Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/783/T98okllES1AdcZ9iCvrO50pVUlw.roa
File:                     T98okllES1AdcZ9iCvrO50pVUlw.roa (raw, json)
Hash identifier:          /tqsGlPzPI31L30Qtx/3p6DC0WSLqOyOc3VvCRX74EM=
Subject key identifier:   4F:DF:28:92:59:44:4B:50:1D:71:9F:62:0A:FA:CE:E7:4A:55:52:5C
Certificate issuer:       /CN=CB8300B20659BB951060F60B1F4BC6091AF27639
Certificate serial:       37
Authority key identifier: CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/T98okllES1AdcZ9iCvrO50pVUlw.roa
Signing time:             Fri 15 Sep 2023 06:48:46 +0000
ROA not before:           Fri 15 Sep 2023 06:48:46 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     18144
IP address blocks:        219.105.48.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 16 Jun 2024 02:07:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55 (0x37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB8300B20659BB951060F60B1F4BC6091AF27639
        Validity
            Not Before: Sep 15 06:48:46 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=4FDF289259444B501D719F620AFACEE74A55525C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:65:a7:57:16:c8:a7:73:16:a5:b6:59:d2:70:
                    3c:d5:43:18:2a:71:06:67:f7:fd:1c:0e:20:fa:d2:
                    1c:69:f1:7a:8f:99:f4:d5:69:b9:3a:32:de:f7:07:
                    1d:da:83:8f:a1:e3:79:eb:b8:2d:d1:9f:95:d6:4e:
                    60:72:3d:36:98:68:12:3d:eb:58:e1:40:0d:f7:d0:
                    0b:fa:0d:2b:95:50:d6:13:c9:97:bb:a1:d6:8f:ee:
                    9d:6b:e0:96:6b:94:2b:33:de:94:b5:4a:e4:e7:3c:
                    79:73:b2:2b:0b:7d:43:45:29:1c:ab:02:5d:f0:1e:
                    81:ff:d3:dd:2b:93:8f:be:70:1a:38:7a:38:0e:a3:
                    28:4d:78:4d:82:93:7a:7d:a5:26:9f:95:3e:05:fc:
                    f5:50:6a:0e:6a:02:d9:77:ed:3e:bc:26:6f:04:43:
                    e6:f5:1a:53:a2:50:55:e3:e8:d9:87:57:46:4e:d2:
                    fb:30:50:99:f5:a0:6a:53:5e:8b:db:74:64:36:98:
                    d5:19:85:16:ba:5f:9a:54:a8:a8:ae:73:55:aa:f0:
                    12:75:38:1d:96:3d:40:0a:af:b0:73:d6:7e:39:fc:
                    1a:99:98:a8:07:d1:50:cd:41:8a:a2:56:4c:fc:9d:
                    96:ea:30:d4:49:84:a2:bc:44:6e:aa:a4:55:d5:a4:
                    e9:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:DF:28:92:59:44:4B:50:1D:71:9F:62:0A:FA:CE:E7:4A:55:52:5C
            X509v3 Authority Key Identifier:
                keyid:CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/T98okllES1AdcZ9iCvrO50pVUlw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.105.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         42:eb:63:c4:7f:0e:c9:b5:18:7d:1d:d5:18:b0:a7:b6:db:0e:
         f9:91:4d:59:d5:10:24:b9:5e:a9:68:a0:da:b2:9c:5e:79:4a:
         cf:1e:59:f1:72:e3:93:7b:c7:d5:a9:e0:1b:b0:c6:b0:90:2e:
         08:40:1c:f4:d1:24:cf:55:bd:ec:9b:e9:6f:34:47:2f:3a:b0:
         22:2e:bb:07:a7:b3:7b:cb:a0:d8:83:3d:4e:79:7a:8c:4b:32:
         c1:bc:98:37:33:92:89:c7:85:bb:0e:e7:16:d9:f5:8a:8c:d6:
         94:13:74:42:29:47:e2:78:e8:b1:07:a1:97:7c:9e:d4:32:cc:
         15:a2:48:bc:93:2c:a6:48:db:f5:0c:43:58:da:fb:6c:ed:08:
         27:51:8d:74:49:2f:a8:a3:9c:e3:01:12:40:8c:68:20:bc:06:
         bc:ed:7e:7f:96:15:a2:8e:cc:f9:90:2e:c2:f0:ad:6c:69:a6:
         54:c4:d5:13:1a:ee:b0:eb:da:8e:f8:4b:40:a4:73:b3:b0:50:
         bb:27:9e:47:b6:87:eb:39:59:cd:01:32:8c:ed:3c:8d:bb:22:
         a6:eb:91:d9:cc:1e:c2:bf:50:df:f8:7d:36:67:5a:32:a0:ef:
         5e:eb:d3:f3:fe:8f:b4:09:5f:03:f5:d0:60:c7:ff:76:9c:a0:
         6c:29:9a:4e
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBNzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDQjgz
MDBCMjA2NTlCQjk1MTA2MEY2MEIxRjRCQzYwOTFBRjI3NjM5MB4XDTIzMDkxNTA2
NDg0NloXDTI0MDkxNDAxMzAwM1owMzExMC8GA1UEAxMoNEZERjI4OTI1OTQ0NEI1
MDFENzE5RjYyMEFGQUNFRTc0QTU1NTI1QzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALtlp1cWyKdzFqW2WdJwPNVDGCpxBmf3/RwOIPrSHGnxeo+Z9NVp
uToy3vcHHdqDj6Hjeeu4LdGfldZOYHI9NphoEj3rWOFADffQC/oNK5VQ1hPJl7uh
1o/unWvglmuUKzPelLVK5Oc8eXOyKwt9Q0UpHKsCXfAegf/T3SuTj75wGjh6OA6j
KE14TYKTen2lJp+VPgX89VBqDmoC2XftPrwmbwRD5vUaU6JQVePo2YdXRk7S+zBQ
mfWgalNei9t0ZDaY1RmFFrpfmlSoqK5zVarwEnU4HZY9QAqvsHPWfjn8GpmYqAfR
UM1BiqJWTPydluow1EmEorxEbqqkVdWk6aUCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBRP3yiSWURLUB1xn2IK+s7nSlVSXDAfBgNVHSMEGDAWgBTLgwCyBlm7lRBg9gsf
S8YJGvJ2OTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNzgzL3k0TUFzZ1padTVVUVlQWUxIMHZHQ1JyeWRqay5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3k0TUFzZ1padTVVUVlQWUxIMHZHQ1Jy
eWRqay5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC83ODMvVDk4b2tsbEVTMUFkY1o5aUN2ck81MHBWVWx3LnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBNtpMDANBgkqhkiG9w0BAQsFAAOCAQEAQutjxH8OybUYfR3VGLCnttsO+ZFN
WdUQJLleqWig2rKcXnlKzx5Z8XLjk3vH1angG7DGsJAuCEAc9NEkz1W97JvpbzRH
LzqwIi67B6eze8ug2IM9Tnl6jEsywbyYNzOSiceFuw7nFtn1iozWlBN0QilH4njo
sQehl3ye1DLMFaJIvJMspkjb9QxDWNr7bO0IJ1GNdEkvqKOc4wESQIxoILwGvO1+
f5YVoo7M+ZAuwvCtbGmmVMTVExrusOvajvhLQKRzs7BQuyeeR7aH6zlZzQEyjO08
jbsipuuR2cwewr9Q3/h9NmdaMqDvXuvT8/6PtAlfA/XQYMf/dpygbCmaTg==
-----END CERTIFICATE-----
Generated at Mon Jun 10 09:56:21 2024 by rpki-client on console-ams.rpki-client.org