Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/820/TkcrjLcTsh5lu3MCGmHNohgLeeU.roa
File:                     TkcrjLcTsh5lu3MCGmHNohgLeeU.roa (raw, json)
Hash identifier:          OlkIqF2eMhHZHCuFGvlt9qNHm0P6ThgHjrSN1gS2COY=
Subject key identifier:   4E:47:2B:8C:B7:13:B2:1E:65:BB:73:02:1A:61:CD:A2:18:0B:79:E5
Certificate issuer:       /CN=9FEB105C67E5FD5C9E1AFD06A343C841F05A7F15
Certificate serial:       1C
Authority key identifier: 9F:EB:10:5C:67:E5:FD:5C:9E:1A:FD:06:A3:43:C8:41:F0:5A:7F:15
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/n-sQXGfl_VyeGv0Go0PIQfBafxU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/820/TkcrjLcTsh5lu3MCGmHNohgLeeU.roa
Signing time:             Fri 26 Jan 2024 05:25:06 +0000
ROA not before:           Fri 26 Jan 2024 05:25:06 +0000
ROA not after:            Tue 14 Jan 2025 01:30:02 +0000
asID:                     23614
IP address blocks:        210.158.184.0/21 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/820/n-sQXGfl_VyeGv0Go0PIQfBafxU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/820/n-sQXGfl_VyeGv0Go0PIQfBafxU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/n-sQXGfl_VyeGv0Go0PIQfBafxU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Dec 2024 00:11:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28 (0x1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FEB105C67E5FD5C9E1AFD06A343C841F05A7F15
        Validity
            Not Before: Jan 26 05:25:06 2024 GMT
            Not After : Jan 14 01:30:02 2025 GMT
        Subject: CN=4E472B8CB713B21E65BB73021A61CDA2180B79E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ec:4a:b0:99:32:43:59:f6:95:f9:a3:5f:c6:
                    7f:14:fc:10:a7:bf:15:c4:0a:2d:6e:cf:d0:71:3b:
                    80:a3:21:e3:20:63:73:36:1c:81:ff:33:f1:5c:c7:
                    db:c1:c9:18:48:19:ff:cf:b2:80:ba:e2:39:5e:12:
                    29:04:a6:65:39:54:49:cb:04:42:94:5d:d4:ca:84:
                    b1:e2:aa:14:aa:15:4e:58:ed:80:92:3d:2a:d2:9e:
                    71:c8:8a:43:45:e5:ef:dc:21:f3:d4:92:66:ed:df:
                    8e:c4:95:6a:3a:85:b0:51:70:43:cb:6e:92:1e:5e:
                    7f:d1:d7:5b:b9:28:7a:2a:ae:c8:29:3e:43:68:b0:
                    1a:bb:19:cc:3e:f7:32:6f:8c:00:29:9e:12:0d:03:
                    d1:2e:c0:9f:23:9c:bc:98:7c:b1:b3:6a:05:b6:a5:
                    0f:4c:79:75:5f:b6:ca:76:23:d7:85:d1:10:85:76:
                    49:2b:2a:99:b2:f0:b7:9a:57:f3:e8:17:34:72:9c:
                    74:c2:c2:19:2e:3b:46:3d:6d:f8:f6:ac:ee:b1:68:
                    6c:01:4b:54:72:f7:84:29:a6:0b:e6:86:aa:10:e5:
                    f8:3d:af:fa:d3:97:a0:18:22:5c:82:0c:cb:62:49:
                    5b:ed:76:b0:0b:6d:c0:80:75:f3:68:ed:18:99:73:
                    99:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:47:2B:8C:B7:13:B2:1E:65:BB:73:02:1A:61:CD:A2:18:0B:79:E5
            X509v3 Authority Key Identifier:
