Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/807/BSY3SGjgu3OYDdy3DWiZ4jLWM-A.roa
File:                     BSY3SGjgu3OYDdy3DWiZ4jLWM-A.roa (raw, json)
Hash identifier:          /u4UzjdwEFU0KmfI1JqiRUk6cxphzWmTpln0FTs4Nz0=
Subject key identifier:   05:26:37:48:68:E0:BB:73:98:0D:DC:B7:0D:68:99:E2:32:D6:33:E0
Certificate issuer:       /CN=849BB8D5AE11496E74A595AB3D9F8F401C4B58CC
Certificate serial:       0E
Authority key identifier: 84:9B:B8:D5:AE:11:49:6E:74:A5:95:AB:3D:9F:8F:40:1C:4B:58:CC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hJu41a4RSW50pZWrPZ-PQBxLWMw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/BSY3SGjgu3OYDdy3DWiZ4jLWM-A.roa
Signing time:             Wed 08 May 2024 08:09:06 +0000
ROA not before:           Wed 08 May 2024 08:09:06 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     18283
IP address blocks:        218.223.224.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/hJu41a4RSW50pZWrPZ-PQBxLWMw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/hJu41a4RSW50pZWrPZ-PQBxLWMw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hJu41a4RSW50pZWrPZ-PQBxLWMw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=849BB8D5AE11496E74A595AB3D9F8F401C4B58CC
        Validity
            Not Before: May  8 08:09:06 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=0526374868E0BB73980DDCB70D6899E232D633E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:60:02:6f:ef:3a:17:b2:ab:8e:ea:1e:ef:5d:
                    f7:f3:93:1d:c0:10:9f:56:50:5a:59:49:e5:fe:3a:
                    9f:76:ce:2b:0e:0c:00:72:68:fc:11:38:28:fa:fd:
                    0c:3d:43:dc:f7:8a:b6:aa:7f:99:d7:88:e4:92:87:
                    38:99:19:b7:6d:34:ad:6b:3c:39:92:2a:99:14:b0:
                    b9:d2:3d:aa:6d:a5:f1:d9:38:dc:05:6d:6f:4b:a4:
                    cb:fd:05:4f:aa:a8:5c:23:6e:4c:9a:03:4e:98:95:
                    f6:85:88:1a:b0:95:4b:80:48:4e:1f:9f:bf:de:43:
                    13:c3:8a:0c:ae:25:d4:74:87:c8:30:18:22:f9:74:
                    b8:24:0f:c1:88:23:da:b9:1d:68:2a:e9:77:59:1b:
                    29:6f:12:f1:85:f1:2f:79:f2:ef:ac:85:23:ed:85:
                    57:c3:36:9c:b0:04:a9:e8:25:7d:2e:a5:dc:b0:87:
                    b9:9d:65:d8:0f:56:8b:4c:d7:ed:5e:0a:e5:43:a3:
                    68:55:db:89:e7:8c:26:7c:e1:97:6e:b9:36:7f:38:
                    c4:d0:9d:dd:58:38:78:4c:50:29:83:33:0d:a7:60:
                    a7:90:90:0c:fb:55:ad:e0:1c:cc:86:a7:fe:f1:12:
                    4f:32:52:ec:fa:a6:34:de:68:77:92:f3:ef:86:fa:
                    be:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:26:37:48:68:E0:BB:73:98:0D:DC:B7:0D:68:99:E2:32:D6:33:E0
            X509v3 Authority Key Identifier:
