Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/800/eP785fG8q7BZccpeX7nI4xPMjVk.roa
File:                     eP785fG8q7BZccpeX7nI4xPMjVk.roa (raw, json)
Hash identifier:          EkdS7SjcneEwHaDxbHbMxGo8vlgA8c1yD5GJ2FjH1Uw=
Subject key identifier:   78:FE:FC:E5:F1:BC:AB:B0:59:71:CA:5E:5F:B9:C8:E3:13:CC:8D:59
Certificate issuer:       /CN=084F88D837A2A2132EA8F6F8F2DB82C1C1E90A8B
Certificate serial:       0B
Authority key identifier: 08:4F:88:D8:37:A2:A2:13:2E:A8:F6:F8:F2:DB:82:C1:C1:E9:0A:8B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CE-I2DeiohMuqPb48tuCwcHpCos.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/eP785fG8q7BZccpeX7nI4xPMjVk.roa
Signing time:             Fri 17 Nov 2023 07:33:11 +0000
ROA not before:           Fri 17 Nov 2023 07:33:11 +0000
ROA not after:            Thu 14 Nov 2024 01:30:03 +0000
asID:                     18278
IP address blocks:        219.100.108.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/CE-I2DeiohMuqPb48tuCwcHpCos.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/CE-I2DeiohMuqPb48tuCwcHpCos.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CE-I2DeiohMuqPb48tuCwcHpCos.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11 (0xb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=084F88D837A2A2132EA8F6F8F2DB82C1C1E90A8B
        Validity
            Not Before: Nov 17 07:33:11 2023 GMT
            Not After : Nov 14 01:30:03 2024 GMT
        Subject: CN=78FEFCE5F1BCABB05971CA5E5FB9C8E313CC8D59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:f7:4b:b5:b0:17:ea:be:b7:2f:a0:54:bc:e7:
                    e8:82:8b:3f:26:59:69:9e:aa:78:0b:3e:07:89:db:
                    4e:8a:e2:2a:e4:ef:a5:37:94:ef:e2:7a:6a:8c:49:
                    45:e3:77:eb:b1:e6:91:32:ac:8c:b9:21:38:9f:c3:
                    6a:7f:4f:a7:e8:fa:f2:4c:ac:93:8a:c0:9a:5e:2d:
                    f6:31:c6:a9:fe:84:eb:df:2d:c7:7f:b3:34:02:20:
                    f1:06:55:ed:34:6e:08:5f:98:04:46:26:c2:5c:1b:
                    c9:b4:2f:04:24:72:90:b7:2b:34:d4:91:3b:16:74:
                    0e:51:41:25:0f:66:7b:4c:9c:02:88:47:6e:27:ee:
                    b4:d2:73:17:48:27:79:fd:0b:56:6a:b8:a2:30:31:
                    da:9d:3b:cc:2d:dd:d1:65:fa:ee:95:e3:3c:2d:0a:
                    16:79:2e:19:d3:eb:45:15:89:97:99:bc:09:dd:eb:
                    48:01:bc:0f:7d:c4:34:14:a0:af:8f:7f:9d:35:03:
                    5c:3b:4d:e7:6c:52:d3:ce:2b:13:79:e3:c3:3e:ea:
                    73:31:89:c8:13:80:86:45:96:59:7d:a0:67:74:9d:
                    5f:16:30:ce:3b:ed:4b:bc:6f:8c:a5:c9:51:e0:47:
                    3b:2f:a4:2f:be:45:90:32:c8:05:5e:df:6e:fb:bb:
                    a2:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:FE:FC:E5:F1:BC:AB:B0:59:71:CA:5E:5F:B9:C8:E3:13:CC:8D:59
            X509v3 Authority Key Identifier:
                keyid:08:4F:88:D8:37:A2:A2:13:2E:A8:F6:F8:F2:DB:82:C1:C1:E9:0A:8B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/CE-I2DeiohMuqPb48tuCwcHpCos.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CE-I2DeiohMuqPb48tuCwcHpCos.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/eP785fG8q7BZccpeX7nI4xPMjVk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.100.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:2c:49:6b:d8:01:6a:72:0e:7b:4c:7f:cc:1c:ef:78:65:2a:
         50:99:9d:1f:3b:48:cd:45:04:f3:09:d7:59:59:5d:73:2a:cd:
         f2:d6:5b:7a:7a:0c:8c:cc:7a:49:3e:53:42:ed:f7:f3:2b:f9:
         e1:51:98:45:68:13:17:9c:49:66:69:48:4c:f4:bb:1f:4c:3d:
         e9:1e:c6:87:77:5b:c0:79:23:c9:4c:c3:76:67:0f:14:a2:b9:
         60:81:d5:1b:99:00:48:b0:69:ce:c7:d5:20:8c:ed:69:ec:b0:
         36:42:76:8e:fb:04:1f:8c:9c:62:5a:ec:43:ce:00:50:7d:29:
         66:b2:13:2a:dc:6f:22:26:db:17:80:86:56:ae:62:7f:fe:ae:
         f9:5c:d8:27:9e:ba:56:f7:13:59:1c:7b:ee:0d:b8:37:e8:af:
         97:c5:26:eb:89:86:ef:fb:a2:ce:d9:f1:14:60:15:76:b9:47:
         1f:99:43:0e:13:5f:5b:0b:5d:f0:7c:f8:97:4f:c4:57:a8:3e:
         84:9b:a9:3d:c4:9a:53:a4:c9:1a:58:47:8a:2e:e4:63:f1:09:
         12:be:2c:33:ca:65:de:39:56:53:b1:26:0a:7c:d2:2f:14:7d:
         7c:51:31:14:91:7b:9b:e4:bd:bb:20:89:6d:d5:39:20:45:26:
         cf:63:de:91
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBCzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwODRG
ODhEODM3QTJBMjEzMkVBOEY2RjhGMkRCODJDMUMxRTkwQThCMB4XDTIzMTExNzA3
MzMxMVoXDTI0MTExNDAxMzAwM1owMzExMC8GA1UEAxMoNzhGRUZDRTVGMUJDQUJC
MDU5NzFDQTVFNUZCOUM4RTMxM0NDOEQ1OTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAPn3S7WwF+q+ty+gVLzn6IKLPyZZaZ6qeAs+B4nbToriKuTvpTeU
7+J6aoxJReN367HmkTKsjLkhOJ/Dan9Pp+j68kysk4rAml4t9jHGqf6E698tx3+z
NAIg8QZV7TRuCF+YBEYmwlwbybQvBCRykLcrNNSROxZ0DlFBJQ9me0ycAohHbifu
tNJzF0gnef0LVmq4ojAx2p07zC3d0WX67pXjPC0KFnkuGdPrRRWJl5m8Cd3rSAG8
D33ENBSgr49/nTUDXDtN52xS084rE3njwz7qczGJyBOAhkWWWX2gZ3SdXxYwzjvt
S7xvjKXJUeBHOy+kL75FkDLIBV7fbvu7ojECAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBR4/vzl8byrsFlxyl5fucjjE8yNWTAfBgNVHSMEGDAWgBQIT4jYN6KiEy6o9vjy
24LBwekKizAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvODAwL0NFLUkyRGVpb2hNdXFQYjQ4dHVDd2NIcENvcy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0NFLUkyRGVpb2hNdXFQYjQ4dHVDd2NI
cENvcy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC84MDAvZVA3ODVmRzhxN0JaY2NwZVg3bkk0eFBNalZrLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAttkbDANBgkqhkiG9w0BAQsFAAOCAQEATixJa9gBanIOe0x/zBzveGUqUJmd
HztIzUUE8wnXWVldcyrN8tZbenoMjMx6ST5TQu338yv54VGYRWgTF5xJZmlITPS7
H0w96R7Gh3dbwHkjyUzDdmcPFKK5YIHVG5kASLBpzsfVIIztaeywNkJ2jvsEH4yc
YlrsQ84AUH0pZrITKtxvIibbF4CGVq5if/6u+VzYJ566VvcTWRx77g24N+ivl8Um
64mG7/uiztnxFGAVdrlHH5lDDhNfWwtd8Hz4l0/EV6g+hJupPcSaU6TJGlhHii7k
Y/EJEr4sM8pl3jlWU7EmCnzSLxR9fFExFJF7m+S9uyCJbdU5IEUmz2PekQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 15:06:49 2024 by rpki-client on console-ams.rpki-client.org