Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/905/wUWlxnII1kEfrCgEpsL2697NLoM.roa
File:                     wUWlxnII1kEfrCgEpsL2697NLoM.roa (raw, json)
Hash identifier:          HBrmAmH878UT2+mp//sM8lrtJx05WqvRK4j3OXne/uM=
Subject key identifier:   C1:45:A5:C6:72:08:D6:41:1F:AC:28:04:A6:C2:F6:EB:DE:CD:2E:83
Certificate issuer:       /CN=FAEF57FF144D25094E460E0FD38C80379334ED6D
Certificate serial:       03
Authority key identifier: FA:EF:57:FF:14:4D:25:09:4E:46:0E:0F:D3:8C:80:37:93:34:ED:6D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-u9X_xRNJQlORg4P04yAN5M07W0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/wUWlxnII1kEfrCgEpsL2697NLoM.roa
Signing time:             Tue 03 Oct 2023 06:52:36 +0000
ROA not before:           Tue 03 Oct 2023 06:52:36 +0000
ROA not after:            Wed 18 Sep 2024 07:00:52 +0000
asID:                     24255
IP address blocks:        103.198.212.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/-u9X_xRNJQlORg4P04yAN5M07W0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/-u9X_xRNJQlORg4P04yAN5M07W0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-u9X_xRNJQlORg4P04yAN5M07W0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAEF57FF144D25094E460E0FD38C80379334ED6D
        Validity
            Not Before: Oct  3 06:52:36 2023 GMT
            Not After : Sep 18 07:00:52 2024 GMT
        Subject: CN=C145A5C67208D6411FAC2804A6C2F6EBDECD2E83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e9:82:b9:0a:f6:77:ff:ad:d1:17:0b:6c:96:
                    88:0d:cb:95:5f:ea:27:3f:1b:3a:f0:48:5c:f5:bf:
                    3c:14:82:22:44:c1:f5:07:4f:a6:3c:46:e4:fe:bd:
                    d3:7b:1c:38:44:d6:73:b9:5d:36:23:e4:8a:d8:4a:
                    b0:06:0c:02:95:81:b9:f8:93:55:0e:1e:eb:b6:b5:
                    b9:04:2e:a5:1f:2f:86:4b:b6:8e:82:8c:9d:1f:57:
                    50:2c:92:ce:4d:e2:31:0c:56:2e:90:2c:ef:c3:00:
                    09:8a:dd:77:ac:fd:81:14:7d:92:aa:36:3a:de:09:
                    7c:3a:9c:f8:e6:0b:d6:9f:e9:eb:45:3e:b1:0d:31:
                    d4:0f:df:15:e5:ad:c2:ba:01:d5:f8:e5:66:0f:9a:
                    d4:73:aa:cf:07:ab:16:c3:38:86:18:3d:d7:3b:d1:
                    ce:68:77:4a:7f:af:6e:0b:83:0c:70:6b:e2:1a:52:
                    bd:4c:4b:24:e1:b5:85:ac:69:93:f4:0f:cb:34:a9:
                    e1:29:71:74:52:61:d5:af:a1:ca:09:61:9e:56:c0:
                    2d:66:ce:44:d9:93:3f:40:be:3c:8b:4a:6f:b9:00:
                    e7:71:c7:38:6e:3e:68:83:2c:09:66:72:8b:01:7e:
                    ef:78:e8:42:6c:7e:41:65:17:08:9f:3d:90:bb:c6:
                    04:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:45:A5:C6:72:08:D6:41:1F:AC:28:04:A6:C2:F6:EB:DE:CD:2E:83
            X509v3 Authority Key Identifier:
                keyid:FA:EF:57:FF:14:4D:25:09:4E:46:0E:0F:D3:8C:80:37:93:34:ED:6D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/-u9X_xRNJQlORg4P04yAN5M07W0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-u9X_xRNJQlORg4P04yAN5M07W0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/wUWlxnII1kEfrCgEpsL2697NLoM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.198.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:8c:7c:82:a9:19:d3:b8:c5:8d:4c:09:ae:68:98:53:ec:cc:
         29:f3:d9:2d:19:27:c2:51:1b:7d:a5:48:07:41:6e:59:49:d3:
         e7:0f:86:e9:12:1a:90:1b:bb:c0:88:3f:b3:35:4f:5b:b6:c0:
         02:43:e3:ef:a8:6a:40:57:0e:21:d8:cc:77:20:fd:5a:6a:cf:
         2e:8f:d1:ea:ee:a3:ae:3f:97:3a:4d:25:49:74:ba:58:71:39:
         98:3a:80:78:1b:c2:fe:ff:dc:aa:aa:f8:ec:96:80:f1:6e:93:
         6b:7b:5f:31:eb:a2:01:4a:00:bb:4d:49:c9:98:a6:f4:79:e3:
         33:de:0d:68:e2:a0:db:23:83:8c:74:6e:c6:00:83:62:bb:af:
         2a:48:78:3f:7a:a7:56:9c:74:44:43:73:08:0b:21:cd:5a:ea:
         29:dd:4b:04:0c:e8:b8:80:f0:5e:99:9c:37:04:1c:be:3d:d6:
         66:3b:f4:b4:33:8b:55:1a:eb:59:11:62:35:52:07:34:e3:08:
         f7:d5:47:b1:92:6e:ea:8f:72:9a:f5:69:b6:17:2c:7b:5d:67:
         18:f1:15:03:36:24:5f:ff:66:7a:0f:06:ae:62:ec:99:9d:1e:
         c2:8f:17:54:3e:2d:38:b9:fe:c1:d9:77:d0:80:c7:ee:cf:29:
         65:58:de:8d
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBAzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGQUVG
NTdGRjE0NEQyNTA5NEU0NjBFMEZEMzhDODAzNzkzMzRFRDZEMB4XDTIzMTAwMzA2
NTIzNloXDTI0MDkxODA3MDA1MlowMzExMC8GA1UEAxMoQzE0NUE1QzY3MjA4RDY0
MTFGQUMyODA0QTZDMkY2RUJERUNEMkU4MzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALvpgrkK9nf/rdEXC2yWiA3LlV/qJz8bOvBIXPW/PBSCIkTB9QdP
pjxG5P6903scOETWc7ldNiPkithKsAYMApWBufiTVQ4e67a1uQQupR8vhku2joKM
nR9XUCySzk3iMQxWLpAs78MACYrdd6z9gRR9kqo2Ot4JfDqc+OYL1p/p60U+sQ0x
1A/fFeWtwroB1fjlZg+a1HOqzwerFsM4hhg91zvRzmh3Sn+vbguDDHBr4hpSvUxL
JOG1haxpk/QPyzSp4SlxdFJh1a+hyglhnlbALWbORNmTP0C+PItKb7kA53HHOG4+
aIMsCWZyiwF+73joQmx+QWUXCJ89kLvGBEsCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBTBRaXGcgjWQR+sKASmwvbr3s0ugzAfBgNVHSMEGDAWgBT671f/FE0lCU5GDg/T
jIA3kzTtbTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTA1Ly11OVhfeFJOSlFsT1JnNFAwNHlBTjVNMDdXMC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLy11OVhfeFJOSlFsT1JnNFAwNHlBTjVN
MDdXMC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC85MDUvd1VXbHhuSUkxa0VmckNnRXBzTDI2OTdOTG9NLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAmfG1DANBgkqhkiG9w0BAQsFAAOCAQEAQ4x8gqkZ07jFjUwJrmiYU+zMKfPZ
LRknwlEbfaVIB0FuWUnT5w+G6RIakBu7wIg/szVPW7bAAkPj76hqQFcOIdjMdyD9
WmrPLo/R6u6jrj+XOk0lSXS6WHE5mDqAeBvC/v/cqqr47JaA8W6Ta3tfMeuiAUoA
u01JyZim9HnjM94NaOKg2yODjHRuxgCDYruvKkh4P3qnVpx0RENzCAshzVrqKd1L
BAzouIDwXpmcNwQcvj3WZjv0tDOLVRrrWRFiNVIHNOMI99VHsZJu6o9ymvVpthcs
e11nGPEVAzYkX/9meg8GrmLsmZ0ewo8XVD4tOLn+wdl30IDH7s8pZVjejQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 14:56:24 2024 by rpki-client on console-fra.rpki-client.org