Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/800/awX_fY3q3oOBMD-feNJdBpvz8Mg.roa
File:                     awX_fY3q3oOBMD-feNJdBpvz8Mg.roa (raw, json)
Hash identifier:          5pr++hGdAprAdZDbEXi37YJPMoozbiAyUnaGmEPl4x0=
Subject key identifier:   6B:05:FF:7D:8D:EA:DE:83:81:30:3F:9F:78:D2:5D:06:9B:F3:F0:C8
Certificate issuer:       /CN=084F88D837A2A2132EA8F6F8F2DB82C1C1E90A8B
Certificate serial:       1A
Authority key identifier: 08:4F:88:D8:37:A2:A2:13:2E:A8:F6:F8:F2:DB:82:C1:C1:E9:0A:8B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CE-I2DeiohMuqPb48tuCwcHpCos.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/awX_fY3q3oOBMD-feNJdBpvz8Mg.roa
Signing time:             Thu 31 Oct 2024 01:32:05 +0000
ROA not before:           Thu 31 Oct 2024 01:32:05 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     18278
IP address blocks:        118.82.48.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/CE-I2DeiohMuqPb48tuCwcHpCos.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/CE-I2DeiohMuqPb48tuCwcHpCos.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CE-I2DeiohMuqPb48tuCwcHpCos.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:58:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26 (0x1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=084F88D837A2A2132EA8F6F8F2DB82C1C1E90A8B
        Validity
            Not Before: Oct 31 01:32:05 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=6B05FF7D8DEADE8381303F9F78D25D069BF3F0C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:32:35:bc:54:c7:2e:b0:0c:74:cb:2f:a3:2e:
                    2e:70:81:e5:cc:f3:cb:b1:56:1d:9f:1f:8c:8a:30:
                    cf:56:51:08:2c:f1:6e:69:38:ea:8d:95:ca:d2:85:
                    03:bb:48:da:97:7b:42:4e:9b:e4:75:2b:25:8c:2b:
                    f8:74:5c:ba:7f:15:9c:5a:b3:30:11:75:d9:a7:94:
                    77:a0:c9:f3:72:86:66:da:d1:4f:38:ed:1f:b3:90:
                    ee:d5:68:db:09:6c:3d:1a:3a:9a:13:eb:f5:03:d0:
                    8f:66:d2:dd:1f:5c:91:25:7d:be:97:a1:3c:3e:d7:
                    be:e8:1b:e2:8f:ec:f9:3b:ef:d4:b7:d7:97:de:b3:
                    87:56:c7:80:2f:b3:67:06:61:9d:23:47:a4:e8:36:
                    1c:5e:ff:df:67:0a:d3:4b:5c:7b:f2:75:65:1d:6b:
                    3e:67:7d:c7:72:68:3e:dd:8c:ca:15:24:a9:48:8b:
                    b3:e3:b1:c6:02:b2:05:b7:ed:5d:8a:b2:25:6c:5d:
                    f4:63:d4:b7:f6:3b:a2:d0:3d:83:c5:52:b9:a0:8f:
                    2c:07:d5:b8:dd:c0:1f:a8:7e:41:16:e1:74:4d:7a:
                    cc:ae:76:c8:88:68:a3:8a:c6:b0:9e:7d:15:c1:06:
                    ab:2d:05:6f:e4:31:d7:d2:99:90:6b:df:8b:31:f2:
                    3e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:05:FF:7D:8D:EA:DE:83:81:30:3F:9F:78:D2:5D:06:9B:F3:F0:C8
            X509v3 Authority Key Identifier:
                keyid:08:4F:88:D8:37:A2:A2:13:2E:A8:F6:F8:F2:DB:82:C1:C1:E9:0A:8B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/CE-I2DeiohMuqPb48tuCwcHpCos.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CE-I2DeiohMuqPb48tuCwcHpCos.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/awX_fY3q3oOBMD-feNJdBpvz8Mg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.82.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         53:f3:0a:52:f8:38:b8:a2:fb:0d:ae:3e:db:78:6d:70:6d:b2:
         8f:7c:35:7d:4a:e2:9e:a7:17:b2:d6:6f:d2:8b:4f:a0:bb:a6:
         d5:fb:02:01:37:16:97:3d:8e:59:83:1f:fa:e0:ab:0a:67:ce:
         08:e2:f7:b9:f8:be:c6:46:ab:09:40:57:87:c4:f4:ce:89:0b:
         bf:c3:51:b2:ea:f3:cd:f6:d4:be:13:ad:9f:97:73:d6:54:3b:
         97:1c:94:43:de:6f:f5:0c:63:a5:1f:c4:1f:07:0a:fa:23:c3:
         6a:50:dd:56:13:83:5e:cb:3e:89:78:f4:29:8b:4b:55:82:93:
         64:26:0a:82:b5:2f:a9:1e:c6:76:ae:4a:ad:62:19:b0:16:8e:
         8a:1e:7a:e9:c9:96:0c:4f:4c:67:43:b6:0a:c7:18:13:b3:44:
         0c:00:b4:4d:63:ec:6b:23:f6:b4:8b:7e:97:7d:f2:26:0b:86:
         6c:d1:eb:8d:d1:ed:a8:fe:12:29:7f:c2:f8:cb:de:2f:4f:40:
         27:98:15:50:65:f2:d1:12:66:be:5e:0b:11:47:83:53:f6:7e:
         f2:fa:0f:0d:46:20:43:68:36:91:39:a1:7d:66:cb:03:83:d5:
         98:0a:ab:bb:55:63:6d:42:64:34:b2:8e:12:d4:1f:74:64:85:
         58:b7:4f:5d
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBGjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwODRG
ODhEODM3QTJBMjEzMkVBOEY2RjhGMkRCODJDMUMxRTkwQThCMB4XDTI0MTAzMTAx
MzIwNVoXDTI1MTAxNTAxMzAwMlowMzExMC8GA1UEAxMoNkIwNUZGN0Q4REVBREU4
MzgxMzAzRjlGNzhEMjVEMDY5QkYzRjBDODCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMQyNbxUxy6wDHTLL6MuLnCB5czzy7FWHZ8fjIowz1ZRCCzxbmk4
6o2VytKFA7tI2pd7Qk6b5HUrJYwr+HRcun8VnFqzMBF12aeUd6DJ83KGZtrRTzjt
H7OQ7tVo2wlsPRo6mhPr9QPQj2bS3R9ckSV9vpehPD7Xvugb4o/s+Tvv1LfXl96z
h1bHgC+zZwZhnSNHpOg2HF7/32cK00tce/J1ZR1rPmd9x3JoPt2MyhUkqUiLs+Ox
xgKyBbftXYqyJWxd9GPUt/Y7otA9g8VSuaCPLAfVuN3AH6h+QRbhdE16zK52yIho
o4rGsJ59FcEGqy0Fb+Qx19KZkGvfizHyPvcCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBRrBf99jereg4EwP5940l0Gm/PwyDAfBgNVHSMEGDAWgBQIT4jYN6KiEy6o9vjy
24LBwekKizAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvODAwL0NFLUkyRGVpb2hNdXFQYjQ4dHVDd2NIcENvcy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0NFLUkyRGVpb2hNdXFQYjQ4dHVDd2NI
cENvcy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC84MDAvYXdYX2ZZM3Ezb09CTUQtZmVOSmRCcHZ6OE1nLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBHZSMDANBgkqhkiG9w0BAQsFAAOCAQEAU/MKUvg4uKL7Da4+23htcG2yj3w1
fUrinqcXstZv0otPoLum1fsCATcWlz2OWYMf+uCrCmfOCOL3ufi+xkarCUBXh8T0
zokLv8NRsurzzfbUvhOtn5dz1lQ7lxyUQ95v9QxjpR/EHwcK+iPDalDdVhODXss+
iXj0KYtLVYKTZCYKgrUvqR7Gdq5KrWIZsBaOih566cmWDE9MZ0O2CscYE7NEDAC0
TWPsayP2tIt+l33yJguGbNHrjdHtqP4SKX/C+MveL09AJ5gVUGXy0RJmvl4LEUeD
U/Z+8voPDUYgQ2g2kTmhfWbLA4PVmAqru1VjbUJkNLKOEtQfdGSFWLdPXQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:21:32 2024 by rpki-client on console-ams.rpki-client.org