Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/883/couxJ7drzZL0uQSMkcv7PEVgV3g.roa
File:                     couxJ7drzZL0uQSMkcv7PEVgV3g.roa (raw, json)
Hash identifier:          RE5ClcmaFZkeA+mq2KZUbPIeTY+N5ROAQLgdzNmGSEM=
Subject key identifier:   72:8B:B1:27:B7:6B:CD:92:F4:B9:04:8C:91:CB:FB:3C:45:60:57:78
Certificate issuer:       /CN=87EE394CC8B1651B758F388F73A88E68BD27222F
Certificate serial:       3F
Authority key identifier: 87:EE:39:4C:C8:B1:65:1B:75:8F:38:8F:73:A8:8E:68:BD:27:22:2F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h-45TMixZRt1jziPc6iOaL0nIi8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/couxJ7drzZL0uQSMkcv7PEVgV3g.roa
Signing time:             Thu 28 Mar 2024 08:37:24 +0000
ROA not before:           Thu 28 Mar 2024 08:37:24 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     23818
IP address blocks:        203.79.63.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/h-45TMixZRt1jziPc6iOaL0nIi8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/h-45TMixZRt1jziPc6iOaL0nIi8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h-45TMixZRt1jziPc6iOaL0nIi8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Jul 2024 06:14:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63 (0x3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87EE394CC8B1651B758F388F73A88E68BD27222F
        Validity
            Not Before: Mar 28 08:37:24 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=728BB127B76BCD92F4B9048C91CBFB3C45605778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b6:e2:77:9f:29:17:93:19:0a:80:5f:28:96:
                    e7:e8:80:dc:e6:4b:df:34:cf:cb:01:1c:6e:17:43:
                    74:0e:27:b1:9e:35:60:a0:0e:0b:c0:22:96:02:a6:
                    7d:07:5d:ac:37:c1:b0:bc:6d:ab:3a:67:09:a4:e6:
                    b5:0d:cb:66:cf:55:f8:a5:bb:11:ff:82:e2:2d:bc:
                    65:d2:4b:3e:96:fb:92:77:6a:c7:37:1b:0d:64:54:
                    3c:c3:b8:78:04:d7:cd:0a:71:76:2e:04:84:05:e1:
                    45:4a:72:11:21:87:88:ac:3b:04:a0:ed:f4:a8:31:
                    bb:da:5e:2d:2b:78:87:c2:3e:31:4e:a4:bc:f3:d4:
                    4e:f5:4b:5f:db:93:e9:df:83:74:0f:f1:cc:4b:36:
                    72:21:67:b8:32:e0:bd:81:5b:eb:4e:10:ab:bd:fe:
                    a7:ed:e1:ad:03:cb:42:90:e6:15:bb:07:3a:80:14:
                    93:c7:6c:fc:f8:de:12:c9:99:11:8f:7e:b0:9c:c1:
                    c4:7a:31:5f:1d:cc:60:6e:3f:ae:e4:0e:89:58:e6:
                    37:ba:84:1f:e0:c5:ab:ed:36:94:10:5c:5a:55:4f:
                    af:f9:83:dd:7a:e2:e9:00:f2:09:aa:f2:ab:c3:b2:
                    da:cb:d2:a0:61:a0:e0:72:34:d5:b3:5d:6d:9a:c8:
                    c0:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:8B:B1:27:B7:6B:CD:92:F4:B9:04:8C:91:CB:FB:3C:45:60:57:78
            X509v3 Authority Key Identifier:
                keyid:87:EE:39:4C:C8:B1:65:1B:75:8F:38:8F:73:A8:8E:68:BD:27:22:2F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/h-45TMixZRt1jziPc6iOaL0nIi8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h-45TMixZRt1jziPc6iOaL0nIi8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/couxJ7drzZL0uQSMkcv7PEVgV3g.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.79.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:4a:6f:47:09:5e:87:d2:61:66:b7:fc:62:42:02:97:4a:b1:
         42:66:99:0f:f3:16:01:aa:f6:30:d5:c1:08:24:82:c7:5d:26:
         0e:ca:fe:61:dc:fd:14:ef:2d:7d:e1:a8:52:83:ec:da:34:0a:
         72:75:6f:1a:60:76:dd:da:55:85:6e:d5:49:43:46:a1:5d:39:
         1f:8f:37:9f:ad:1a:ab:f5:1d:12:0e:a5:0f:dc:25:74:22:49:
         5b:1c:b7:3b:6a:58:64:24:fc:ae:11:7b:52:72:2c:36:bb:96:
         e0:ce:4a:a7:eb:f7:bc:d1:c1:d0:e4:ce:67:a8:41:61:c5:73:
         99:f3:6a:32:7d:98:ea:03:71:56:d4:2d:95:60:ea:be:df:d1:
         d8:06:4f:37:2e:5e:68:42:b2:ee:22:64:b9:b7:94:1e:d6:88:
         40:30:0d:47:7e:0e:a3:08:35:e4:39:b9:00:28:ce:13:70:3d:
         aa:25:f9:94:a5:9f:5e:17:c0:72:ce:fc:73:b2:28:7b:d6:c9:
         ca:46:56:32:98:d2:bd:a5:eb:e0:b7:c8:c2:01:d8:27:4e:97:
         bc:d9:c4:3e:95:8e:c6:c0:d8:99:15:c1:54:43:8c:e7:f7:00:
         8c:87:86:e6:7b:23:e8:19:62:bd:aa:30:d8:6e:25:2e:d4:5a:
         7f:92:9f:cb
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBPzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4N0VF
Mzk0Q0M4QjE2NTFCNzU4RjM4OEY3M0E4OEU2OEJEMjcyMjJGMB4XDTI0MDMyODA4
MzcyNFoXDTI1MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoNzI4QkIxMjdCNzZCQ0Q5
MkY0QjkwNDhDOTFDQkZCM0M0NTYwNTc3ODCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALa24nefKReTGQqAXyiW5+iA3OZL3zTPywEcbhdDdA4nsZ41YKAO
C8AilgKmfQddrDfBsLxtqzpnCaTmtQ3LZs9V+KW7Ef+C4i28ZdJLPpb7kndqxzcb
DWRUPMO4eATXzQpxdi4EhAXhRUpyESGHiKw7BKDt9Kgxu9peLSt4h8I+MU6kvPPU
TvVLX9uT6d+DdA/xzEs2ciFnuDLgvYFb604Qq73+p+3hrQPLQpDmFbsHOoAUk8ds
/PjeEsmZEY9+sJzBxHoxXx3MYG4/ruQOiVjmN7qEH+DFq+02lBBcWlVPr/mD3Xri
6QDyCaryq8Oy2svSoGGg4HI01bNdbZrIwG0CAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBRyi7Ent2vNkvS5BIyRy/s8RWBXeDAfBgNVHSMEGDAWgBSH7jlMyLFlG3WPOI9z
qI5ovSciLzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvODgzL2gtNDVUTWl4WlJ0MWp6aVBjNmlPYUwwbklpOC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2gtNDVUTWl4WlJ0MWp6aVBjNmlPYUww
bklpOC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC84ODMvY291eEo3ZHJ6WkwwdVFTTWtjdjdQRVZnVjNnLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAMtPPzANBgkqhkiG9w0BAQsFAAOCAQEAfkpvRwleh9JhZrf8YkICl0qxQmaZ
D/MWAar2MNXBCCSCx10mDsr+Ydz9FO8tfeGoUoPs2jQKcnVvGmB23dpVhW7VSUNG
oV05H483n60aq/UdEg6lD9wldCJJWxy3O2pYZCT8rhF7UnIsNruW4M5Kp+v3vNHB
0OTOZ6hBYcVzmfNqMn2Y6gNxVtQtlWDqvt/R2AZPNy5eaEKy7iJkubeUHtaIQDAN
R34Oowg15Dm5ACjOE3A9qiX5lKWfXhfAcs78c7Ioe9bJykZWMpjSvaXr4LfIwgHY
J06XvNnEPpWOxsDYmRXBVEOM5/cAjIeG5nsj6Blivaow2G4lLtRaf5Kfyw==
-----END CERTIFICATE-----
Generated at Wed Jul 3 06:51:15 2024 by rpki-client on console-fra.rpki-client.org