Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/848/rnhONdodBcKbc7NvI_Mg-A-TZr8.roa
File:                     rnhONdodBcKbc7NvI_Mg-A-TZr8.roa (raw, json)
Hash identifier:          /ZSy27RjQdb+A1rfwzkw+PFg26yxRnnVjUPRR0iVFxA=
Subject key identifier:   AE:78:4E:35:DA:1D:05:C2:9B:73:B3:6F:23:F3:20:F8:0F:93:66:BF
Certificate issuer:       /CN=55F35A82A236BCED819088D4D90887E0B965C7CF
Certificate serial:       04
Authority key identifier: 55:F3:5A:82:A2:36:BC:ED:81:90:88:D4:D9:08:87:E0:B9:65:C7:CF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VfNagqI2vO2BkIjU2QiH4Lllx88.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/848/rnhONdodBcKbc7NvI_Mg-A-TZr8.roa
Signing time:             Fri 12 Apr 2024 05:47:54 +0000
ROA not before:           Fri 12 Apr 2024 05:47:54 +0000
ROA not after:            Sat 12 Apr 2025 05:36:12 +0000
asID:                     23775
IP address blocks:        210.255.240.0/20 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/848/VfNagqI2vO2BkIjU2QiH4Lllx88.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/848/VfNagqI2vO2BkIjU2QiH4Lllx88.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VfNagqI2vO2BkIjU2QiH4Lllx88.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55F35A82A236BCED819088D4D90887E0B965C7CF
        Validity
            Not Before: Apr 12 05:47:54 2024 GMT
            Not After : Apr 12 05:36:12 2025 GMT
        Subject: CN=AE784E35DA1D05C29B73B36F23F320F80F9366BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:82:b9:81:d2:5c:e5:bd:d1:81:a7:d8:85:3c:
                    8e:1f:d8:2f:c7:b1:c3:eb:9d:43:fd:7f:d6:0e:3a:
                    be:25:b7:d5:08:1b:8e:bc:25:bf:1a:f8:4f:ce:0c:
                    a5:9b:1a:ee:10:11:e1:bc:c0:c5:c1:42:1a:62:e9:
                    02:b7:26:3e:59:96:8d:85:d9:59:72:53:cd:60:33:
                    ab:95:3d:fd:1a:94:41:68:ff:70:7b:6b:e5:7f:10:
                    9f:33:0c:bc:f0:54:9f:73:84:4a:de:27:95:70:9c:
                    66:b0:25:ce:63:54:86:f2:1b:7d:18:01:fc:37:ab:
                    38:f1:7d:ad:33:af:c0:7b:68:a2:45:d1:e3:5b:fe:
                    28:00:ef:cf:c0:9b:1f:1d:ba:ae:21:e1:a7:d0:8c:
                    7f:ad:3c:f2:ae:c3:09:76:2f:22:ab:72:d2:40:2a:
                    e6:12:0e:ca:fe:44:c0:dc:59:12:05:19:4b:35:19:
                    9e:77:da:66:dc:62:7a:55:a9:22:71:a6:ff:f8:5c:
                    aa:25:c3:bf:75:70:37:e1:ea:d4:f0:77:f3:77:ba:
                    e9:d9:8a:f4:b6:d2:19:79:b2:43:a2:fd:ce:f9:ba:
                    39:c1:1b:df:fe:24:bb:79:9b:80:b7:83:1b:61:c5:
                    18:0d:cb:15:0a:c1:2b:12:62:ba:4b:9d:06:07:32:
                    f3:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:78:4E:35:DA:1D:05:C2:9B:73:B3:6F:23:F3:20:F8:0F:93:66:BF
            X509v3 Authority Key Identifier:
                keyid:55:F3:5A:82:A2:36:BC:ED:81:90:88:D4:D9:08:87:E0:B9:65:C7:CF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/848/VfNagqI2vO2BkIjU2QiH4Lllx88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VfNagqI2vO2BkIjU2QiH4Lllx88.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/848/rnhONdodBcKbc7NvI_Mg-A-TZr8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.255.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         54:0b:ff:ac:ce:cf:d0:d7:67:74:a8:02:77:fe:34:dd:cd:34:
         82:60:12:8b:7b:03:69:9e:72:76:ef:e7:ff:21:a9:92:9d:7d:
         df:0f:e5:42:cc:00:94:cd:23:36:28:ed:fb:22:71:a4:33:4c:
         07:a8:84:cb:5e:9b:e2:60:46:99:ce:cb:77:99:e0:42:40:64:
         31:34:a2:a6:13:20:7a:1d:ab:32:27:66:a2:95:e7:07:ab:fd:
         34:59:ea:99:2d:c9:b8:d2:f7:96:79:b4:c9:40:78:f7:cc:0e:
         8d:12:02:18:2e:33:ab:cd:c8:23:79:cf:c9:1a:86:d0:ca:a5:
         17:c9:7e:f5:d8:e1:fd:47:5e:93:f3:8d:ff:e8:3c:c1:66:bb:
         40:c1:65:79:fe:41:f2:28:e8:27:7c:47:e7:03:05:e6:dc:a8:
         00:7f:5d:00:1b:29:23:03:bb:df:3d:38:08:c0:19:8e:22:d2:
         c3:ce:31:ef:4f:08:ca:40:20:a7:c4:09:d4:71:0f:ce:97:12:
         05:cc:c3:7b:38:18:3b:2a:16:ad:d2:ea:f1:f7:d5:c7:da:f2:
         79:57:f1:0d:0f:fc:53:c6:e0:ba:b3:df:12:7c:87:7f:cc:82:
         66:48:db:38:e6:6d:8e:21:29:10:f1:ad:88:75:18:37:77:ea:
         fc:ef:31:69
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBBDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1NUYz
NUE4MkEyMzZCQ0VEODE5MDg4RDREOTA4ODdFMEI5NjVDN0NGMB4XDTI0MDQxMjA1
NDc1NFoXDTI1MDQxMjA1MzYxMlowMzExMC8GA1UEAxMoQUU3ODRFMzVEQTFEMDVD
MjlCNzNCMzZGMjNGMzIwRjgwRjkzNjZCRjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMeCuYHSXOW90YGn2IU8jh/YL8exw+udQ/1/1g46viW31Qgbjrwl
vxr4T84MpZsa7hAR4bzAxcFCGmLpArcmPlmWjYXZWXJTzWAzq5U9/RqUQWj/cHtr
5X8QnzMMvPBUn3OESt4nlXCcZrAlzmNUhvIbfRgB/DerOPF9rTOvwHtookXR41v+
KADvz8CbHx26riHhp9CMf6088q7DCXYvIqty0kAq5hIOyv5EwNxZEgUZSzUZnnfa
ZtxielWpInGm//hcqiXDv3VwN+Hq1PB383e66dmK9LbSGXmyQ6L9zvm6OcEb3/4k
u3mbgLeDG2HFGA3LFQrBKxJiukudBgcy87ECAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBSueE412h0Fwptzs28j8yD4D5NmvzAfBgNVHSMEGDAWgBRV81qCoja87YGQiNTZ
CIfguWXHzzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvODQ4L1ZmTmFncUkydk8yQmtJalUyUWlINExsbHg4OC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1ZmTmFncUkydk8yQmtJalUyUWlINExs
bHg4OC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC84NDgvcm5oT05kb2RCY0tiYzdOdklfTWctQS1UWnI4LnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBNL/8DANBgkqhkiG9w0BAQsFAAOCAQEAVAv/rM7P0NdndKgCd/403c00gmAS
i3sDaZ5ydu/n/yGpkp193w/lQswAlM0jNijt+yJxpDNMB6iEy16b4mBGmc7Ld5ng
QkBkMTSiphMgeh2rMidmopXnB6v9NFnqmS3JuNL3lnm0yUB498wOjRICGC4zq83I
I3nPyRqG0MqlF8l+9djh/Udek/ON/+g8wWa7QMFlef5B8ijoJ3xH5wMF5tyoAH9d
ABspIwO73z04CMAZjiLSw84x708IykAgp8QJ1HEPzpcSBczDezgYOyoWrdLq8ffV
x9ryeVfxDQ/8U8bgurPfEnyHf8yCZkjbOOZtjiEpEPGtiHUYN3fq/O8xaQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:25 2024 by rpki-client on console-fra.rpki-client.org