Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/939/VSgiI4VSoEnw7hRBJIKLoyGb53w.roa
File:                     VSgiI4VSoEnw7hRBJIKLoyGb53w.roa (raw, json)
Hash identifier:          yAclcfA18On3DLNtYbkEmCoao50oQcABhChEhImaeG4=
Subject key identifier:   55:28:22:23:85:52:A0:49:F0:EE:14:41:24:82:8B:A3:21:9B:E7:7C
Certificate issuer:       /CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
Certificate serial:       A9
Authority key identifier: 7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/VSgiI4VSoEnw7hRBJIKLoyGb53w.roa
Signing time:             Fri 31 May 2024 01:31:49 +0000
ROA not before:           Fri 31 May 2024 01:31:49 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     2518
IP address blocks:        221.170.0.0/15 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 169 (0xa9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
        Validity
            Not Before: May 31 01:31:49 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=552822238552A049F0EE144124828BA3219BE77C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:19:ab:42:e6:c3:fb:17:c1:f2:23:d2:c5:13:
                    d9:c0:77:37:68:c3:ab:32:8a:79:06:c2:4c:ff:8c:
                    78:e2:65:e4:fb:89:76:ae:53:19:44:83:43:4e:7d:
                    aa:06:79:87:2a:75:27:40:e2:80:8b:25:e7:3c:a6:
                    14:7e:10:89:b5:1b:40:93:7c:27:0b:71:3d:5e:c9:
                    c3:0d:13:42:7d:d5:0b:02:86:2b:bc:0b:a9:ef:29:
                    88:1a:f0:31:d0:99:60:8c:0f:34:57:35:79:34:1b:
                    14:95:fe:66:f7:d1:4b:c7:30:c3:99:4d:bc:28:f8:
                    d7:42:93:17:fa:e9:3a:c2:ce:e7:ea:95:05:e1:aa:
                    f5:c4:76:cc:22:6f:33:18:09:7d:d0:89:45:47:62:
                    6f:91:42:c6:ca:68:d3:a9:9e:d2:ee:a6:59:da:86:
                    6c:e7:2b:f8:e7:14:0a:57:7b:a9:c0:77:9a:7a:44:
                    62:ff:01:a5:cf:f6:ab:66:1d:c3:a6:2b:35:1f:9e:
                    81:e1:ed:cd:ff:5f:cd:67:b2:7d:55:24:de:90:69:
                    9f:7f:5b:7e:5d:06:05:d3:57:ad:c3:58:3e:b9:37:
                    65:a8:e7:43:14:8d:0f:b8:71:2e:20:df:7c:a6:59:
                    2c:a7:8d:76:0d:9c:25:f0:fe:7b:1a:3b:27:5c:c5:
                    89:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:28:22:23:85:52:A0:49:F0:EE:14:41:24:82:8B:A3:21:9B:E7:7C
            X509v3 Authority Key Identifier:
                keyid:7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/VSgiI4VSoEnw7hRBJIKLoyGb53w.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  221.170.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         09:f0:d9:da:8c:d9:d9:79:93:d6:7b:07:fe:c2:98:80:a0:51:
         1c:25:0b:3c:00:53:24:5d:44:64:2d:27:97:44:f8:05:2f:81:
         33:72:37:7b:ec:d5:a5:e6:dd:bf:16:35:3a:50:32:46:5c:00:
         3c:08:dc:22:15:7d:c7:43:53:53:0f:72:5b:8a:8b:c8:26:7a:
         a6:98:a6:6b:5d:8f:76:8b:76:6b:32:bf:3b:db:4a:c6:82:4c:
         1b:4d:0d:44:ec:55:f0:29:bd:65:80:88:67:7c:30:64:d7:c7:
         58:2c:ff:6d:c4:4f:6d:ba:6a:6a:d4:09:52:f6:ff:a0:2b:2c:
         71:66:2a:75:cb:43:af:f9:a4:35:1a:08:65:67:fa:68:ab:aa:
         0e:54:9a:7c:4c:a6:ee:9d:4e:d2:e6:0f:59:d4:85:4c:e7:bb:
         50:e7:12:ad:a7:83:85:4c:4d:08:ad:7c:93:55:61:07:0f:22:
         00:3a:65:cd:f6:71:5b:11:e4:48:f9:16:e1:6c:54:d3:fb:ae:
         8a:c2:cc:81:ca:61:c2:1e:cb:ce:54:81:f2:42:d0:c7:ad:91:
         b5:b7:8c:d8:0d:65:b1:ef:c9:2b:30:f9:7b:bb:dd:a7:44:50:
         36:fa:4a:58:7e:20:da:d3:02:a1:31:69:6f:8d:4e:91:e4:c6:
         71:41:e0:ca
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICAKkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoN0M2
MDI5NUM4NUZGMzdFMkRDRjc1QUYwMTRENDRBRDNCRjhDMzNBNDAeFw0yNDA1MzEw
MTMxNDlaFw0yNTA1MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDU1MjgyMjIzODU1MkEw
NDlGMEVFMTQ0MTI0ODI4QkEzMjE5QkU3N0MwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC5GatC5sP7F8HyI9LFE9nAdzdow6syinkGwkz/jHjiZeT7iXau
UxlEg0NOfaoGeYcqdSdA4oCLJec8phR+EIm1G0CTfCcLcT1eycMNE0J91QsChiu8
C6nvKYga8DHQmWCMDzRXNXk0GxSV/mb30UvHMMOZTbwo+NdCkxf66TrCzufqlQXh
qvXEdswibzMYCX3QiUVHYm+RQsbKaNOpntLuplnahmznK/jnFApXe6nAd5p6RGL/
AaXP9qtmHcOmKzUfnoHh7c3/X81nsn1VJN6QaZ9/W35dBgXTV63DWD65N2Wo50MU
jQ+4cS4g33ymWSynjXYNnCXw/nsaOydcxYlvAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQUVSgiI4VSoEnw7hRBJIKLoyGb53wwHwYDVR0jBBgwFoAUfGApXIX/N+Lc91rw
FNRK07+MM6QwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzkzOS9mR0FwWElYX04tTGM5MXJ3Rk5SSzA3LU1NNlEuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9mR0FwWElYX04tTGM5MXJ3Rk5SSzA3
LU1NNlEuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvOTM5L1ZTZ2lJNFZTb0VudzdoUkJKSUtMb3lHYjUzdy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwHdqjANBgkqhkiG9w0BAQsFAAOCAQEACfDZ2ozZ2XmT1nsH/sKYgKBRHCUL
PABTJF1EZC0nl0T4BS+BM3I3e+zVpebdvxY1OlAyRlwAPAjcIhV9x0NTUw9yW4qL
yCZ6ppima12Pdot2azK/O9tKxoJMG00NROxV8Cm9ZYCIZ3wwZNfHWCz/bcRPbbpq
atQJUvb/oCsscWYqdctDr/mkNRoIZWf6aKuqDlSafEym7p1O0uYPWdSFTOe7UOcS
raeDhUxNCK18k1VhBw8iADplzfZxWxHkSPkW4WxU0/uuisLMgcphwh7LzlSB8kLQ
x62RtbeM2A1lse/JKzD5e7vdp0RQNvpKWH4g2tMCoTFpb41OkeTGcUHgyg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:50 2024 by rpki-client on console-ams.rpki-client.org