                keyid:9F:EB:10:5C:67:E5:FD:5C:9E:1A:FD:06:A3:43:C8:41:F0:5A:7F:15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/820/n-sQXGfl_VyeGv0Go0PIQfBafxU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/n-sQXGfl_VyeGv0Go0PIQfBafxU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/820/TkcrjLcTsh5lu3MCGmHNohgLeeU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.158.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         22:b0:5a:30:a5:f4:87:3d:1d:6d:3d:7c:10:93:1b:fe:86:fe:
         a5:6d:21:55:3b:47:c8:19:6f:f5:ca:cb:84:d8:26:34:4e:3d:
         98:12:59:13:09:c4:00:fe:f9:7e:02:42:45:d7:98:09:03:5a:
         4a:72:d9:2d:be:90:a6:4c:56:04:dc:9e:5f:30:d3:7f:12:fc:
         03:f1:62:1f:e7:97:50:9d:b6:1b:a3:50:9b:21:cb:76:34:39:
         9d:f8:23:e4:ac:5b:de:d7:7c:09:e7:06:7d:d4:f1:54:ce:dd:
         41:a8:33:82:46:44:9f:e7:55:ab:42:08:d8:0e:f7:bc:38:a7:
         c9:58:36:c4:d9:05:07:ca:33:80:8c:f0:75:c2:39:0a:5d:f6:
         2b:29:22:17:75:bb:79:b5:3c:b6:9e:f5:07:6f:0e:b6:38:38:
         31:20:30:49:8c:38:1e:2b:f0:2a:c8:df:47:04:86:69:52:85:
         09:1d:5f:a4:31:09:a9:9b:45:cf:e3:46:46:14:ec:fa:74:f4:
         2e:8c:cb:5d:be:34:a0:c2:8d:b2:58:b4:d7:8f:c1:05:06:d9:
         66:23:4f:6b:33:c7:42:b9:40:5f:e4:11:07:84:e8:51:3d:30:
         c7:43:3a:4e:bc:50:f0:16:b7:74:c1:06:35:8d:18:7b:a9:54:
         43:af:08:91
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBHDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5RkVC
MTA1QzY3RTVGRDVDOUUxQUZEMDZBMzQzQzg0MUYwNUE3RjE1MB4XDTI0MDEyNjA1
MjUwNloXDTI1MDExNDAxMzAwMlowMzExMC8GA1UEAxMoNEU0NzJCOENCNzEzQjIx
RTY1QkI3MzAyMUE2MUNEQTIxODBCNzlFNTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKPsSrCZMkNZ9pX5o1/GfxT8EKe/FcQKLW7P0HE7gKMh4yBjczYc
gf8z8VzH28HJGEgZ/8+ygLriOV4SKQSmZTlUScsEQpRd1MqEseKqFKoVTljtgJI9
KtKecciKQ0Xl79wh89SSZu3fjsSVajqFsFFwQ8tukh5ef9HXW7koeiquyCk+Q2iw
GrsZzD73Mm+MACmeEg0D0S7AnyOcvJh8sbNqBbalD0x5dV+2ynYj14XREIV2SSsq
mbLwt5pX8+gXNHKcdMLCGS47Rj1t+Pas7rFobAFLVHL3hCmmC+aGqhDl+D2v+tOX
oBgiXIIMy2JJW+12sAttwIB182jtGJlzmRUCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBRORyuMtxOyHmW7cwIaYc2iGAt55TAfBgNVHSMEGDAWgBSf6xBcZ+X9XJ4a/Qaj
Q8hB8Fp/FTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvODIwL24tc1FYR2ZsX1Z5ZUd2MEdvMFBJUWZCYWZ4VS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL24tc1FYR2ZsX1Z5ZUd2MEdvMFBJUWZC
YWZ4VS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC84MjAvVGtjcmpMY1RzaDVsdTNNQ0dtSE5vaGdMZWVVLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEA9KeuDANBgkqhkiG9w0BAQsFAAOCAQEAIrBaMKX0hz0dbT18EJMb/ob+pW0h
VTtHyBlv9crLhNgmNE49mBJZEwnEAP75fgJCRdeYCQNaSnLZLb6QpkxWBNyeXzDT
fxL8A/FiH+eXUJ22G6NQmyHLdjQ5nfgj5Kxb3td8CecGfdTxVM7dQagzgkZEn+dV
q0II2A73vDinyVg2xNkFB8ozgIzwdcI5Cl32KykiF3W7ebU8tp71B28Otjg4MSAw
SYw4HivwKsjfRwSGaVKFCR1fpDEJqZtFz+NGRhTs+nT0LozLXb40oMKNsli014/B
BQbZZiNPazPHQrlAX+QRB4ToUT0wx0M6TrxQ8Ba3dMEGNY0Ye6lUQ68IkQ==
-----END CERTIFICATE-----
Generated at Tue Nov 26 02:17:18 2024 by rpki-client on console-fra.rpki-client.org