Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/958/-ELvMbYOF1l4X4oDTnGb8MMIVtk.roa
File:                     -ELvMbYOF1l4X4oDTnGb8MMIVtk.roa (raw, json)
Hash identifier:          SfwDawpBfwqv1yf5AD/IUX9aIOqBppemZQ1JxeaZlNM=
Subject key identifier:   F8:42:EF:31:B6:0E:17:59:78:5F:8A:03:4E:71:9B:F0:C3:08:56:D9
Certificate issuer:       /CN=9904ECBCD85F22A2E8AE7E1F991E8345D06A9816
Certificate serial:       92
Authority key identifier: 99:04:EC:BC:D8:5F:22:A2:E8:AE:7E:1F:99:1E:83:45:D0:6A:98:16
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mQTsvNhfIqLorn4fmR6DRdBqmBY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/-ELvMbYOF1l4X4oDTnGb8MMIVtk.roa
Signing time:             Thu 29 Feb 2024 01:30:40 +0000
ROA not before:           Thu 29 Feb 2024 01:30:40 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     38631
IP address blocks:        203.104.156.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/mQTsvNhfIqLorn4fmR6DRdBqmBY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/mQTsvNhfIqLorn4fmR6DRdBqmBY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mQTsvNhfIqLorn4fmR6DRdBqmBY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 146 (0x92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9904ECBCD85F22A2E8AE7E1F991E8345D06A9816
        Validity
            Not Before: Feb 29 01:30:40 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=F842EF31B60E1759785F8A034E719BF0C30856D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:d7:6e:b0:38:52:db:5a:9e:e7:4c:05:f4:a0:
                    44:00:ab:8c:ed:ba:e4:43:ca:5d:ab:c7:e8:63:9f:
                    53:67:76:05:51:6b:87:3b:81:94:17:38:33:a5:2d:
                    06:7e:77:95:84:87:2a:ed:20:eb:4b:86:72:1a:50:
                    fe:d6:fe:04:20:b8:15:ef:70:97:fc:da:bd:33:c5:
                    2a:69:fc:29:c8:c2:fe:63:d6:4f:50:b1:43:b0:d5:
                    ef:e1:b3:26:89:d7:79:53:40:9e:02:9a:44:6b:f3:
                    ea:26:3b:5b:db:97:1a:c7:92:e5:f8:64:51:7a:0f:
                    9c:9e:21:75:51:77:8f:2c:20:18:60:26:a8:0a:0d:
                    ea:c9:f9:fe:5c:2e:fd:70:6c:b5:45:58:ca:a5:9f:
                    c3:db:d6:95:91:3c:b2:72:b8:2f:73:cb:55:38:f5:
                    d8:cc:8e:29:26:54:f8:da:da:94:70:15:58:3b:5b:
                    47:3c:16:c6:49:13:00:76:5a:69:69:64:ac:54:0b:
                    33:70:a7:75:fa:04:86:8d:33:7f:d5:4b:4f:a8:8d:
                    8a:7d:17:f8:b0:3d:ab:47:0e:3a:80:47:53:b4:26:
                    c5:e6:a7:1a:72:90:ef:e9:d1:22:39:a2:fb:03:50:
                    92:8c:9d:37:94:8c:53:3d:db:7f:ee:2f:5c:bd:ba:
                    6a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:42:EF:31:B6:0E:17:59:78:5F:8A:03:4E:71:9B:F0:C3:08:56:D9
            X509v3 Authority Key Identifier:
                keyid:99:04:EC:BC:D8:5F:22:A2:E8:AE:7E:1F:99:1E:83:45:D0:6A:98:16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/mQTsvNhfIqLorn4fmR6DRdBqmBY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mQTsvNhfIqLorn4fmR6DRdBqmBY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/-ELvMbYOF1l4X4oDTnGb8MMIVtk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.104.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:fc:86:9c:01:2a:98:f1:98:7d:cf:ab:20:8f:3e:5b:ee:a0:
         a2:ab:e6:ed:9e:a1:c6:7c:bf:95:01:6b:45:7b:ab:3e:73:b0:
         ca:83:10:b2:99:4a:f8:5c:a4:da:53:9f:43:4a:a5:86:ee:ba:
         27:1d:18:88:99:a7:be:5f:ea:d1:5c:30:b8:04:f5:c0:40:c9:
         7c:36:18:31:c4:e5:e6:92:ac:86:b2:d9:1a:0f:36:71:41:fb:
         cf:7d:b7:95:5d:d0:30:ca:9c:2e:c5:db:b2:96:67:99:18:0a:
         3a:18:57:80:9d:f3:3b:72:f7:fd:8c:a9:48:6e:5c:a0:94:ff:
         b3:0e:f1:e8:c3:c9:07:22:cd:39:c2:ba:c2:81:98:d0:30:71:
         0c:4b:76:eb:d9:ab:14:89:d1:a5:12:06:b3:2b:49:0e:85:bd:
         83:03:2f:14:b7:06:9c:95:22:a4:04:73:27:17:c2:80:44:a4:
         df:1e:ce:43:ae:39:30:ed:00:bf:58:9e:9d:30:bf:26:ef:b6:
         48:39:28:96:18:cf:bb:d1:61:48:cf:02:0c:25:e8:ef:bd:31:
         d0:34:37:88:9e:0d:52:a8:d3:c5:c1:1f:b3:4e:00:d5:de:e3:
         88:e2:a3:4b:2a:ba:02:96:78:28:68:6f:28:26:bf:bd:a0:60:
         48:e5:ed:ec
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAJIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOTkw
NEVDQkNEODVGMjJBMkU4QUU3RTFGOTkxRTgzNDVEMDZBOTgxNjAeFw0yNDAyMjkw
MTMwNDBaFw0yNTAyMTQwMTMwMDNaMDMxMTAvBgNVBAMTKEY4NDJFRjMxQjYwRTE3
NTk3ODVGOEEwMzRFNzE5QkYwQzMwODU2RDkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDa126wOFLbWp7nTAX0oEQAq4ztuuRDyl2rx+hjn1NndgVRa4c7
gZQXODOlLQZ+d5WEhyrtIOtLhnIaUP7W/gQguBXvcJf82r0zxSpp/CnIwv5j1k9Q
sUOw1e/hsyaJ13lTQJ4CmkRr8+omO1vblxrHkuX4ZFF6D5yeIXVRd48sIBhgJqgK
DerJ+f5cLv1wbLVFWMqln8Pb1pWRPLJyuC9zy1U49djMjikmVPja2pRwFVg7W0c8
FsZJEwB2WmlpZKxUCzNwp3X6BIaNM3/VS0+ojYp9F/iwPatHDjqAR1O0JsXmpxpy
kO/p0SI5ovsDUJKMnTeUjFM923/uL1y9umo/AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU+ELvMbYOF1l4X4oDTnGb8MMIVtkwHwYDVR0jBBgwFoAUmQTsvNhfIqLorn4f
mR6DRdBqmBYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzk1OC9tUVRzdk5oZklxTG9ybjRmbVI2RFJkQnFtQlkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9tUVRzdk5oZklxTG9ybjRmbVI2RFJk
QnFtQlkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvOTU4Ly1FTHZNYllPRjFsNFg0b0RUbkdiOE1NSVZ0ay5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAHLaJwwDQYJKoZIhvcNAQELBQADggEBACf8hpwBKpjxmH3PqyCPPlvuoKKr
5u2eocZ8v5UBa0V7qz5zsMqDELKZSvhcpNpTn0NKpYbuuicdGIiZp75f6tFcMLgE
9cBAyXw2GDHE5eaSrIay2RoPNnFB+899t5Vd0DDKnC7F27KWZ5kYCjoYV4Cd8zty
9/2MqUhuXKCU/7MO8ejDyQcizTnCusKBmNAwcQxLduvZqxSJ0aUSBrMrSQ6FvYMD
LxS3BpyVIqQEcycXwoBEpN8ezkOuOTDtAL9Ynp0wvybvtkg5KJYYz7vRYUjPAgwl
6O+9MdA0N4ieDVKo08XBH7NOANXe44jio0squgKWeChobygmv72gYEjl7ew=
-----END CERTIFICATE-----
Generated at Thu May 30 03:38:54 2024 by rpki-client on console-ams.rpki-client.org