                keyid:84:9B:B8:D5:AE:11:49:6E:74:A5:95:AB:3D:9F:8F:40:1C:4B:58:CC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/hJu41a4RSW50pZWrPZ-PQBxLWMw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hJu41a4RSW50pZWrPZ-PQBxLWMw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/807/BSY3SGjgu3OYDdy3DWiZ4jLWM-A.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.223.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:36:25:58:44:fc:b1:c5:23:0e:6d:62:6c:6e:b8:ec:b3:df:
         f9:9f:d7:46:71:12:cc:59:3a:ef:b5:5d:19:56:ba:e5:9a:2f:
         74:ff:d6:86:af:f9:8b:f6:34:23:59:5a:9f:1d:36:72:36:45:
         cc:3f:79:bc:ad:ae:d9:79:62:40:56:ef:79:8e:88:18:69:21:
         2e:27:49:8c:fa:18:0f:5d:69:1e:d8:fc:bf:0e:9a:ee:a8:81:
         e3:7b:2f:54:a0:c9:cc:ac:22:f5:9d:3e:c4:fe:ca:07:02:f9:
         15:fd:62:b4:d4:09:4c:7b:ad:cb:85:a0:49:6a:22:7b:2f:3e:
         85:01:8b:ce:e7:8c:44:de:15:e1:53:e4:57:2d:1f:ec:a2:41:
         a5:fc:d4:45:31:6e:86:32:9b:f0:25:fa:4c:55:ce:19:2e:61:
         59:94:fc:43:3e:d2:cb:7e:c3:77:be:fc:09:db:50:74:ce:72:
         3d:89:d4:48:fd:7d:0a:fe:8d:57:b9:df:1f:7d:fd:4b:42:b2:
         e0:33:1c:53:5c:0c:5d:fc:5f:d8:e6:23:8e:b1:88:9d:7a:a4:
         26:37:df:d1:6a:68:e4:eb:86:e5:db:5e:53:6b:25:40:64:ee:
         cb:d6:c9:03:15:88:93:30:53:90:53:5f:3e:5f:48:f5:78:e8:
         62:59:4e:dd
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBDjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4NDlC
QjhENUFFMTE0OTZFNzRBNTk1QUIzRDlGOEY0MDFDNEI1OENDMB4XDTI0MDUwODA4
MDkwNloXDTI1MDQxNTAxMzAwMlowMzExMC8GA1UEAxMoMDUyNjM3NDg2OEUwQkI3
Mzk4MEREQ0I3MEQ2ODk5RTIzMkQ2MzNFMDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALdgAm/vOheyq47qHu9d9/OTHcAQn1ZQWllJ5f46n3bOKw4MAHJo
/BE4KPr9DD1D3PeKtqp/mdeI5JKHOJkZt200rWs8OZIqmRSwudI9qm2l8dk43AVt
b0uky/0FT6qoXCNuTJoDTpiV9oWIGrCVS4BITh+fv95DE8OKDK4l1HSHyDAYIvl0
uCQPwYgj2rkdaCrpd1kbKW8S8YXxL3ny76yFI+2FV8M2nLAEqeglfS6l3LCHuZ1l
2A9Wi0zX7V4K5UOjaFXbieeMJnzhl265Nn84xNCd3Vg4eExQKYMzDadgp5CQDPtV
reAczIan/vESTzJS7PqmNN5od5Lz74b6vr8CAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBQFJjdIaOC7c5gN3LcNaJniMtYz4DAfBgNVHSMEGDAWgBSEm7jVrhFJbnSllas9
n49AHEtYzDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvODA3L2hKdTQxYTRSU1c1MHBaV3JQWi1QUUJ4TFdNdy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2hKdTQxYTRSU1c1MHBaV3JQWi1QUUJ4
TFdNdy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC84MDcvQlNZM1NHamd1M09ZRGR5M0RXaVo0akxXTS1BLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEANrf4DANBgkqhkiG9w0BAQsFAAOCAQEAjjYlWET8scUjDm1ibG647LPf+Z/X
RnESzFk677VdGVa65ZovdP/Whq/5i/Y0I1lanx02cjZFzD95vK2u2XliQFbveY6I
GGkhLidJjPoYD11pHtj8vw6a7qiB43svVKDJzKwi9Z0+xP7KBwL5Ff1itNQJTHut
y4WgSWoiey8+hQGLzueMRN4V4VPkVy0f7KJBpfzURTFuhjKb8CX6TFXOGS5hWZT8
Qz7Sy37Dd778CdtQdM5yPYnUSP19Cv6NV7nfH339S0Ky4DMcU1wMXfxf2OYjjrGI
nXqkJjff0Wpo5OuG5dteU2slQGTuy9bJAxWIkzBTkFNfPl9I9XjoYllO3Q==
-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:43 2024 by rpki-client on console-ams.rpki-client.org