241F16C66A4C17A26026BC06383070B14A87A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7f:85:8e:61:fd:e5:b7:70:0b:74:32:d1:5a:
                    db:4f:e2:d3:71:68:5a:30:d1:11:6f:8a:7f:1d:89:
                    18:8f:8b:32:c8:ec:1b:27:08:8a:f1:b7:e0:97:2c:
                    5d:7c:f6:18:dc:d3:2d:ba:55:79:2d:6b:c3:ed:f8:
                    ed:4a:0a:81:3a:66:b9:bb:fc:ab:5f:e9:1b:cf:8b:
                    ce:b3:79:87:bd:48:56:e2:61:dc:4b:ae:dc:00:24:
                    a7:3a:6a:05:72:08:75:f6:72:ab:2b:6a:13:78:24:
                    90:ea:f5:84:13:f5:c7:73:89:b9:2b:4d:9d:e4:59:
                    ed:52:ab:bd:ea:1d:d8:07:b9:8e:52:7b:8b:e4:19:
                    25:d9:30:c0:e9:8a:f4:d5:56:be:b3:70:b8:39:30:
                    51:61:97:6f:dd:14:79:39:8c:f2:1a:23:b6:c6:80:
                    be:d5:8d:74:6b:be:3a:10:3c:ef:61:7b:33:63:b3:
                    09:ed:cd:c9:cb:90:4a:77:c2:ff:5b:11:55:54:2f:
                    1e:67:b4:a3:a7:35:1c:97:52:b7:a7:af:6b:9b:bd:
                    55:b0:a2:82:8c:36:25:94:35:c5:e1:47:1c:37:09:
                    55:c6:14:25:e9:df:5f:06:ab:8a:d0:83:c4:b6:60:
                    c1:45:38:1d:3c:61:24:af:96:ca:7b:e7:4a:61:68:
                    7a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:12:41:F1:6C:66:A4:C1:7A:26:02:6B:C0:63:83:07:0B:14:A8:7A
            X509v3 Authority Key Identifier:
                keyid:91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/sRJB8WxmpMF6JgJrwGODBwsUqHo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.141.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9b:06:a3:e6:5f:16:9b:72:4e:10:53:c3:24:56:b1:f4:05:33:
         72:70:90:0f:29:1f:4f:0b:bb:10:36:40:f7:72:09:0d:6c:a7:
         1b:06:c1:ad:fe:44:cd:5d:bb:3b:11:5f:63:a4:12:14:db:17:
         c2:6b:53:e5:99:30:23:cd:d5:b5:eb:dc:74:b4:06:f2:91:fd:
         22:93:48:1b:5d:c4:db:c2:53:00:ca:c9:0e:41:ab:1c:33:e0:
         6e:e0:52:d3:e9:4f:11:ba:cf:18:df:93:47:f3:bb:ae:13:e5:
         c5:7e:a0:c9:05:16:77:38:c2:f6:9e:10:23:b7:38:af:fd:69:
         fc:0c:8a:a7:2a:58:44:53:3c:0e:b0:ba:99:a1:f8:ff:cd:89:
         5d:2e:71:75:d5:7e:ba:7b:7a:82:dd:cb:6c:17:b6:cd:62:1f:
         67:13:1f:56:fb:11:fa:ea:dd:ad:b0:df:57:8e:ec:3e:b0:1d:
         43:5b:2b:1d:bc:cd:9a:c9:c0:f8:8e:e9:f2:99:ba:6d:1c:fb:
         5f:4c:05:ef:d7:44:68:3d:14:67:3f:fc:c2:1c:6d:d1:04:82:
         1a:4c:be:ff:a0:eb:23:3c:0e:99:b8:aa:35:41:2c:d9:c5:38:
         ea:18:13:28:cf:b8:fb:e0:09:2b:34:03:72:13:76:b0:4d:b5:
         00:1f:88:25
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBUTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5MUFD
QTQ0Mjc1RUMwNTcyQkM2OTIxNTAyQjI0MUMxNEQ0NEE5QUExMB4XDTIzMTEyMjA2
NDgwNloXDTI0MTExNDAxMzAwM1owMzExMC8GA1UEAxMoQjExMjQxRjE2QzY2QTRD
MTdBMjYwMjZCQzA2MzgzMDcwQjE0QTg3QTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMZ/hY5h/eW3cAt0MtFa20/i03FoWjDREW+Kfx2JGI+LMsjsGycI
ivG34JcsXXz2GNzTLbpVeS1rw+347UoKgTpmubv8q1/pG8+LzrN5h71IVuJh3Euu
3AAkpzpqBXIIdfZyqytqE3gkkOr1hBP1x3OJuStNneRZ7VKrveod2Ae5jlJ7i+QZ
JdkwwOmK9NVWvrNwuDkwUWGXb90UeTmM8hojtsaAvtWNdGu+OhA872F7M2OzCe3N
ycuQSnfC/1sRVVQvHme0o6c1HJdSt6eva5u9VbCigow2JZQ1xeFHHDcJVcYUJenf
XwaritCDxLZgwUU4HTxhJK+WynvnSmFoevUCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBSxEkHxbGakwXomAmvAY4MHCxSoejAfBgNVHSMEGDAWgBSRrKRCdewFcrxpIVAr
JBwU1EqaoTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNzMxL2theWtRblhzQlhLOGFTRlFLeVFjRk5SS21xRS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2theWtRblhzQlhLOGFTRlFLeVFjRk5S
S21xRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC83MzEvc1JKQjhXeG1wTUY2SmdKcndHT0RCd3NVcUhvLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAdKN1DANBgkqhkiG9w0BAQsFAAOCAQEAmwaj5l8Wm3JOEFPDJFax9AUzcnCQ
DykfTwu7EDZA93IJDWynGwbBrf5EzV27OxFfY6QSFNsXwmtT5ZkwI83VtevcdLQG
8pH9IpNIG13E28JTAMrJDkGrHDPgbuBS0+lPEbrPGN+TR/O7rhPlxX6gyQUWdzjC
9p4QI7c4r/1p/AyKpypYRFM8DrC6maH4/82JXS5xddV+unt6gt3LbBe2zWIfZxMf
VvsR+urdrbDfV47sPrAdQ1srHbzNmsnA+I7p8pm6bRz7X0wF79dEaD0UZz/8whxt
0QSCGky+/6DrIzwOmbiqNUEs2cU46hgTKM+4++AJKzQDchN2sE21AB+IJQ==
-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:43 2024 by rpki-client on console-ams.rpki-client.org