Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/934/w7TbtB20SCUVilCz-5q5dBs8aME.roa
File:                     w7TbtB20SCUVilCz-5q5dBs8aME.roa (raw, json)
Hash identifier:          1HZ5t8PhFHqBxthkci6h3aT6HGmqM+q9ITF2U80msKU=
Subject key identifier:   C3:B4:DB:B4:1D:B4:48:25:15:8A:50:B3:FB:9A:B9:74:1B:3C:68:C1
Certificate issuer:       /CN=2A4CFE909CA58307E7CA8735AF245D718D99F7FB
Certificate serial:       59
Authority key identifier: 2A:4C:FE:90:9C:A5:83:07:E7:CA:87:35:AF:24:5D:71:8D:99:F7:FB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/w7TbtB20SCUVilCz-5q5dBs8aME.roa
Signing time:             Thu 29 Feb 2024 01:31:11 +0000
ROA not before:           Thu 29 Feb 2024 01:31:11 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     37892
IP address blocks:        202.145.28.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89 (0x59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A4CFE909CA58307E7CA8735AF245D718D99F7FB
        Validity
            Not Before: Feb 29 01:31:11 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=C3B4DBB41DB44825158A50B3FB9AB9741B3C68C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:74:9a:b7:ab:54:51:d7:ec:87:96:1e:90:f1:
                    5c:ca:6f:d6:5e:0f:64:5a:94:09:9b:51:9c:67:ae:
                    80:9f:c2:9c:e3:e7:40:87:fb:f2:f2:27:62:bc:45:
                    56:d6:9b:9b:33:3f:9d:3d:29:c2:eb:32:c2:ba:a3:
                    34:10:e1:2d:be:38:17:74:b7:42:59:81:3c:b1:b0:
                    92:5e:1f:ca:cb:92:f4:4c:61:88:e2:f8:95:c3:86:
                    b5:76:5b:a3:b1:8c:dc:f9:c3:72:70:18:6c:12:71:
                    37:ef:68:60:1a:e1:f2:c4:28:60:01:b0:07:d4:ca:
                    e6:83:47:0a:b0:75:72:f5:f5:a5:d1:c8:11:60:f0:
                    c9:25:e1:57:85:a3:35:b5:7d:ca:6b:fb:5e:ba:8f:
                    81:96:43:aa:95:d0:1a:2d:51:ec:14:8c:66:ac:5f:
                    a8:3d:56:4e:38:2c:18:b7:1a:72:c7:dd:df:4e:3d:
                    95:87:2e:f3:a7:83:af:fa:5e:20:15:10:13:25:fe:
                    a8:81:5a:ca:3c:9a:ba:ec:b0:d6:1f:56:d4:20:fb:
                    63:86:75:32:ae:1c:c9:92:c6:50:ee:5d:5c:78:6c:
                    8f:0e:1b:3a:9c:e4:cf:e2:0e:88:5e:d5:e3:c3:76:
                    16:25:f4:50:51:12:84:c1:77:3f:6b:b8:66:c6:a5:
                    1c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:B4:DB:B4:1D:B4:48:25:15:8A:50:B3:FB:9A:B9:74:1B:3C:68:C1
            X509v3 Authority Key Identifier:
                keyid:2A:4C:FE:90:9C:A5:83:07:E7:CA:87:35:AF:24:5D:71:8D:99:F7:FB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kkz-kJylgwfnyoc1ryRdcY2Z9_s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/934/w7TbtB20SCUVilCz-5q5dBs8aME.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.145.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:10:c6:42:0a:85:83:ab:71:b0:cc:f9:02:ab:15:18:b1:a7:
