Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/984/g-EIykDz9PkXt2C3uoXKwrUrEhM.roa
File:                     g-EIykDz9PkXt2C3uoXKwrUrEhM.roa (raw, json)
Hash identifier:          YT5xyEsTtn7qyRKw8pKeRkQ/lt3s74814FLCivX5y64=
Subject key identifier:   83:E1:08:CA:40:F3:F4:F9:17:B7:60:B7:BA:85:CA:C2:B5:2B:12:13
Certificate issuer:       /CN=37D74CF78B0031D2AA5C9AED388E7C0438C61692
Certificate serial:       13
Authority key identifier: 37:D7:4C:F7:8B:00:31:D2:AA:5C:9A:ED:38:8E:7C:04:38:C6:16:92
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/N9dM94sAMdKqXJrtOI58BDjGFpI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/984/g-EIykDz9PkXt2C3uoXKwrUrEhM.roa
Signing time:             Fri 01 Sep 2023 01:32:45 +0000
ROA not before:           Fri 01 Sep 2023 01:32:45 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     45677
IP address blocks:        103.251.116.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/984/N9dM94sAMdKqXJrtOI58BDjGFpI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/984/N9dM94sAMdKqXJrtOI58BDjGFpI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/N9dM94sAMdKqXJrtOI58BDjGFpI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Jun 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19 (0x13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37D74CF78B0031D2AA5C9AED388E7C0438C61692
        Validity
            Not Before: Sep  1 01:32:45 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=83E108CA40F3F4F917B760B7BA85CAC2B52B1213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ef:b5:ab:45:b0:b0:84:6c:9f:08:ea:df:1b:
                    7e:3c:84:97:37:fc:e8:06:e6:fc:d5:da:8f:7d:05:
                    4e:58:94:c0:d1:ed:6c:36:30:d9:aa:96:d1:d8:c2:
                    e7:e9:f3:37:d9:af:65:a0:67:53:51:eb:02:89:d8:
                    01:fe:8a:8f:52:07:7a:85:0b:39:27:5c:07:e2:9d:
                    fd:8b:9e:db:48:2f:c8:70:05:29:f4:0e:b0:2f:4b:
                    84:74:e2:89:c5:26:d4:06:04:20:87:2f:2c:b8:63:
                    34:1f:5a:0c:50:79:68:56:5a:e1:bc:09:95:91:e6:
                    26:14:87:94:66:f8:81:0e:58:e6:d5:96:1b:48:6d:
                    51:3f:32:04:af:65:48:49:0f:7f:f3:28:61:1d:59:
                    09:df:ec:32:4e:01:30:55:95:eb:d4:18:9f:7f:1f:
                    59:4d:e5:cf:dc:9b:87:d8:3c:36:cf:78:0f:b8:03:
                    7e:b7:15:3e:95:fc:2a:b3:e2:29:13:e9:6a:49:6b:
                    e2:95:eb:eb:43:63:2c:96:50:f4:4b:77:bf:c4:ad:
                    ac:9a:c9:8b:14:a1:b5:89:02:d0:b4:59:ef:25:e4:
                    02:80:5c:17:ba:fa:6e:08:38:55:58:d9:89:03:ed:
                    18:5e:df:cd:a5:64:62:20:9c:ef:64:44:0a:00:4a:
                    b1:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:E1:08:CA:40:F3:F4:F9:17:B7:60:B7:BA:85:CA:C2:B5:2B:12:13
            X509v3 Authority Key Identifier:
                keyid:37:D7:4C:F7:8B:00:31:D2:AA:5C:9A:ED:38:8E:7C:04:38:C6:16:92

