Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/800/nn6Hi--g9_BNLBqaGyH7nASMeGc.roa
File:                     nn6Hi--g9_BNLBqaGyH7nASMeGc.roa (raw, json)
Hash identifier:          ZqJhngaFyArJsqLrVb4nP6Kq+u2SK5i9txg8lOczXfo=
Subject key identifier:   9E:7E:87:8B:EF:A0:F7:F0:4D:2C:1A:9A:1B:21:FB:9C:04:8C:78:67
Certificate issuer:       /CN=084F88D837A2A2132EA8F6F8F2DB82C1C1E90A8B
Certificate serial:       08
Authority key identifier: 08:4F:88:D8:37:A2:A2:13:2E:A8:F6:F8:F2:DB:82:C1:C1:E9:0A:8B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CE-I2DeiohMuqPb48tuCwcHpCos.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/nn6Hi--g9_BNLBqaGyH7nASMeGc.roa
Signing time:             Fri 17 Nov 2023 07:29:15 +0000
ROA not before:           Fri 17 Nov 2023 07:29:15 +0000
ROA not after:            Thu 14 Nov 2024 01:30:03 +0000
asID:                     18278
IP address blocks:        202.151.96.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/CE-I2DeiohMuqPb48tuCwcHpCos.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/CE-I2DeiohMuqPb48tuCwcHpCos.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CE-I2DeiohMuqPb48tuCwcHpCos.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=084F88D837A2A2132EA8F6F8F2DB82C1C1E90A8B
        Validity
            Not Before: Nov 17 07:29:15 2023 GMT
            Not After : Nov 14 01:30:03 2024 GMT
        Subject: CN=9E7E878BEFA0F7F04D2C1A9A1B21FB9C048C7867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:07:f8:da:9a:9c:de:fd:60:1e:40:03:ad:1b:
                    6d:ba:fa:02:b4:91:e3:32:8d:ff:26:4c:2c:0d:b1:
                    40:71:f3:e8:c6:00:fb:fb:ba:36:5e:f2:55:10:88:
                    f3:61:62:1a:60:91:c7:34:22:97:09:46:f6:59:3d:
                    3e:ef:b9:65:e3:90:3c:bd:9b:54:39:7d:60:b2:6e:
                    13:b9:7b:14:1d:a2:3d:75:dd:18:61:ea:09:64:12:
                    43:93:6a:97:01:85:bb:71:8e:3e:32:a1:cb:5b:25:
                    d0:db:a5:bf:9f:5d:4f:e1:cb:6c:e3:a6:e2:ee:80:
                    0a:88:ae:ad:41:54:7c:5c:8b:df:da:5f:e8:d9:0a:
                    15:9a:b5:f0:d8:99:b3:b4:f2:a1:6e:81:93:2d:61:
                    ec:2f:85:1c:09:3f:e2:6e:75:a3:f0:a7:b2:93:19:
                    2f:f0:3f:ba:66:4f:65:06:4a:bf:f3:68:91:0f:b3:
                    b0:ff:43:b0:6a:37:da:5c:23:1a:12:1a:09:49:58:
                    be:1e:90:4f:8a:5b:51:9f:16:cf:6d:9a:fb:80:89:
                    21:65:e2:6d:e8:79:87:da:35:69:e7:38:88:b2:41:
                    a9:1d:1e:6c:34:6b:42:9e:a1:6f:4f:b4:90:86:56:
                    fe:45:82:be:fe:1d:66:5a:5e:81:59:81:e5:3b:f3:
                    28:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:7E:87:8B:EF:A0:F7:F0:4D:2C:1A:9A:1B:21:FB:9C:04:8C:78:67
            X509v3 Authority Key Identifier:
                keyid:08:4F:88:D8:37:A2:A2:13:2E:A8:F6:F8:F2:DB:82:C1:C1:E9:0A:8B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/CE-I2DeiohMuqPb48tuCwcHpCos.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CE-I2DeiohMuqPb48tuCwcHpCos.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/nn6Hi--g9_BNLBqaGyH7nASMeGc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.151.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a7:e6:5d:a0:d9:d0:54:f9:00:82:fd:46:77:47:0e:81:79:37:
         de:ad:ba:40:c2:70:44:89:f1:8a:f0:09:88:91:66:17:69:ff:
         52:89:90:38:08:14:95:b3:90:2c:78:f9:a6:d4:16:9c:22:35:
         b3:88:70:60:2d:45:91:f9:65:b9:a4:49:25:fa:f8:37:63:66:
         02:fe:e2:48:c4:11:ec:ed:8c:9c:19:a1:4f:b3:c2:eb:65:b4:
         69:de:d1:c6:07:4d:93:02:e7:f8:08:96:05:ef:ee:8f:4d:39:
         16:8c:4d:35:c7:4f:2f:84:d4:8c:1b:d8:d3:ec:98:34:58:17:
         7e:a4:e6:30:f1:72:9a:dc:d4:88:94:e8:7a:74:77:93:14:a0:
         94:80:dc:87:5f:ba:d3:8f:1d:f8:17:ea:7e:c0:6e:bf:7b:8d:
         a8:45:9f:89:ea:8e:58:87:8f:55:8d:c4:58:bc:9d:aa:8a:34:
         db:44:a2:b2:3b:c8:5d:e2:29:ee:20:75:ed:d8:9c:e9:65:c0:
         80:b8:13:db:07:75:bf:a8:77:da:f4:33:ae:05:84:82:73:5d:
         86:16:c3:e5:7d:5f:ab:80:b4:ab:04:07:bd:f2:5d:94:55:0a:
         1a:7d:43:6c:bd:4d:24:ff:9a:7e:ce:7b:78:8b:34:e4:9f:f6:
         b6:dd:90:a4
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBCDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwODRG
ODhEODM3QTJBMjEzMkVBOEY2RjhGMkRCODJDMUMxRTkwQThCMB4XDTIzMTExNzA3
MjkxNVoXDTI0MTExNDAxMzAwM1owMzExMC8GA1UEAxMoOUU3RTg3OEJFRkEwRjdG
MDREMkMxQTlBMUIyMUZCOUMwNDhDNzg2NzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAK8H+NqanN79YB5AA60bbbr6ArSR4zKN/yZMLA2xQHHz6MYA+/u6
Nl7yVRCI82FiGmCRxzQilwlG9lk9Pu+5ZeOQPL2bVDl9YLJuE7l7FB2iPXXdGGHq
CWQSQ5NqlwGFu3GOPjKhy1sl0Nulv59dT+HLbOOm4u6ACoiurUFUfFyL39pf6NkK
FZq18NiZs7TyoW6Bky1h7C+FHAk/4m51o/CnspMZL/A/umZPZQZKv/NokQ+zsP9D
sGo32lwjGhIaCUlYvh6QT4pbUZ8Wz22a+4CJIWXibeh5h9o1aec4iLJBqR0ebDRr
Qp6hb0+0kIZW/kWCvv4dZlpegVmB5TvzKD0CAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBSefoeL76D38E0sGpobIfucBIx4ZzAfBgNVHSMEGDAWgBQIT4jYN6KiEy6o9vjy
24LBwekKizAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvODAwL0NFLUkyRGVpb2hNdXFQYjQ4dHVDd2NIcENvcy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0NFLUkyRGVpb2hNdXFQYjQ4dHVDd2NI
cENvcy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC84MDAvbm42SGktLWc5X0JOTEJxYUd5SDduQVNNZUdjLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBcqXYDANBgkqhkiG9w0BAQsFAAOCAQEAp+ZdoNnQVPkAgv1Gd0cOgXk33q26
QMJwRInxivAJiJFmF2n/UomQOAgUlbOQLHj5ptQWnCI1s4hwYC1FkflluaRJJfr4
N2NmAv7iSMQR7O2MnBmhT7PC62W0ad7RxgdNkwLn+AiWBe/uj005FoxNNcdPL4TU
jBvY0+yYNFgXfqTmMPFymtzUiJToenR3kxSglIDch1+6048d+BfqfsBuv3uNqEWf
ieqOWIePVY3EWLydqoo020SisjvIXeIp7iB17dic6WXAgLgT2wd1v6h32vQzrgWE
gnNdhhbD5X1fq4C0qwQHvfJdlFUKGn1DbL1NJP+afs57eIs05J/2tt2QpA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 14:56:24 2024 by rpki-client on console-fra.rpki-client.org