Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/873/QBuKFighnWXHfHhS3ikQwZWqOMs.roa
File:                     QBuKFighnWXHfHhS3ikQwZWqOMs.roa (raw, json)
Hash identifier:          OG+Q68J+ziZ5PI+ZMxpELCYdmRhScJCVlIzUg0g+B0M=
Subject key identifier:   40:1B:8A:16:28:21:9D:65:C7:7C:78:52:DE:29:10:C1:95:AA:38:CB
Certificate issuer:       /CN=80CACF70A4B6C1B6F624EF43484072406B8D3F36
Certificate serial:       05
Authority key identifier: 80:CA:CF:70:A4:B6:C1:B6:F6:24:EF:43:48:40:72:40:6B:8D:3F:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gMrPcKS2wbb2JO9DSEByQGuNPzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/QBuKFighnWXHfHhS3ikQwZWqOMs.roa
Signing time:             Mon 26 Feb 2024 08:11:06 +0000
ROA not before:           Mon 26 Feb 2024 08:11:06 +0000
ROA not after:            Sat 22 Feb 2025 06:48:19 +0000
asID:                     23831
IP address blocks:        116.90.144.0/20 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/gMrPcKS2wbb2JO9DSEByQGuNPzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/gMrPcKS2wbb2JO9DSEByQGuNPzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gMrPcKS2wbb2JO9DSEByQGuNPzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80CACF70A4B6C1B6F624EF43484072406B8D3F36
        Validity
            Not Before: Feb 26 08:11:06 2024 GMT
            Not After : Feb 22 06:48:19 2025 GMT
        Subject: CN=401B8A1628219D65C77C7852DE2910C195AA38CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f2:69:c2:6a:f5:83:d8:d1:46:45:91:c2:c2:
                    9c:de:74:27:bf:20:78:90:70:e6:8d:5f:ed:65:96:
                    a6:99:63:12:d6:16:11:dc:9b:9f:21:2e:f3:ac:0c:
                    7f:d3:e4:2a:83:85:2d:08:7a:89:52:75:9c:52:8e:
                    1b:fa:e3:b6:10:05:68:9c:10:db:5b:a4:7f:2c:3c:
                    eb:38:88:d7:27:c0:b1:76:c2:78:1f:74:44:d0:37:
                    a2:51:e4:b2:22:a6:3b:b4:3a:8d:d4:61:9f:50:2c:
                    c5:d1:34:ec:36:14:28:b7:cf:39:4d:ee:b0:f4:cc:
                    98:e3:88:f4:c1:85:93:4c:59:c2:4b:e0:ba:52:df:
                    5b:53:47:7a:e7:88:88:b7:fa:41:38:01:dc:7d:c8:
                    30:f1:1e:24:93:e6:af:f5:38:0b:f9:2d:37:a2:27:
                    33:e0:d8:03:c3:e2:9e:9b:81:e7:d0:b8:22:0d:91:
                    50:af:dd:79:9e:34:0c:99:00:55:45:34:9d:66:39:
                    7c:78:de:06:e8:a1:26:b0:ca:31:97:0a:42:68:c1:
                    eb:67:0c:bd:8c:16:42:36:51:e5:95:e5:92:5a:24:
                    b7:7b:cf:09:63:78:a4:39:b6:cd:9d:fa:b5:40:de:
                    bc:df:9f:6b:c1:2a:26:ea:a4:a6:4c:14:31:d5:63:
                    73:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:1B:8A:16:28:21:9D:65:C7:7C:78:52:DE:29:10:C1:95:AA:38:CB
            X509v3 Authority Key Identifier:
                keyid:80:CA:CF:70:A4:B6:C1:B6:F6:24:EF:43:48:40:72:40:6B:8D:3F:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/gMrPcKS2wbb2JO9DSEByQGuNPzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gMrPcKS2wbb2JO9DSEByQGuNPzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/QBuKFighnWXHfHhS3ikQwZWqOMs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.90.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         14:b6:de:92:f7:9f:8d:a6:56:d4:0b:16:66:34:34:56:10:6f:
         c1:d3:73:84:75:86:9b:28:cc:b9:e8:52:56:78:00:9a:ea:19:
         11:2d:04:28:18:41:5b:b7:c2:67:8c:7d:f6:62:06:72:37:56:
         91:b3:de:cb:6c:a0:31:96:8a:4f:fd:ea:a7:a7:68:78:b5:8d:
         af:2a:89:94:f7:bb:04:b5:69:24:80:f6:0f:b7:7c:a6:2b:86:
         0b:41:d6:be:04:dc:3e:0f:47:f0:46:14:b8:f1:7e:43:78:a8:
         e1:af:08:b0:9c:ce:87:c1:17:5c:bd:30:d8:bb:2f:6a:81:2f:
         53:f8:46:ef:19:d2:d4:c0:0d:1b:37:64:92:e9:64:d9:6d:16:
         f5:aa:ce:ae:e0:76:3b:f7:1f:2e:61:76:3a:7c:14:a4:f6:2f:
         2f:ef:8e:3c:ed:b2:c5:d6:a2:c2:b5:3c:ed:2f:8a:40:52:cc:
         db:8e:4b:8c:aa:a1:af:c7:bf:32:29:ad:6f:a2:16:30:59:31:
         61:9a:48:ff:ac:66:36:b8:d0:84:83:4b:1e:99:df:2a:3d:fc:
         c8:09:37:02:51:c8:4c:0d:38:17:8d:e3:dd:46:ce:ab:bf:d7:
         ef:a1:41:0a:db:cd:fd:dc:0c:ff:49:39:d3:dd:39:15:8e:9e:
         4c:53:d5:6b
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBBTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4MENB
Q0Y3MEE0QjZDMUI2RjYyNEVGNDM0ODQwNzI0MDZCOEQzRjM2MB4XDTI0MDIyNjA4
MTEwNloXDTI1MDIyMjA2NDgxOVowMzExMC8GA1UEAxMoNDAxQjhBMTYyODIxOUQ2
NUM3N0M3ODUyREUyOTEwQzE5NUFBMzhDQjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALbyacJq9YPY0UZFkcLCnN50J78geJBw5o1f7WWWppljEtYWEdyb
nyEu86wMf9PkKoOFLQh6iVJ1nFKOG/rjthAFaJwQ21ukfyw86ziI1yfAsXbCeB90
RNA3olHksiKmO7Q6jdRhn1AsxdE07DYUKLfPOU3usPTMmOOI9MGFk0xZwkvgulLf
W1NHeueIiLf6QTgB3H3IMPEeJJPmr/U4C/ktN6InM+DYA8PinpuB59C4Ig2RUK/d
eZ40DJkAVUU0nWY5fHjeBuihJrDKMZcKQmjB62cMvYwWQjZR5ZXlklokt3vPCWN4
pDm2zZ36tUDevN+fa8EqJuqkpkwUMdVjc0sCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBRAG4oWKCGdZcd8eFLeKRDBlao4yzAfBgNVHSMEGDAWgBSAys9wpLbBtvYk70NI
QHJAa40/NjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvODczL2dNclBjS1Myd2JiMkpPOURTRUJ5UUd1TlB6WS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2dNclBjS1Myd2JiMkpPOURTRUJ5UUd1
TlB6WS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC84NzMvUUJ1S0ZpZ2huV1hIZkhoUzNpa1F3WldxT01zLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBHRakDANBgkqhkiG9w0BAQsFAAOCAQEAFLbekvefjaZW1AsWZjQ0VhBvwdNz
hHWGmyjMuehSVngAmuoZES0EKBhBW7fCZ4x99mIGcjdWkbPey2ygMZaKT/3qp6do
eLWNryqJlPe7BLVpJID2D7d8piuGC0HWvgTcPg9H8EYUuPF+Q3io4a8IsJzOh8EX
XL0w2LsvaoEvU/hG7xnS1MANGzdkkulk2W0W9arOruB2O/cfLmF2OnwUpPYvL++O
PO2yxdaiwrU87S+KQFLM245LjKqhr8e/Mimtb6IWMFkxYZpI/6xmNrjQhINLHpnf
Kj38yAk3AlHITA04F43j3UbOq7/X76FBCtvN/dwM/0k50905FY6eTFPVaw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 02:30:30 2024 by rpki-client on console-fra.rpki-client.org