Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/897/O45fiU6mXWbF8t3r8rlFEcj7B7E.roa
File:                     O45fiU6mXWbF8t3r8rlFEcj7B7E.roa (raw, json)
Hash identifier:          hDZYRA9HFTSzbwx72yOKGlBAH2vbuSm2m8OIs0zIIb0=
Subject key identifier:   3B:8E:5F:89:4E:A6:5D:66:C5:F2:DD:EB:F2:B9:45:11:C8:FB:07:B1
Certificate issuer:       /CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2
Certificate serial:       81
Authority key identifier: AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/O45fiU6mXWbF8t3r8rlFEcj7B7E.roa
Signing time:             Thu 31 Oct 2024 01:30:35 +0000
ROA not before:           Thu 31 Oct 2024 01:30:35 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     9621
IP address blocks:        119.59.88.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129 (0x81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2
        Validity
            Not Before: Oct 31 01:30:35 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=3B8E5F894EA65D66C5F2DDEBF2B94511C8FB07B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:63:3c:51:c4:25:c3:a3:4a:ce:3b:51:96:8c:
                    c0:f2:52:b5:b8:52:04:c0:4e:4d:56:c4:19:6d:45:
                    86:9f:97:07:f1:44:5c:79:be:7b:f8:2a:98:cb:fd:
                    21:ae:d7:c4:42:3a:96:79:fb:07:7e:6c:e8:26:ab:
                    1e:a9:94:00:9a:10:6b:25:2d:79:fb:a7:db:ee:81:
                    40:0a:34:cf:97:3a:d9:72:af:2d:35:4b:b5:a0:51:
                    3f:79:66:e2:bf:8d:ba:e1:50:87:60:16:99:ff:b2:
                    70:02:47:a0:c2:45:02:df:aa:af:6b:f7:13:eb:84:
                    7f:05:67:2d:c7:bb:d9:a3:be:1a:65:13:b7:0f:ea:
                    b9:d7:27:5a:d0:ec:3f:13:6f:43:44:f9:2b:4c:50:
                    80:25:ea:c8:d3:7d:0b:3d:3d:e6:c6:b0:6e:f9:fa:
                    df:21:8d:ec:3c:3b:66:b8:29:c3:6e:94:a6:58:b9:
                    1c:78:62:fc:b4:24:0a:ef:40:ac:0a:06:97:14:51:
                    c8:3f:c5:0f:f1:b2:70:f6:b5:b5:f7:0a:67:b5:b2:
                    b6:83:5e:24:99:8b:cc:9a:c4:cc:e4:48:e9:9e:da:
                    89:06:f6:fb:08:d2:78:dc:23:89:3b:1e:1c:f5:46:
                    81:71:60:97:2e:e2:e2:9f:d4:1a:08:82:38:e0:23:
                    30:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:8E:5F:89:4E:A6:5D:66:C5:F2:DD:EB:F2:B9:45:11:C8:FB:07:B1
            X509v3 Authority Key Identifier:
                keyid:AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/O45fiU6mXWbF8t3r8rlFEcj7B7E.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.59.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         84:98:33:24:63:65:3f:42:73:d8:fb:8d:70:f0:30:4e:6d:75:
         d5:af:00:72:45:72:78:46:da:6f:95:eb:d3:99:a1:48:1f:38:
         ef:ec:65:a6:f7:82:2c:83:de:55:ff:f0:aa:c1:7d:9b:65:cd:
         b7:ea:85:fc:44:be:c4:d8:33:8d:c5:09:45:c2:28:b1:cd:c5:
         18:d6:85:7d:7f:95:38:12:9c:d2:99:cb:08:e4:ec:f0:3a:5c:
         ff:03:88:45:33:1d:6e:06:4b:43:56:b4:8f:ea:ee:c0:9c:e7:
         09:94:94:47:e3:a6:9c:96:e8:6f:85:ec:00:6f:fd:85:74:ba:
         98:93:bf:b7:8e:28:79:83:50:1f:46:1f:ed:de:a0:dc:d3:5d:
         33:7f:4b:7c:57:48:24:6d:d8:13:91:08:42:de:40:4b:df:8e:
         5f:da:b7:74:69:ea:31:83:44:91:c1:0a:46:30:23:61:7c:ac:
         4f:b0:2a:0c:79:6d:22:1f:ad:f8:ed:2f:8d:1c:80:8a:18:c9:
         7c:67:11:ad:d0:e4:ee:90:85:33:c6:e7:a6:bf:08:c7:a8:7d:
         d6:b2:80:a7:04:04:24:99:02:6e:c1:72:e0:b0:e6:36:cb:f9:
         0b:4e:96:aa:1d:ff:6a:eb:9f:3e:11:49:c0:23:e1:d2:3a:90:
         75:2e:70:15
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAIEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQUEw
ODA5N0M2MDYwNzEwMjgwQ0RBQUE0RTdFMDZDMUYxM0NEMTZGMjAeFw0yNDEwMzEw
MTMwMzVaFw0yNTEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDNCOEU1Rjg5NEVBNjVE
NjZDNUYyRERFQkYyQjk0NTExQzhGQjA3QjEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCgYzxRxCXDo0rOO1GWjMDyUrW4UgTATk1WxBltRYaflwfxRFx5
vnv4KpjL/SGu18RCOpZ5+wd+bOgmqx6plACaEGslLXn7p9vugUAKNM+XOtlyry01
S7WgUT95ZuK/jbrhUIdgFpn/snACR6DCRQLfqq9r9xPrhH8FZy3Hu9mjvhplE7cP
6rnXJ1rQ7D8Tb0NE+StMUIAl6sjTfQs9PebGsG75+t8hjew8O2a4KcNulKZYuRx4
Yvy0JArvQKwKBpcUUcg/xQ/xsnD2tbX3Cme1sraDXiSZi8yaxMzkSOme2okG9vsI
0njcI4k7Hhz1RoFxYJcu4uKf1BoIgjjgIzA1AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUO45fiU6mXWbF8t3r8rlFEcj7B7EwHwYDVR0jBBgwFoAUqggJfGBgcQKAzaqk
5+BsHxPNFvIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzg5Ny9xZ2dKZkdCZ2NRS0F6YXFrNS1Cc0h4UE5GdkkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9xZ2dKZkdCZ2NRS0F6YXFrNS1Cc0h4
UE5GdkkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvODk3L080NWZpVTZtWFdiRjh0M3I4cmxGRWNqN0I3RS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAN3O1gwDQYJKoZIhvcNAQELBQADggEBAISYMyRjZT9Cc9j7jXDwME5tddWv
AHJFcnhG2m+V69OZoUgfOO/sZab3giyD3lX/8KrBfZtlzbfqhfxEvsTYM43FCUXC
KLHNxRjWhX1/lTgSnNKZywjk7PA6XP8DiEUzHW4GS0NWtI/q7sCc5wmUlEfjppyW
6G+F7ABv/YV0upiTv7eOKHmDUB9GH+3eoNzTXTN/S3xXSCRt2BORCELeQEvfjl/a
t3Rp6jGDRJHBCkYwI2F8rE+wKgx5bSIfrfjtL40cgIoYyXxnEa3Q5O6QhTPG56a/
CMeofdaygKcEBCSZAm7BcuCw5jbL+QtOlqod/2rrnz4RScAj4dI6kHUucBU=
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:49 2024 by rpki-client on console-ams.rpki-client.org