         7f:09:be:31:a1:89:83:c3:c8:9f:dd:1c:0f:3f:65:3b:80:13:
         7d:54:d8:d0:03:1a:0a:c0:2a:9e:84:ce:29:4f:17:58:29:3f:
         6a:ce:76:fc:39:fe:38:89:81:ac:31:ce:f8:1e:d9:03:a2:aa:
         a0:50:5d:18:3e:04:ac:4e:c7:11:e5:3e:70:77:bc:42:6e:86:
         c4:2e:47:80:59:ee:c7:5c:d8:ca:28:82:75:65:e7:82:15:7d:
         e8:50:3c:dd:20:ad:32:99:d7:da:79:73:d0:d9:ff:53:39:a8:
         c7:0e:24:16:0e:d5:ae:ba:77:06:d4:f7:3f:b1:38:4d:ca:1f:
         8b:58:6b:39:22:26:dd:d5:8e:10:99:3a:8b:06:7d:df:30:43:
         ac:c8:a0:8e:0f:33:ab:db:e4:cf:45:46:2f:d6:6e:be:f0:5a:
         58:7a:63:e2:6c:2f:57:d8:06:07:91:86:39:60:bd:0f:57:ad:
         25:d8:7e:3f:d8:97:7f:12:16:45:6c:ea:b2:0c:03:8f:4e:57:
         00:e4:1b:ed:f1:d5:70:b5:5b:af:93:dc:35:c7:83:02:9f:69:
         39:30:9d:97:e8:18:f4:ee:42:d3:79:e8:71:73:49:ac:70:6e:
         9c:ad:c8:e0
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBWTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyQTRD
RkU5MDlDQTU4MzA3RTdDQTg3MzVBRjI0NUQ3MThEOTlGN0ZCMB4XDTI0MDIyOTAx
MzExMVoXDTI1MDIxNDAxMzAwM1owMzExMC8GA1UEAxMoQzNCNERCQjQxREI0NDgy
NTE1OEE1MEIzRkI5QUI5NzQxQjNDNjhDMTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMR0mrerVFHX7IeWHpDxXMpv1l4PZFqUCZtRnGeugJ/CnOPnQIf7
8vInYrxFVtabmzM/nT0pwusywrqjNBDhLb44F3S3QlmBPLGwkl4fysuS9ExhiOL4
lcOGtXZbo7GM3PnDcnAYbBJxN+9oYBrh8sQoYAGwB9TK5oNHCrB1cvX1pdHIEWDw
ySXhV4WjNbV9ymv7XrqPgZZDqpXQGi1R7BSMZqxfqD1WTjgsGLcacsfd3049lYcu
86eDr/peIBUQEyX+qIFayjyauuyw1h9W1CD7Y4Z1Mq4cyZLGUO5dXHhsjw4bOpzk
z+IOiF7V48N2FiX0UFEShMF3P2u4ZsalHGECAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBTDtNu0HbRIJRWKULP7mrl0GzxowTAfBgNVHSMEGDAWgBQqTP6QnKWDB+fKhzWv
JF1xjZn3+zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTM0L0trei1rSnlsZ3dmbnlvYzFyeVJkY1kyWjlfcy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0trei1rSnlsZ3dmbnlvYzFyeVJkY1ky
Wjlfcy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC85MzQvdzdUYnRCMjBTQ1VWaWxDei01cTVkQnM4YU1FLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAsqRHDANBgkqhkiG9w0BAQsFAAOCAQEAcxDGQgqFg6txsMz5AqsVGLGnfwm+
MaGJg8PIn90cDz9lO4ATfVTY0AMaCsAqnoTOKU8XWCk/as52/Dn+OImBrDHO+B7Z
A6KqoFBdGD4ErE7HEeU+cHe8Qm6GxC5HgFnux1zYyiiCdWXnghV96FA83SCtMpnX
2nlz0Nn/Uzmoxw4kFg7Vrrp3BtT3P7E4Tcofi1hrOSIm3dWOEJk6iwZ93zBDrMig
jg8zq9vkz0VGL9ZuvvBaWHpj4mwvV9gGB5GGOWC9D1etJdh+P9iXfxIWRWzqsgwD
j05XAOQb7fHVcLVbr5PcNceDAp9pOTCdl+gY9O5C03nocXNJrHBunK3I4A==
-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:49 2024 by rpki-client on console-ams.rpki-client.org