Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/882/EFFbleVgO5TTDyXEzfjf6CEsxP4.roa
File:                     EFFbleVgO5TTDyXEzfjf6CEsxP4.roa (raw, json)
Hash identifier:          IWMts76kP6A1s6q8/NO1tMMglpyAQJXLsj8r1rR4o6o=
Subject key identifier:   10:51:5B:95:E5:60:3B:94:D3:0F:25:C4:CD:F8:DF:E8:21:2C:C4:FE
Certificate issuer:       /CN=B3935EEBB426B5FF872B140016A4441CDE239F3F
Certificate serial:       1D
Authority key identifier: B3:93:5E:EB:B4:26:B5:FF:87:2B:14:00:16:A4:44:1C:DE:23:9F:3F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/EFFbleVgO5TTDyXEzfjf6CEsxP4.roa
Signing time:             Sun 31 Mar 2024 01:33:03 +0000
ROA not before:           Sun 31 Mar 2024 01:33:03 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     59127
IP address blocks:        113.213.224.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29 (0x1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3935EEBB426B5FF872B140016A4441CDE239F3F
        Validity
            Not Before: Mar 31 01:33:03 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=10515B95E5603B94D30F25C4CDF8DFE8212CC4FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1b:f3:10:58:e3:68:79:a8:46:97:db:fb:8b:
                    ef:62:fe:c7:5e:ba:f2:31:86:f7:60:32:c3:08:f4:
                    86:8a:33:f2:51:05:be:15:ec:6c:18:1c:0d:de:66:
                    7f:9a:56:b0:02:26:39:76:1c:68:9f:bf:19:15:75:
                    c3:df:b1:23:b8:9b:2a:20:73:1c:a0:48:32:ab:ff:
                    4b:75:2d:5b:93:53:f9:c8:7e:45:12:75:72:c4:08:
                    31:ae:7a:50:9b:32:13:9b:a8:3c:17:c2:1b:52:a1:
                    5b:00:94:e4:09:cc:4a:96:c4:e4:f6:29:77:fb:da:
                    f3:3b:18:b9:19:ac:ed:65:7d:cf:c1:d2:76:cd:9e:
                    72:90:f3:6d:a4:98:4f:42:a5:b5:d8:d8:56:b7:e0:
                    79:4e:90:10:4e:45:8c:5b:a1:10:16:f6:86:69:ce:
                    d6:c6:fe:80:fe:8b:93:fb:80:9c:54:cf:9f:78:4c:
                    30:85:99:e1:a5:16:62:e2:4a:89:fc:4c:f1:9b:f6:
                    28:57:e9:25:27:0a:b7:a9:ed:ca:0f:36:73:60:2f:
                    6e:ee:6a:01:e2:b0:d8:55:1b:2d:cd:39:e4:40:aa:
                    3e:47:96:ab:be:9e:9a:20:6e:45:a6:d0:3b:45:fa:
                    9a:0b:25:04:4d:f6:15:c3:6f:c3:63:a7:19:44:ca:
                    8f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:51:5B:95:E5:60:3B:94:D3:0F:25:C4:CD:F8:DF:E8:21:2C:C4:FE
            X509v3 Authority Key Identifier:
                keyid:B3:93:5E:EB:B4:26:B5:FF:87:2B:14:00:16:A4:44:1C:DE:23:9F:3F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/EFFbleVgO5TTDyXEzfjf6CEsxP4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.213.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2a:3b:ea:bd:9a:6c:2a:b5:af:62:68:75:81:de:ca:11:e6:4c:
         61:be:bb:9b:cc:24:2e:3d:93:07:46:65:6b:1b:34:81:1f:ee:
         c8:18:37:2a:5f:81:2e:e5:e7:39:b5:6f:a0:d4:e6:08:5b:29:
         0e:fc:4e:91:af:61:fe:13:94:1e:42:c5:32:ad:fa:a3:21:09:
         4f:ef:bb:10:f0:94:0d:b5:2a:36:a8:66:d1:ef:4f:d7:cd:3d:
         94:21:ce:cd:29:01:55:e4:a2:4f:4f:90:b4:66:fb:2e:f3:21:
         92:c7:ca:ab:47:42:32:69:56:41:42:3a:06:d5:88:9c:9f:8f:
         5b:c4:10:03:86:9e:5c:e6:b9:be:fb:bb:1f:a4:0e:ca:b0:f3:
         57:b9:bf:cb:59:71:d6:a5:0d:1b:d2:60:3d:2b:4a:83:11:04:
         5c:13:a2:31:19:87:cc:88:c9:e3:33:a2:eb:40:e7:1c:6d:e7:
         3d:83:d6:0e:38:22:f8:dc:0d:42:11:46:d1:1e:a0:e1:d6:10:
         5b:b8:ee:f8:9e:c5:83:3a:8e:eb:5c:86:ef:b8:a3:d9:ac:99:
         68:74:cb:65:da:24:72:03:c8:d4:cb:f8:db:d4:75:c5:03:c4:
         62:ff:de:df:66:71:af:b9:be:76:bc:af:2e:2b:2e:f6:ab:a0:
         a6:d0:b6:84
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBHTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCMzkz
NUVFQkI0MjZCNUZGODcyQjE0MDAxNkE0NDQxQ0RFMjM5RjNGMB4XDTI0MDMzMTAx
MzMwM1oXDTI1MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoMTA1MTVCOTVFNTYwM0I5
NEQzMEYyNUM0Q0RGOERGRTgyMTJDQzRGRTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMMb8xBY42h5qEaX2/uL72L+x1668jGG92Aywwj0hooz8lEFvhXs
bBgcDd5mf5pWsAImOXYcaJ+/GRV1w9+xI7ibKiBzHKBIMqv/S3UtW5NT+ch+RRJ1
csQIMa56UJsyE5uoPBfCG1KhWwCU5AnMSpbE5PYpd/va8zsYuRms7WV9z8HSds2e
cpDzbaSYT0KltdjYVrfgeU6QEE5FjFuhEBb2hmnO1sb+gP6Lk/uAnFTPn3hMMIWZ
4aUWYuJKifxM8Zv2KFfpJScKt6ntyg82c2Avbu5qAeKw2FUbLc055ECqPkeWq76e
miBuRabQO0X6mgslBE32FcNvw2OnGUTKj1cCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBQQUVuV5WA7lNMPJcTN+N/oISzE/jAfBgNVHSMEGDAWgBSzk17rtCa1/4crFAAW
pEQc3iOfPzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvODgyL3M1TmU2N1FtdGYtSEt4UUFGcVJFSE40am56OC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3M1TmU2N1FtdGYtSEt4UUFGcVJFSE40
am56OC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC84ODIvRUZGYmxlVmdPNVRURHlYRXpmamY2Q0VzeFA0LnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBHHV4DANBgkqhkiG9w0BAQsFAAOCAQEAKjvqvZpsKrWvYmh1gd7KEeZMYb67
m8wkLj2TB0Zlaxs0gR/uyBg3Kl+BLuXnObVvoNTmCFspDvxOka9h/hOUHkLFMq36
oyEJT++7EPCUDbUqNqhm0e9P1809lCHOzSkBVeSiT0+QtGb7LvMhksfKq0dCMmlW
QUI6BtWInJ+PW8QQA4aeXOa5vvu7H6QOyrDzV7m/y1lx1qUNG9JgPStKgxEEXBOi
MRmHzIjJ4zOi60DnHG3nPYPWDjgi+NwNQhFG0R6g4dYQW7ju+J7FgzqO61yG77ij
2ayZaHTLZdokcgPI1Mv429R1xQPEYv/e32Zxr7m+dryvLisu9qugptC2hA==
-----END CERTIFICATE-----
Generated at Thu May 30 03:08:56 2024 by rpki-client on console-fra.rpki-client.org