Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/868/6UObzBAaWIuRc5tynDTs1NwbynQ.roa
File:                     6UObzBAaWIuRc5tynDTs1NwbynQ.roa (raw, json)
Hash identifier:          KdG9b7hEtC4dSghazJ/Jwd6i8KLL5kPpAKzYzlgOmXc=
Subject key identifier:   E9:43:9B:CC:10:1A:58:8B:91:73:9B:72:9C:34:EC:D4:DC:1B:CA:74
Certificate issuer:       /CN=8D0962EDE0F5E21A7E8F9E1AB006FF940E04ED46
Certificate serial:       2A
Authority key identifier: 8D:09:62:ED:E0:F5:E2:1A:7E:8F:9E:1A:B0:06:FF:94:0E:04:ED:46
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jQli7eD14hp-j54asAb_lA4E7UY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/868/6UObzBAaWIuRc5tynDTs1NwbynQ.roa
Signing time:             Sun 31 Mar 2024 01:32:22 +0000
ROA not before:           Sun 31 Mar 2024 01:32:22 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     24271
IP address blocks:        202.177.96.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/868/jQli7eD14hp-j54asAb_lA4E7UY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/868/jQli7eD14hp-j54asAb_lA4E7UY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jQli7eD14hp-j54asAb_lA4E7UY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 11:53:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42 (0x2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D0962EDE0F5E21A7E8F9E1AB006FF940E04ED46
        Validity
            Not Before: Mar 31 01:32:22 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=E9439BCC101A588B91739B729C34ECD4DC1BCA74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9a:99:04:5f:fc:02:7c:7f:82:f9:cd:8f:1d:
                    0d:c8:4c:cc:1b:6c:ce:a4:0c:90:37:bc:80:e2:1f:
                    c3:12:63:43:5b:54:d5:08:aa:33:7c:b1:30:c9:3e:
                    4c:66:b2:5d:72:7e:9b:b8:21:3b:13:fd:f9:b3:b4:
                    26:96:ef:c8:25:5a:04:50:dd:17:5e:41:40:50:c4:
                    83:a5:eb:8d:36:58:f9:42:21:b3:17:eb:03:81:7d:
                    8d:c1:aa:27:c1:e2:bb:50:84:e5:59:6f:86:c4:fc:
                    ff:6b:b6:ae:6f:f6:b1:4c:d6:4d:b8:6c:fd:12:09:
                    40:f6:f4:db:d7:38:f6:97:d9:ad:2b:39:b8:59:a1:
                    3d:5d:37:3c:6b:a5:2e:87:b3:9e:80:ed:7b:1c:f1:
                    70:38:33:60:b9:68:c9:d7:f0:dd:0a:9e:6e:b4:75:
                    66:f4:62:ef:a6:b1:c1:63:73:3f:72:c4:07:4c:83:
                    e9:de:78:63:77:0a:e4:56:db:7b:7e:eb:70:89:6f:
                    e2:23:e0:02:a5:d6:9d:67:9b:91:6c:13:02:8e:e0:
                    37:c0:cd:fb:39:04:58:34:50:d8:13:94:c7:fd:5c:
                    23:37:2d:8c:fc:9f:f4:c8:ce:1a:db:c8:e9:77:79:
                    0f:a4:68:05:e7:87:81:a6:ed:9b:e3:19:97:8a:3e:
                    83:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:43:9B:CC:10:1A:58:8B:91:73:9B:72:9C:34:EC:D4:DC:1B:CA:74
            X509v3 Authority Key Identifier:
                keyid:8D:09:62:ED:E0:F5:E2:1A:7E:8F:9E:1A:B0:06:FF:94:0E:04:ED:46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/868/jQli7eD14hp-j54asAb_lA4E7UY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jQli7eD14hp-j54asAb_lA4E7UY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/868/6UObzBAaWIuRc5tynDTs1NwbynQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.177.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         57:63:3d:76:d1:aa:81:1c:37:24:f9:86:89:ac:4d:95:36:61:
         26:45:83:3f:d4:59:81:90:59:7e:01:2c:24:2d:07:b2:2c:76:
         f1:5e:b3:ac:dc:db:e4:f1:49:14:da:f4:5d:c5:d9:eb:a5:71:
         22:bf:a6:60:e8:fa:11:63:e2:1b:a9:be:ce:8a:f2:d4:12:1d:
         a3:a6:f7:61:2f:34:d6:3e:3e:fd:0d:fc:5f:a7:27:44:e8:18:
         0e:25:7c:cf:3a:f6:e3:4e:fd:55:fb:59:74:fe:d0:80:a1:2c:
         e5:02:fb:cd:0b:39:8f:f8:ba:ac:88:e4:86:d9:f1:ef:20:25:
         56:f7:8e:f9:2b:0c:e2:64:c8:eb:df:77:d4:8e:c5:50:6a:54:
         bb:b8:07:ec:c4:af:4a:69:68:72:7d:41:39:81:88:56:c6:ef:
         b8:aa:cf:99:d9:cb:f4:b8:1b:c2:17:92:92:e6:3a:4c:ce:9a:
         e6:ee:35:65:a1:72:5a:bd:74:db:db:06:55:34:9f:70:18:b9:
         5a:d5:3b:b2:30:1e:21:e4:15:e0:2c:33:9f:2b:9f:82:32:09:
         92:d6:52:89:a6:5b:69:1c:8a:48:ec:96:5d:3f:97:e3:d7:a8:
         6e:bd:61:0b:c5:51:f8:88:39:76:d8:78:26:d7:98:65:69:e4:
         e6:10:28:b4
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBKjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4RDA5
NjJFREUwRjVFMjFBN0U4RjlFMUFCMDA2RkY5NDBFMDRFRDQ2MB4XDTI0MDMzMTAx
MzIyMloXDTI1MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoRTk0MzlCQ0MxMDFBNTg4
QjkxNzM5QjcyOUMzNEVDRDREQzFCQ0E3NDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAL+amQRf/AJ8f4L5zY8dDchMzBtszqQMkDe8gOIfwxJjQ1tU1Qiq
M3yxMMk+TGayXXJ+m7ghOxP9+bO0JpbvyCVaBFDdF15BQFDEg6XrjTZY+UIhsxfr
A4F9jcGqJ8Hiu1CE5VlvhsT8/2u2rm/2sUzWTbhs/RIJQPb029c49pfZrSs5uFmh
PV03PGulLoeznoDtexzxcDgzYLloydfw3QqebrR1ZvRi76axwWNzP3LEB0yD6d54
Y3cK5Fbbe37rcIlv4iPgAqXWnWebkWwTAo7gN8DN+zkEWDRQ2BOUx/1cIzctjPyf
9MjOGtvI6Xd5D6RoBeeHgabtm+MZl4o+gysCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBTpQ5vMEBpYi5Fzm3KcNOzU3BvKdDAfBgNVHSMEGDAWgBSNCWLt4PXiGn6Pnhqw
Bv+UDgTtRjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvODY4L2pRbGk3ZUQxNGhwLWo1NGFzQWJfbEE0RTdVWS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pRbGk3ZUQxNGhwLWo1NGFzQWJfbEE0
RTdVWS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC84NjgvNlVPYnpCQWFXSXVSYzV0eW5EVHMxTndieW5RLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBMqxYDANBgkqhkiG9w0BAQsFAAOCAQEAV2M9dtGqgRw3JPmGiaxNlTZhJkWD
P9RZgZBZfgEsJC0Hsix28V6zrNzb5PFJFNr0XcXZ66VxIr+mYOj6EWPiG6m+zory
1BIdo6b3YS801j4+/Q38X6cnROgYDiV8zzr24079VftZdP7QgKEs5QL7zQs5j/i6
rIjkhtnx7yAlVveO+SsM4mTI69931I7FUGpUu7gH7MSvSmlocn1BOYGIVsbvuKrP
mdnL9LgbwheSkuY6TM6a5u41ZaFyWr1029sGVTSfcBi5WtU7sjAeIeQV4Cwznyuf
gjIJktZSiaZbaRyKSOyWXT+X49eobr1hC8VR+Ig5dth4JteYZWnk5hAotA==
-----END CERTIFICATE-----
Generated at Sun Jun 16 12:57:26 2024 by rpki-client on console-fra.rpki-client.org