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/984/N9dM94sAMdKqXJrtOI58BDjGFpI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/N9dM94sAMdKqXJrtOI58BDjGFpI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/984/g-EIykDz9PkXt2C3uoXKwrUrEhM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.251.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:11:e1:3a:c0:20:9f:9e:42:1a:cc:25:6f:19:d9:2c:b7:29:
         e9:1e:46:1f:80:65:da:39:af:4a:49:80:b8:fe:8a:29:4d:e0:
         f9:fa:18:6f:f2:d1:0b:f2:46:f0:52:ee:7f:dd:9a:9a:67:eb:
         96:0c:c6:a7:2a:d7:4b:e0:5d:58:58:c4:49:13:ba:44:ca:ed:
         49:52:ce:fe:d0:e9:5a:9e:fb:03:7e:7c:3c:f7:34:e3:04:55:
         41:96:2d:cb:ea:16:29:74:5b:bb:5e:20:24:d6:a0:8b:fd:05:
         e7:5d:ff:67:cc:a3:40:22:0e:f7:cd:89:9c:32:86:4e:55:9c:
         af:5a:59:a1:49:51:e5:d7:3f:cb:73:6f:62:f6:d2:e2:9a:59:
         33:65:26:aa:75:83:77:4d:9c:4e:94:1c:02:b1:d1:a3:bb:5e:
         38:3b:ac:7e:a2:45:04:23:84:11:03:f7:94:39:d3:cf:fc:b9:
         56:26:aa:64:d2:f2:ae:46:1f:f9:02:fe:c8:ea:6b:b1:5e:7e:
         63:02:72:d3:e1:6d:67:16:96:6d:de:44:62:09:c2:84:3e:60:
         4d:04:87:cc:ea:50:de:ef:23:40:4c:d6:db:ab:66:b2:31:6c:
         bd:32:fd:3c:c8:c3:8c:56:bc:be:cb:c8:a4:8f:ce:c0:ab:dc:
         78:63:dc:9c
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBEzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzN0Q3
NENGNzhCMDAzMUQyQUE1QzlBRUQzODhFN0MwNDM4QzYxNjkyMB4XDTIzMDkwMTAx
MzI0NVoXDTI0MDgxNDAxMzAwMlowMzExMC8GA1UEAxMoODNFMTA4Q0E0MEYzRjRG
OTE3Qjc2MEI3QkE4NUNBQzJCNTJCMTIxMzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMHvtatFsLCEbJ8I6t8bfjyElzf86Abm/NXaj30FTliUwNHtbDYw
2aqW0djC5+nzN9mvZaBnU1HrAonYAf6Kj1IHeoULOSdcB+Kd/Yue20gvyHAFKfQO
sC9LhHTiicUm1AYEIIcvLLhjNB9aDFB5aFZa4bwJlZHmJhSHlGb4gQ5Y5tWWG0ht
UT8yBK9lSEkPf/MoYR1ZCd/sMk4BMFWV69QYn38fWU3lz9ybh9g8Ns94D7gDfrcV
PpX8KrPiKRPpaklr4pXr60NjLJZQ9Et3v8StrJrJixShtYkC0LRZ7yXkAoBcF7r6
bgg4VVjZiQPtGF7fzaVkYiCc72RECgBKsbUCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBSD4QjKQPP0+Re3YLe6hcrCtSsSEzAfBgNVHSMEGDAWgBQ310z3iwAx0qpcmu04
jnwEOMYWkjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTg0L045ZE05NHNBTWRLcVhKcnRPSTU4QkRqR0ZwSS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL045ZE05NHNBTWRLcVhKcnRPSTU4QkRq
R0ZwSS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC85ODQvZy1FSXlrRHo5UGtYdDJDM3VvWEt3clVyRWhNLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAmf7dDANBgkqhkiG9w0BAQsFAAOCAQEARBHhOsAgn55CGswlbxnZLLcp6R5G
H4Bl2jmvSkmAuP6KKU3g+foYb/LRC/JG8FLuf92ammfrlgzGpyrXS+BdWFjESRO6
RMrtSVLO/tDpWp77A358PPc04wRVQZYty+oWKXRbu14gJNagi/0F513/Z8yjQCIO
982JnDKGTlWcr1pZoUlR5dc/y3NvYvbS4ppZM2UmqnWDd02cTpQcArHRo7teODus
fqJFBCOEEQP3lDnTz/y5ViaqZNLyrkYf+QL+yOprsV5+YwJy0+FtZxaWbd5EYgnC
hD5gTQSHzOpQ3u8jQEzW26tmsjFsvTL9PMjDjFa8vsvIpI/OwKvceGPcnA==
-----END CERTIFICATE-----
Generated at Fri Jun 14 04:10:43 2024 by rpki-client on console-fra.rpki-client.org