Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/802/vWmT8DpXJsCZhsS5lg-XCzFpYT0.roa
File:                     vWmT8DpXJsCZhsS5lg-XCzFpYT0.roa (raw, json)
Hash identifier:          O2x7kQkyD6CRBv4pR2pVz9IjSPN6aE2nAb4binw5XNM=
Subject key identifier:   BD:69:93:F0:3A:57:26:C0:99:86:C4:B9:96:0F:97:0B:31:69:61:3D
Certificate issuer:       /CN=2362B2E3E478DCBAD6F42A4511290CFC373C24C6
Certificate serial:       06
Authority key identifier: 23:62:B2:E3:E4:78:DC:BA:D6:F4:2A:45:11:29:0C:FC:37:3C:24:C6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/I2Ky4-R43LrW9CpFESkM_Dc8JMY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/vWmT8DpXJsCZhsS5lg-XCzFpYT0.roa
Signing time:             Wed 23 Aug 2023 01:42:25 +0000
ROA not before:           Wed 23 Aug 2023 01:42:25 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     23791
IP address blocks:        118.102.48.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/I2Ky4-R43LrW9CpFESkM_Dc8JMY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/I2Ky4-R43LrW9CpFESkM_Dc8JMY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/I2Ky4-R43LrW9CpFESkM_Dc8JMY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 16 Jun 2024 02:07:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2362B2E3E478DCBAD6F42A4511290CFC373C24C6
        Validity
            Not Before: Aug 23 01:42:25 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=BD6993F03A5726C09986C4B9960F970B3169613D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:22:b3:49:bd:b5:a3:f1:0f:7a:6f:d0:17:b2:
                    d7:26:cb:53:3f:6a:e9:bb:1f:e5:d0:97:e8:b4:75:
                    e0:83:68:71:c6:bf:d5:36:3f:a3:d2:8e:e4:38:d5:
                    d8:aa:7a:72:04:33:c2:ba:72:b5:5a:0f:9b:d4:36:
                    ac:f3:05:79:e0:da:e7:9b:77:6e:6b:29:c0:4c:c8:
                    9b:17:cf:13:ee:52:c1:6f:e1:c7:71:47:35:63:e0:
                    3a:37:c9:30:e6:13:21:e2:c7:62:cc:6c:29:f4:0c:
                    45:15:10:6a:63:56:e0:5e:a6:ba:f7:f8:18:ce:a8:
                    bc:88:79:55:19:f2:bb:70:29:8d:5e:a1:eb:37:68:
                    cc:75:3e:23:9b:5d:cb:43:f0:d0:6a:07:0b:ed:d7:
                    c2:e3:ac:05:ed:e6:c9:46:74:a6:a6:f9:e8:21:1f:
                    2c:a4:6a:17:1a:e6:78:e3:44:0f:38:8b:51:ac:37:
                    d3:b6:88:c4:47:1f:70:71:0c:c4:b6:bd:75:26:f4:
                    9d:99:c5:37:fd:57:39:d1:3e:ff:11:ce:26:4c:2e:
                    28:a5:dc:ab:1b:1f:2a:24:cf:21:60:d0:c8:40:e4:
                    c3:93:b2:f8:9e:84:1e:ba:1e:30:3a:28:a1:91:68:
                    8a:21:e0:43:63:3d:d7:0a:a6:1b:fd:23:89:41:f6:
                    65:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:69:93:F0:3A:57:26:C0:99:86:C4:B9:96:0F:97:0B:31:69:61:3D
            X509v3 Authority Key Identifier:
                keyid:23:62:B2:E3:E4:78:DC:BA:D6:F4:2A:45:11:29:0C:FC:37:3C:24:C6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/I2Ky4-R43LrW9CpFESkM_Dc8JMY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/I2Ky4-R43LrW9CpFESkM_Dc8JMY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/vWmT8DpXJsCZhsS5lg-XCzFpYT0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.102.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6d:0b:71:b6:2c:09:b0:44:0d:8f:be:9c:6c:6e:dc:33:de:38:
         4a:ae:c6:76:07:47:1c:3e:55:a8:5c:8e:d8:79:8d:76:32:df:
         ce:5e:ba:ea:d5:9c:0e:1e:f1:0b:71:cb:14:dd:63:e4:6d:26:
         60:54:a1:44:2b:09:ba:6e:cb:94:08:3c:b0:36:00:6c:80:1e:
         e4:ed:19:98:f1:9a:7d:f0:1d:00:37:83:43:70:03:26:08:c8:
         13:fa:da:9f:3b:31:d1:03:93:fe:26:2d:ea:d2:95:21:02:e3:
         7d:e0:3e:75:04:0e:9e:36:8c:bd:a0:d5:a2:47:21:1c:86:fd:
         89:0e:72:a3:1a:d8:1a:00:de:d5:12:39:26:4d:82:57:da:34:
         eb:bd:24:14:69:3c:81:18:3f:0d:7e:3c:45:50:f4:f2:a1:25:
         de:9d:83:aa:f4:38:84:d2:36:92:96:ac:05:8d:40:3b:34:45:
         7d:73:1d:e2:39:79:53:5a:f0:73:db:70:6f:81:12:47:18:d6:
         fb:70:c4:d2:21:be:a5:e2:54:69:b2:59:de:11:38:7b:65:20:
         e3:1e:69:9e:b6:e7:56:fb:a6:0d:f7:24:73:df:97:eb:32:c1:
         1d:d1:c6:a6:c7:85:2a:cc:c1:e7:d7:4e:fc:43:9f:7c:9f:15:
         c0:5f:e4:51
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBBjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyMzYy
QjJFM0U0NzhEQ0JBRDZGNDJBNDUxMTI5MENGQzM3M0MyNEM2MB4XDTIzMDgyMzAx
NDIyNVoXDTI0MDgxNDAxMzAwMlowMzExMC8GA1UEAxMoQkQ2OTkzRjAzQTU3MjZD
MDk5ODZDNEI5OTYwRjk3MEIzMTY5NjEzRDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAL0is0m9taPxD3pv0Bey1ybLUz9q6bsf5dCX6LR14INocca/1TY/
o9KO5DjV2Kp6cgQzwrpytVoPm9Q2rPMFeeDa55t3bmspwEzImxfPE+5SwW/hx3FH
NWPgOjfJMOYTIeLHYsxsKfQMRRUQamNW4F6muvf4GM6ovIh5VRnyu3ApjV6h6zdo
zHU+I5tdy0Pw0GoHC+3XwuOsBe3myUZ0pqb56CEfLKRqFxrmeONEDziLUaw307aI
xEcfcHEMxLa9dSb0nZnFN/1XOdE+/xHOJkwuKKXcqxsfKiTPIWDQyEDkw5Oy+J6E
HroeMDoooZFoiiHgQ2M91wqmG/0jiUH2ZYkCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBS9aZPwOlcmwJmGxLmWD5cLMWlhPTAfBgNVHSMEGDAWgBQjYrLj5Hjcutb0KkUR
KQz8NzwkxjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvODAyL0kyS3k0LVI0M0xyVzlDcEZFU2tNX0RjOEpNWS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0kyS3k0LVI0M0xyVzlDcEZFU2tNX0Rj
OEpNWS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC84MDIvdldtVDhEcFhKc0NaaHNTNWxnLVhDekZwWVQwLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBHZmMDANBgkqhkiG9w0BAQsFAAOCAQEAbQtxtiwJsEQNj76cbG7cM944Sq7G
dgdHHD5VqFyO2HmNdjLfzl666tWcDh7xC3HLFN1j5G0mYFShRCsJum7LlAg8sDYA
bIAe5O0ZmPGaffAdADeDQ3ADJgjIE/ranzsx0QOT/iYt6tKVIQLjfeA+dQQOnjaM
vaDVokchHIb9iQ5yoxrYGgDe1RI5Jk2CV9o0670kFGk8gRg/DX48RVD08qEl3p2D
qvQ4hNI2kpasBY1AOzRFfXMd4jl5U1rwc9twb4ESRxjW+3DE0iG+peJUabJZ3hE4
e2Ug4x5pnrbnVvumDfckc9+X6zLBHdHGpseFKszB59dO/EOffJ8VwF/kUQ==
-----END CERTIFICATE-----
Generated at Mon Jun 10 09:56:22 2024 by rpki-client on console-ams.rpki-client.org