Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/906/OW_qZDoafPVB6Qii9zY2uRcvdVo.roa
File:                     OW_qZDoafPVB6Qii9zY2uRcvdVo.roa (raw, json)
Hash identifier:          aYICF6Su0aTc8qSY4yFAmUMwlprYn07XXQahIsRGFeA=
Subject key identifier:   39:6F:EA:64:3A:1A:7C:F5:41:E9:08:A2:F7:36:36:B9:17:2F:75:5A
Certificate issuer:       /CN=539BDF2FE18FF387FD03842C5081A145EEEB1CF7
Certificate serial:       04
Authority key identifier: 53:9B:DF:2F:E1:8F:F3:87:FD:03:84:2C:50:81:A1:45:EE:EB:1C:F7
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/OW_qZDoafPVB6Qii9zY2uRcvdVo.roa
Signing time:             Wed 02 Aug 2023 02:02:56 +0000
ROA not before:           Wed 02 Aug 2023 02:02:56 +0000
ROA not after:            Thu 01 Aug 2024 01:47:14 +0000
asID:                     24259
IP address blocks:        133.88.80.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=539BDF2FE18FF387FD03842C5081A145EEEB1CF7
        Validity
            Not Before: Aug  2 02:02:56 2023 GMT
            Not After : Aug  1 01:47:14 2024 GMT
        Subject: CN=396FEA643A1A7CF541E908A2F73636B9172F755A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1d:d3:11:a2:2d:ef:e8:60:9b:0c:7e:ff:69:
                    37:ca:f4:38:89:7e:47:64:43:f1:be:66:7f:ea:20:
                    f4:c0:88:ac:59:01:aa:05:74:87:1d:1f:53:f5:c7:
                    f9:a0:ef:36:08:57:24:18:6f:d9:70:6c:87:52:8f:
                    86:6e:ce:fd:a4:89:a4:c2:73:0a:a3:c3:d0:f5:e2:
                    17:37:92:cd:87:01:0d:51:19:b0:b6:e8:3e:67:79:
                    e1:32:34:01:41:85:4a:5c:05:e0:7d:5f:e5:01:5e:
                    1c:ac:e9:d5:ed:99:72:ff:95:4d:b8:7c:b8:b7:5b:
                    54:91:6f:fd:20:79:4f:48:fe:d6:16:6d:96:f8:04:
                    1d:88:c5:fb:9e:9a:e4:95:af:d2:21:5f:42:2d:b9:
                    4c:76:8b:aa:0b:56:d0:26:8f:88:23:3f:bb:47:e7:
                    4c:3e:6b:c9:0f:c8:51:6e:db:aa:fa:51:5a:83:77:
                    c1:97:76:4b:59:cd:fa:92:17:47:0f:19:53:33:44:
                    33:8f:93:fc:26:0d:66:b2:61:b9:c9:51:9b:92:79:
                    fd:b7:80:7d:f6:89:e0:4a:30:58:3f:d7:c9:51:38:
                    5f:18:b0:de:a7:1e:58:e8:22:65:8a:3f:ff:90:6c:
                    b3:b6:7b:dc:38:6d:c3:cc:91:d2:d8:df:38:36:e3:
                    d1:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:6F:EA:64:3A:1A:7C:F5:41:E9:08:A2:F7:36:36:B9:17:2F:75:5A
            X509v3 Authority Key Identifier:
                keyid:53:9B:DF:2F:E1:8F:F3:87:FD:03:84:2C:50:81:A1:45:EE:EB:1C:F7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/OW_qZDoafPVB6Qii9zY2uRcvdVo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.88.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ae:ad:46:ac:2d:d1:89:d1:93:b0:da:21:46:c9:fa:e6:89:63:
         5b:91:17:36:12:01:46:fd:d0:98:cb:8a:3e:fd:a3:7e:ef:db:
         06:ed:88:74:80:a0:2e:b1:95:23:4f:7c:11:ef:85:87:34:ac:
         83:83:a3:2f:b4:53:1d:01:e1:1b:96:89:05:e6:3e:3a:19:6b:
         52:ee:fb:2f:ad:f8:7a:7e:d7:2f:9f:67:32:c1:5f:a3:57:b0:
         a9:eb:79:1f:7a:4f:d4:a9:b0:f5:98:cc:b5:54:fd:36:d7:d1:
         51:3b:7b:9d:69:dd:47:14:c4:b9:bf:d8:d9:3b:f1:4e:92:4f:
         f6:18:54:19:f4:44:cf:d8:c7:80:13:8d:d4:e8:5a:c6:74:81:
         f4:85:a8:35:09:4c:97:84:a5:20:a5:00:ff:08:a7:62:cb:af:
         dc:b6:b7:90:a4:26:50:91:1a:31:7d:6c:5e:01:0a:ca:f0:17:
         28:c8:5b:ba:58:63:8c:a8:70:a1:56:88:ce:a2:2a:14:b9:e3:
         f2:99:31:26:01:43:b2:6b:9e:18:89:92:ee:d7:f3:00:53:26:
         7b:cc:6b:80:ed:87:04:24:b1:6b:2d:c2:37:ce:01:84:e9:36:
         0a:c4:fc:09:7c:92:42:df:16:00:09:18:1f:15:a1:70:d0:eb:
         1a:1d:2b:61
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBBDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1MzlC
REYyRkUxOEZGMzg3RkQwMzg0MkM1MDgxQTE0NUVFRUIxQ0Y3MB4XDTIzMDgwMjAy
MDI1NloXDTI0MDgwMTAxNDcxNFowMzExMC8GA1UEAxMoMzk2RkVBNjQzQTFBN0NG
NTQxRTkwOEEyRjczNjM2QjkxNzJGNzU1QTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMAd0xGiLe/oYJsMfv9pN8r0OIl+R2RD8b5mf+og9MCIrFkBqgV0
hx0fU/XH+aDvNghXJBhv2XBsh1KPhm7O/aSJpMJzCqPD0PXiFzeSzYcBDVEZsLbo
Pmd54TI0AUGFSlwF4H1f5QFeHKzp1e2Zcv+VTbh8uLdbVJFv/SB5T0j+1hZtlvgE
HYjF+56a5JWv0iFfQi25THaLqgtW0CaPiCM/u0fnTD5ryQ/IUW7bqvpRWoN3wZd2
S1nN+pIXRw8ZUzNEM4+T/CYNZrJhuclRm5J5/beAffaJ4EowWD/XyVE4Xxiw3qce
WOgiZYo//5Bss7Z73Dhtw8yR0tjfODbj0UECAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBQ5b+pkOhp89UHpCKL3Nja5Fy91WjAfBgNVHSMEGDAWgBRTm98v4Y/zh/0DhCxQ
gaFF7usc9zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTA2L1U1dmZMLUdQODRmOUE0UXNVSUdoUmU3ckhQYy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1U1dmZMLUdQODRmOUE0UXNVSUdoUmU3
ckhQYy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC85MDYvT1dfcVpEb2FmUFZCNlFpaTl6WTJ1UmN2ZFZvLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAoVYUDANBgkqhkiG9w0BAQsFAAOCAQEArq1GrC3RidGTsNohRsn65oljW5EX
NhIBRv3QmMuKPv2jfu/bBu2IdICgLrGVI098Ee+FhzSsg4OjL7RTHQHhG5aJBeY+
OhlrUu77L634en7XL59nMsFfo1ewqet5H3pP1Kmw9ZjMtVT9NtfRUTt7nWndRxTE
ub/Y2TvxTpJP9hhUGfREz9jHgBON1OhaxnSB9IWoNQlMl4SlIKUA/winYsuv3La3
kKQmUJEaMX1sXgEKyvAXKMhbulhjjKhwoVaIzqIqFLnj8pkxJgFDsmueGImS7tfz
AFMme8xrgO2HBCSxay3CN84BhOk2CsT8CXySQt8WAAkYHxWhcNDrGh0rYQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 15:06:50 2024 by rpki-client on console-ams.rpki-client.org