Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/881/VjcggyTKwrlYHEORe_PjrIFj9iE.roa
File:                     VjcggyTKwrlYHEORe_PjrIFj9iE.roa (raw, json)
Hash identifier:          /oZQiX2K1A7itOSmeK8ByYh6V8wMp0QPbd1C2EFPZAw=
Subject key identifier:   56:37:20:83:24:CA:C2:B9:58:1C:43:91:7B:F3:E3:AC:81:63:F6:21
Certificate issuer:       /CN=D00E08393688B04737874ECD63DD8BE78E5EF2D0
Certificate serial:       34
Authority key identifier: D0:0E:08:39:36:88:B0:47:37:87:4E:CD:63:DD:8B:E7:8E:5E:F2:D0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0A4IOTaIsEc3h07NY92L545e8tA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/VjcggyTKwrlYHEORe_PjrIFj9iE.roa
Signing time:             Sun 01 Oct 2023 01:29:45 +0000
ROA not before:           Sun 01 Oct 2023 01:29:45 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     23805
IP address blocks:        219.100.80.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/0A4IOTaIsEc3h07NY92L545e8tA.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/0A4IOTaIsEc3h07NY92L545e8tA.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0A4IOTaIsEc3h07NY92L545e8tA.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52 (0x34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D00E08393688B04737874ECD63DD8BE78E5EF2D0
        Validity
            Not Before: Oct  1 01:29:45 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=5637208324CAC2B9581C43917BF3E3AC8163F621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:be:96:76:90:39:95:c9:5e:3c:ae:ea:77:07:
                    66:4e:a6:59:5b:01:57:95:b8:63:29:13:48:16:ab:
                    74:89:05:6d:49:99:d8:d0:74:12:3d:00:dc:57:80:
                    c6:bb:81:60:e1:26:d0:02:08:27:cf:0e:53:7b:23:
                    73:52:7c:ab:31:95:e9:cb:7b:35:c0:0a:2d:cf:47:
                    b0:de:5c:53:14:13:46:e9:c6:5d:e0:10:5a:ac:b8:
                    ab:14:6d:c5:82:dd:25:67:48:ae:e9:f8:df:68:58:
                    b0:5b:f2:f8:65:57:62:59:e9:86:42:fc:4b:64:83:
                    28:bb:f2:4c:84:e7:6c:b2:45:bd:3d:ba:36:85:ff:
                    56:d1:4b:9e:73:22:10:9c:35:44:b6:b9:94:0f:df:
                    6a:0c:59:b5:f3:2a:2c:c9:93:6f:12:2c:f5:cc:53:
                    f1:67:be:e5:28:d0:dc:37:79:99:fa:be:62:05:cb:
                    b9:07:35:a0:18:9e:a2:21:c6:77:eb:32:2c:e8:52:
                    d2:b7:49:64:a6:24:48:c2:a9:b5:97:43:7d:08:79:
                    c9:11:85:d1:13:da:35:ad:13:b0:e3:10:f9:48:ae:
                    1b:7e:a3:39:e3:e4:86:75:87:44:d2:41:8f:1c:24:
                    f6:ad:a2:8e:9f:78:c9:da:9a:10:6d:13:3c:5b:81:
                    fd:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:37:20:83:24:CA:C2:B9:58:1C:43:91:7B:F3:E3:AC:81:63:F6:21
            X509v3 Authority Key Identifier:
                keyid:D0:0E:08:39:36:88:B0:47:37:87:4E:CD:63:DD:8B:E7:8E:5E:F2:D0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/0A4IOTaIsEc3h07NY92L545e8tA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0A4IOTaIsEc3h07NY92L545e8tA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/VjcggyTKwrlYHEORe_PjrIFj9iE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.100.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d4:41:9e:6e:29:95:fd:7c:79:8a:35:12:99:c9:63:a1:d2:86:
         b8:0a:62:f9:12:2a:df:17:87:14:63:ec:44:52:ca:6b:e4:f0:
         fc:07:85:55:3d:f4:23:40:0c:65:f3:75:2c:28:12:7c:a7:32:
         fa:6d:a5:e5:e9:51:15:4b:5c:8a:ec:5e:ac:08:a5:99:5f:f6:
         2e:0d:3c:24:57:ea:50:5a:63:8c:55:51:56:03:ef:e0:69:e1:
         08:53:5c:fc:47:79:70:53:ba:03:7b:3f:d9:18:91:f3:65:19:
         ba:8a:bd:fa:07:6d:50:49:73:b3:bf:b9:bf:ca:26:37:61:eb:
         f0:26:dc:59:2b:b4:44:83:51:f9:19:81:6d:b8:e1:7f:5f:18:
         fa:da:23:8b:f4:a0:b5:a2:8d:d4:6c:f3:d1:1d:3a:0b:47:be:
         f3:83:49:a0:42:1b:4d:42:01:9b:fb:c9:25:93:c4:de:f4:04:
         15:ca:76:47:49:9f:64:8e:b9:d5:53:b5:18:75:7d:ac:e9:9e:
         5f:f2:37:1b:37:0f:ef:30:25:68:c5:57:e8:9a:3d:2e:24:0b:
         58:57:76:12:d9:a3:f4:c4:dd:fe:d9:9f:82:ca:fc:ab:ee:ea:
         28:3c:59:3f:83:c6:d7:d0:50:e2:a1:15:a0:8a:26:92:19:77:
         7e:4f:d2:b9
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBNDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEMDBF
MDgzOTM2ODhCMDQ3Mzc4NzRFQ0Q2M0REOEJFNzhFNUVGMkQwMB4XDTIzMTAwMTAx
Mjk0NVoXDTI0MDkxNDAxMzAwM1owMzExMC8GA1UEAxMoNTYzNzIwODMyNENBQzJC
OTU4MUM0MzkxN0JGM0UzQUM4MTYzRjYyMTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMy+lnaQOZXJXjyu6ncHZk6mWVsBV5W4YykTSBardIkFbUmZ2NB0
Ej0A3FeAxruBYOEm0AIIJ88OU3sjc1J8qzGV6ct7NcAKLc9HsN5cUxQTRunGXeAQ
Wqy4qxRtxYLdJWdIrun432hYsFvy+GVXYlnphkL8S2SDKLvyTITnbLJFvT26NoX/
VtFLnnMiEJw1RLa5lA/fagxZtfMqLMmTbxIs9cxT8We+5SjQ3Dd5mfq+YgXLuQc1
oBieoiHGd+syLOhS0rdJZKYkSMKptZdDfQh5yRGF0RPaNa0TsOMQ+UiuG36jOePk
hnWHRNJBjxwk9q2ijp94ydqaEG0TPFuB/Q8CAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBRWNyCDJMrCuVgcQ5F78+OsgWP2ITAfBgNVHSMEGDAWgBTQDgg5NoiwRzeHTs1j
3Yvnjl7y0DAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvODgxLzBBNElPVGFJc0VjM2gwN05ZOTJMNTQ1ZTh0QS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzBBNElPVGFJc0VjM2gwN05ZOTJMNTQ1
ZTh0QS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC84ODEvVmpjZ2d5VEt3cmxZSEVPUmVfUGpySUZqOWlFLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAttkUDANBgkqhkiG9w0BAQsFAAOCAQEA1EGebimV/Xx5ijUSmcljodKGuApi
+RIq3xeHFGPsRFLKa+Tw/AeFVT30I0AMZfN1LCgSfKcy+m2l5elRFUtciuxerAil
mV/2Lg08JFfqUFpjjFVRVgPv4GnhCFNc/Ed5cFO6A3s/2RiR82UZuoq9+gdtUElz
s7+5v8omN2Hr8CbcWSu0RINR+RmBbbjhf18Y+toji/SgtaKN1Gzz0R06C0e+84NJ
oEIbTUIBm/vJJZPE3vQEFcp2R0mfZI651VO1GHV9rOmeX/I3GzcP7zAlaMVX6Jo9
LiQLWFd2Etmj9MTd/tmfgsr8q+7qKDxZP4PG19BQ4qEVoIomkhl3fk/SuQ==
-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:44 2024 by rpki-client on console-ams.rpki-client.org