Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/883/6Ggf3uxGUpf-uR5n5ebnh1TmTHI.roa
File:                     6Ggf3uxGUpf-uR5n5ebnh1TmTHI.roa (raw, json)
Hash identifier:          ZRj22WyFx8+ymnfHaPhuOwi2iVnMQpPxWkJEX50xc/g=
Subject key identifier:   E8:68:1F:DE:EC:46:52:97:FE:B9:1E:67:E5:E6:E7:87:54:E6:4C:72
Certificate issuer:       /CN=87EE394CC8B1651B758F388F73A88E68BD27222F
Certificate serial:       35
Authority key identifier: 87:EE:39:4C:C8:B1:65:1B:75:8F:38:8F:73:A8:8E:68:BD:27:22:2F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h-45TMixZRt1jziPc6iOaL0nIi8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/6Ggf3uxGUpf-uR5n5ebnh1TmTHI.roa
Signing time:             Thu 28 Mar 2024 08:31:37 +0000
ROA not before:           Thu 28 Mar 2024 08:31:37 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     2519
IP address blocks:        113.212.105.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/h-45TMixZRt1jziPc6iOaL0nIi8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/h-45TMixZRt1jziPc6iOaL0nIi8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h-45TMixZRt1jziPc6iOaL0nIi8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Jul 2024 10:50:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53 (0x35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87EE394CC8B1651B758F388F73A88E68BD27222F
        Validity
            Not Before: Mar 28 08:31:37 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=E8681FDEEC465297FEB91E67E5E6E78754E64C72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:8b:fd:bc:ed:05:c0:fa:0c:72:d6:fe:47:1e:
                    7c:9f:d4:6b:3c:38:86:8a:33:01:48:1b:14:8c:bd:
                    59:d4:9c:90:b6:78:bc:31:20:a3:0e:c6:c3:ee:65:
                    af:81:6b:64:ab:6f:ac:56:a7:7d:c7:8b:69:2f:cd:
                    94:ae:fd:b4:07:4c:29:17:0c:e5:23:f6:c2:f9:a0:
                    92:97:ed:bc:4c:ff:f3:2a:ba:51:f9:b2:d3:ba:e9:
                    79:14:c0:89:c6:74:a2:e1:cb:3f:6c:dc:bd:63:d3:
                    b6:db:4e:82:16:f4:53:65:db:c8:bf:52:08:84:6a:
                    ae:9f:d9:41:2d:b0:fa:5e:2c:7d:36:be:b0:86:68:
                    99:0e:3b:61:f2:10:98:ae:79:b8:99:05:03:4a:79:
                    30:60:c2:6c:5c:c7:11:06:fd:13:35:97:20:55:02:
                    1a:b2:ae:67:63:cf:a0:4a:5a:ff:90:e1:fc:2e:f4:
                    65:7c:c4:0c:0b:05:c5:ae:e5:68:77:bb:29:df:fd:
                    50:ec:9d:90:7a:ec:10:0d:5b:91:a3:dc:dd:18:a7:
                    4e:07:9e:0d:a3:92:97:34:6e:4b:9d:d0:34:b2:e0:
                    8c:7e:bc:a1:b3:df:da:7e:9f:fa:77:88:73:68:e3:
                    84:d0:35:1b:de:d3:e6:53:8a:8d:71:d3:82:f0:75:
                    8a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:68:1F:DE:EC:46:52:97:FE:B9:1E:67:E5:E6:E7:87:54:E6:4C:72
            X509v3 Authority Key Identifier:
                keyid:87:EE:39:4C:C8:B1:65:1B:75:8F:38:8F:73:A8:8E:68:BD:27:22:2F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/h-45TMixZRt1jziPc6iOaL0nIi8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h-45TMixZRt1jziPc6iOaL0nIi8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/6Ggf3uxGUpf-uR5n5ebnh1TmTHI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.212.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:30:89:d6:c0:e1:92:a7:56:7d:19:86:2e:72:8f:df:7a:6a:
         67:01:fd:4c:92:5d:2e:8c:97:dc:c4:40:f2:ca:d7:af:32:7e:
         9e:c9:2c:ba:92:ee:8a:74:e1:88:16:12:df:eb:3c:5b:7f:2c:
         70:d0:98:13:0f:fc:dd:15:f1:57:7e:19:03:fb:6f:54:20:11:
         d8:ba:4c:5c:c6:9e:db:5e:4e:1b:52:21:8d:8e:d4:a1:13:24:
         78:44:35:28:3c:ec:47:a6:74:bb:3b:e4:13:3d:4e:53:58:e4:
         c3:59:46:d3:63:62:ee:3a:1c:15:a4:31:7b:7e:6c:8e:c2:05:
         90:cf:83:6c:d5:f3:c1:7d:bf:fa:1b:b2:b4:d7:c9:b6:dc:39:
         26:0a:d0:3f:98:ed:fa:9e:d6:bb:b7:f7:7a:35:6f:b3:02:51:
         62:c0:00:99:64:e1:6d:69:8f:4b:b2:be:37:b9:4b:cb:6a:6d:
         08:0f:3f:33:49:ba:79:51:ba:83:8b:e9:c4:54:39:18:80:93:
         42:11:04:79:43:71:25:c9:e3:0a:47:0b:3a:78:5e:1c:99:f7:
         1b:fc:09:be:99:77:29:bb:d5:ca:12:b6:83:0c:dd:2e:48:27:
         ea:98:64:b7:95:75:2c:60:89:5d:c4:37:4a:1f:b3:7f:d0:b3:
         23:bd:49:fe
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBNTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4N0VF
Mzk0Q0M4QjE2NTFCNzU4RjM4OEY3M0E4OEU2OEJEMjcyMjJGMB4XDTI0MDMyODA4
MzEzN1oXDTI1MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoRTg2ODFGREVFQzQ2NTI5
N0ZFQjkxRTY3RTVFNkU3ODc1NEU2NEM3MjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMqL/bztBcD6DHLW/kcefJ/Uazw4hoozAUgbFIy9WdSckLZ4vDEg
ow7Gw+5lr4FrZKtvrFanfceLaS/NlK79tAdMKRcM5SP2wvmgkpftvEz/8yq6Ufmy
07rpeRTAicZ0ouHLP2zcvWPTtttOghb0U2XbyL9SCIRqrp/ZQS2w+l4sfTa+sIZo
mQ47YfIQmK55uJkFA0p5MGDCbFzHEQb9EzWXIFUCGrKuZ2PPoEpa/5Dh/C70ZXzE
DAsFxa7laHe7Kd/9UOydkHrsEA1bkaPc3RinTgeeDaOSlzRuS53QNLLgjH68obPf
2n6f+neIc2jjhNA1G97T5lOKjXHTgvB1iisCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBToaB/e7EZSl/65Hmfl5ueHVOZMcjAfBgNVHSMEGDAWgBSH7jlMyLFlG3WPOI9z
qI5ovSciLzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvODgzL2gtNDVUTWl4WlJ0MWp6aVBjNmlPYUwwbklpOC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2gtNDVUTWl4WlJ0MWp6aVBjNmlPYUww
bklpOC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC84ODMvNkdnZjN1eEdVcGYtdVI1bjVlYm5oMVRtVEhJLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAHHUaTANBgkqhkiG9w0BAQsFAAOCAQEAkzCJ1sDhkqdWfRmGLnKP33pqZwH9
TJJdLoyX3MRA8srXrzJ+nsksupLuinThiBYS3+s8W38scNCYEw/83RXxV34ZA/tv
VCAR2LpMXMae215OG1IhjY7UoRMkeEQ1KDzsR6Z0uzvkEz1OU1jkw1lG02Ni7joc
FaQxe35sjsIFkM+DbNXzwX2/+huytNfJttw5JgrQP5jt+p7Wu7f3ejVvswJRYsAA
mWThbWmPS7K+N7lLy2ptCA8/M0m6eVG6g4vpxFQ5GICTQhEEeUNxJcnjCkcLOnhe
HJn3G/wJvpl3KbvVyhK2gwzdLkgn6phkt5V1LGCJXcQ3Sh+zf9CzI71J/g==
-----END CERTIFICATE-----
Generated at Fri Jun 28 04:55:55 2024 by rpki-client on console-fra.rpki-client.org