Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/906/Wk7mx5bvrbWuWlsigwx10wMtkq4.roa
File:                     Wk7mx5bvrbWuWlsigwx10wMtkq4.roa (raw, json)
Hash identifier:          eXfDtJs/07fl9L8UwU8tZ/fmoLQjjyH9hyNue9DtmxE=
Subject key identifier:   5A:4E:E6:C7:96:EF:AD:B5:AE:5A:5B:22:83:0C:75:D3:03:2D:92:AE
Certificate issuer:       /CN=539BDF2FE18FF387FD03842C5081A145EEEB1CF7
Certificate serial:       02
Authority key identifier: 53:9B:DF:2F:E1:8F:F3:87:FD:03:84:2C:50:81:A1:45:EE:EB:1C:F7
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/Wk7mx5bvrbWuWlsigwx10wMtkq4.roa
Signing time:             Wed 02 Aug 2023 01:58:57 +0000
ROA not before:           Wed 02 Aug 2023 01:58:57 +0000
ROA not after:            Thu 01 Aug 2024 01:47:14 +0000
asID:                     24259
IP address blocks:        103.2.32.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=539BDF2FE18FF387FD03842C5081A145EEEB1CF7
        Validity
            Not Before: Aug  2 01:58:57 2023 GMT
            Not After : Aug  1 01:47:14 2024 GMT
        Subject: CN=5A4EE6C796EFADB5AE5A5B22830C75D3032D92AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9d:ca:06:0b:52:40:20:23:f8:a1:a0:54:a8:
                    f1:ff:36:0c:f0:24:9f:6d:21:45:b0:e2:77:83:b3:
                    76:a3:2e:3e:ea:07:9f:b4:3c:27:31:b3:8a:a9:87:
                    bb:c0:ad:9e:65:f0:73:34:5f:50:79:9e:3f:f7:ac:
                    ed:32:e6:92:c0:2c:73:1a:4b:3b:4a:14:b0:25:1a:
                    15:fc:4c:03:67:21:f5:5a:91:ef:d9:0e:11:48:af:
                    90:f1:63:68:e3:53:12:41:c7:43:be:86:fc:e5:7f:
                    cc:52:b8:e0:de:7e:cb:ee:e6:31:e6:5b:71:c3:50:
                    1c:06:38:b5:80:e5:c3:b5:51:fb:c2:5a:8b:a6:9d:
                    26:f7:dd:18:4b:0d:19:60:0e:80:e1:cf:dd:bb:2a:
                    4a:b7:e6:46:3f:a0:a5:44:7b:8d:d8:64:00:5d:5d:
                    c5:93:c1:6c:84:fb:33:c8:4c:a2:12:cd:d7:4c:5c:
                    89:16:e8:95:da:85:15:74:3d:1e:96:15:7d:42:50:
                    59:8a:61:21:9b:4b:62:f4:2b:4d:f3:0b:69:5f:c3:
                    e4:80:a4:ad:b8:3c:19:06:10:bf:af:74:f6:6b:6d:
                    56:92:3d:05:3a:c5:3e:e3:33:c1:f1:eb:e9:3f:90:
                    37:1e:41:da:e7:42:d1:ce:98:ce:c1:dd:f5:18:06:
                    43:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:4E:E6:C7:96:EF:AD:B5:AE:5A:5B:22:83:0C:75:D3:03:2D:92:AE
            X509v3 Authority Key Identifier:
                keyid:53:9B:DF:2F:E1:8F:F3:87:FD:03:84:2C:50:81:A1:45:EE:EB:1C:F7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/Wk7mx5bvrbWuWlsigwx10wMtkq4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.2.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:2f:f3:4f:39:31:45:4b:8e:82:58:d3:c8:8d:3b:07:40:3a:
         14:c0:3f:59:f1:be:70:0c:ae:8d:cc:45:7c:9d:74:ef:2b:9b:
         3e:9c:14:b6:7e:cf:0b:0e:bc:d7:ea:f2:d8:bc:d6:74:22:a2:
         69:ab:07:ba:b5:b3:d5:93:25:17:fa:7d:35:f3:82:2a:56:ac:
         be:21:e3:78:28:9c:dd:ba:6d:ea:7e:01:67:33:ee:6e:6c:ef:
         07:51:f5:b9:7d:bf:54:00:99:87:fb:73:32:1d:5a:88:44:82:
         a7:59:84:c4:f3:b0:24:64:62:98:ec:78:7c:e5:02:81:84:93:
         b1:a2:93:bf:39:3d:e4:3f:6d:60:93:3a:d2:04:88:46:3b:9a:
         42:c2:ea:3d:11:5c:fa:fb:e1:0c:c1:d0:91:f4:0c:2b:32:a2:
         79:0f:65:5a:95:c4:f9:46:c6:af:5c:c3:69:9f:2e:9f:b6:66:
         81:66:45:d6:0f:5d:98:6e:24:93:b1:4c:8f:d6:18:7d:4a:41:
         03:60:0f:81:af:46:e7:9c:83:a7:30:f6:9c:50:49:26:2e:8c:
         28:84:93:0d:7a:9b:59:a3:4a:a2:c8:a3:6d:b3:d6:97:1d:11:
         43:25:c3:f0:b6:f4:b1:82:c9:fa:c1:55:c7:64:8f:82:dc:cb:
         ce:a3:51:8d
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBAjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1MzlC
REYyRkUxOEZGMzg3RkQwMzg0MkM1MDgxQTE0NUVFRUIxQ0Y3MB4XDTIzMDgwMjAx
NTg1N1oXDTI0MDgwMTAxNDcxNFowMzExMC8GA1UEAxMoNUE0RUU2Qzc5NkVGQURC
NUFFNUE1QjIyODMwQzc1RDMwMzJEOTJBRTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALadygYLUkAgI/ihoFSo8f82DPAkn20hRbDid4OzdqMuPuoHn7Q8
JzGziqmHu8CtnmXwczRfUHmeP/es7TLmksAscxpLO0oUsCUaFfxMA2ch9VqR79kO
EUivkPFjaONTEkHHQ76G/OV/zFK44N5+y+7mMeZbccNQHAY4tYDlw7VR+8Jai6ad
JvfdGEsNGWAOgOHP3bsqSrfmRj+gpUR7jdhkAF1dxZPBbIT7M8hMohLN10xciRbo
ldqFFXQ9HpYVfUJQWYphIZtLYvQrTfMLaV/D5ICkrbg8GQYQv6909mttVpI9BTrF
PuMzwfHr6T+QNx5B2udC0c6YzsHd9RgGQzMCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBRaTubHlu+tta5aWyKDDHXTAy2SrjAfBgNVHSMEGDAWgBRTm98v4Y/zh/0DhCxQ
gaFF7usc9zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTA2L1U1dmZMLUdQODRmOUE0UXNVSUdoUmU3ckhQYy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1U1dmZMLUdQODRmOUE0UXNVSUdoUmU3
ckhQYy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC85MDYvV2s3bXg1YnZyYld1V2xzaWd3eDEwd010a3E0LnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAmcCIDANBgkqhkiG9w0BAQsFAAOCAQEAbC/zTzkxRUuOgljTyI07B0A6FMA/
WfG+cAyujcxFfJ107yubPpwUtn7PCw681+ry2LzWdCKiaasHurWz1ZMlF/p9NfOC
KlasviHjeCic3bpt6n4BZzPubmzvB1H1uX2/VACZh/tzMh1aiESCp1mExPOwJGRi
mOx4fOUCgYSTsaKTvzk95D9tYJM60gSIRjuaQsLqPRFc+vvhDMHQkfQMKzKieQ9l
WpXE+UbGr1zDaZ8un7ZmgWZF1g9dmG4kk7FMj9YYfUpBA2APga9G55yDpzD2nFBJ
Ji6MKISTDXqbWaNKosijbbPWlx0RQyXD8Lb0sYLJ+sFVx2SPgtzLzqNRjQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 15:06:50 2024 by rpki-client on console-ams.rpki-client.org