Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/990/Fk6uzidgdP9Zu6x-v_ISIxiQNaY.roa
File:                     Fk6uzidgdP9Zu6x-v_ISIxiQNaY.roa (raw, json)
Hash identifier:          En5QiPBARsKVCP9f1GHT+QYvMZLHyI4aQBprk6TCXLY=
Subject key identifier:   16:4E:AE:CE:27:60:74:FF:59:BB:AC:7E:BF:F2:12:23:18:90:35:A6
Certificate issuer:       /CN=42E32457C16BA874216A8F5DBB0D335BD148CB31
Certificate serial:       30
Authority key identifier: 42:E3:24:57:C1:6B:A8:74:21:6A:8F:5D:BB:0D:33:5B:D1:48:CB:31
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QuMkV8FrqHQhao9duw0zW9FIyzE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/Fk6uzidgdP9Zu6x-v_ISIxiQNaY.roa
Signing time:             Sat 01 Jun 2024 06:45:19 +0000
ROA not before:           Sat 01 Jun 2024 06:45:19 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     131965
IP address blocks:        202.240.141.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/QuMkV8FrqHQhao9duw0zW9FIyzE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/QuMkV8FrqHQhao9duw0zW9FIyzE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QuMkV8FrqHQhao9duw0zW9FIyzE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 14:09:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48 (0x30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42E32457C16BA874216A8F5DBB0D335BD148CB31
        Validity
            Not Before: Jun  1 06:45:19 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=164EAECE276074FF59BBAC7EBFF21223189035A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e3:b3:e2:9e:1d:04:de:b9:78:0f:6e:25:f1:
                    0b:c8:6e:6a:9c:40:6e:90:5b:36:3f:87:3e:97:29:
                    47:99:5a:57:fa:27:a2:53:44:86:83:ce:12:ce:b7:
                    c4:97:45:bc:55:e3:bb:f6:be:6e:09:17:71:0b:72:
                    e7:c0:95:65:4c:e3:5c:36:55:aa:82:07:93:3e:03:
                    cc:76:b1:96:93:1d:6a:c4:ae:f2:83:71:01:a8:a9:
                    82:15:3c:1e:6b:e8:23:c9:0c:66:0b:4c:05:ff:5a:
                    f0:db:e3:b1:25:43:eb:df:09:52:d8:94:8e:bd:f6:
                    8a:1b:b1:71:c7:c2:c4:f8:24:a6:38:91:cd:66:3e:
                    57:4d:c8:0f:c5:46:8f:63:7e:25:3b:2a:f1:20:1c:
                    f9:d8:cb:fd:17:98:50:02:72:24:ba:21:7d:ff:b9:
                    40:f6:2c:ed:e2:7d:75:ae:eb:2a:f5:65:f4:e3:66:
                    76:8c:9b:e9:9f:45:9c:ba:a5:ec:01:0c:1e:4f:d4:
                    2b:08:45:20:0d:13:7b:eb:4a:f1:f7:f2:93:1d:c1:
                    a4:67:8d:ce:5b:77:d8:8d:65:1e:3e:28:fe:b8:17:
                    1b:ec:7d:30:d5:34:97:ef:3f:6f:a5:a7:1b:75:cf:
                    0c:6d:7c:e9:f1:63:bd:36:26:c1:5a:01:c9:8b:f4:
                    eb:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:4E:AE:CE:27:60:74:FF:59:BB:AC:7E:BF:F2:12:23:18:90:35:A6
            X509v3 Authority Key Identifier:
                keyid:42:E3:24:57:C1:6B:A8:74:21:6A:8F:5D:BB:0D:33:5B:D1:48:CB:31

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/QuMkV8FrqHQhao9duw0zW9FIyzE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QuMkV8FrqHQhao9duw0zW9FIyzE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/Fk6uzidgdP9Zu6x-v_ISIxiQNaY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.240.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:12:b5:3b:39:1e:ce:77:54:15:2a:1d:8d:07:79:4f:d4:b9:
         35:38:95:1a:34:c5:32:4b:bc:d8:1e:fe:bf:3b:a0:7c:5f:65:
         71:17:c7:c3:c2:3b:72:14:d6:6a:22:2b:ea:5b:04:1d:32:57:
         96:df:fe:d4:35:a3:ed:e9:5a:ea:21:0b:31:7d:f7:c6:f1:9d:
         fe:26:58:de:46:c3:f5:73:c9:48:30:05:0c:1e:a2:18:90:2f:
         70:0b:4a:a8:a3:2f:9e:dc:b1:84:38:e7:c7:d5:71:9c:ce:36:
         a6:ac:73:85:2b:40:31:17:ca:f5:e7:5f:50:54:22:47:a4:4c:
         3d:8a:50:94:e6:e5:6b:12:04:26:b5:19:11:4b:99:ec:82:15:
         7f:a8:fe:9e:cd:29:1f:37:80:92:4f:51:44:17:40:d9:e1:a4:
         10:bb:8b:7d:13:52:12:b0:43:4f:ca:c1:60:d4:7b:78:25:f7:
         bf:24:6b:e0:db:c2:82:f6:fc:d2:f0:6c:0a:be:f2:db:58:e6:
         78:b6:f3:76:cb:35:33:fb:8e:94:36:b0:ec:e8:f8:e5:68:cd:
         00:1d:a6:10:13:1c:84:a2:16:66:ba:71:70:27:78:ee:26:aa:
         fd:10:66:f5:24:32:04:5e:6a:3e:15:09:38:46:c8:68:ef:d0:
         25:a5:2a:7f
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBMDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0MkUz
MjQ1N0MxNkJBODc0MjE2QThGNURCQjBEMzM1QkQxNDhDQjMxMB4XDTI0MDYwMTA2
NDUxOVoXDTI1MDUxNTAxMzAwM1owMzExMC8GA1UEAxMoMTY0RUFFQ0UyNzYwNzRG
RjU5QkJBQzdFQkZGMjEyMjMxODkwMzVBNjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAN7js+KeHQTeuXgPbiXxC8huapxAbpBbNj+HPpcpR5laV/onolNE
hoPOEs63xJdFvFXju/a+bgkXcQty58CVZUzjXDZVqoIHkz4DzHaxlpMdasSu8oNx
AaipghU8HmvoI8kMZgtMBf9a8NvjsSVD698JUtiUjr32ihuxccfCxPgkpjiRzWY+
V03ID8VGj2N+JTsq8SAc+djL/ReYUAJyJLohff+5QPYs7eJ9da7rKvVl9ONmdoyb
6Z9FnLql7AEMHk/UKwhFIA0Te+tK8ffykx3BpGeNzlt32I1lHj4o/rgXG+x9MNU0
l+8/b6WnG3XPDG186fFjvTYmwVoByYv06xMCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBQWTq7OJ2B0/1m7rH6/8hIjGJA1pjAfBgNVHSMEGDAWgBRC4yRXwWuodCFqj127
DTNb0UjLMTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTkwL1F1TWtWOEZycUhRaGFvOWR1dzB6VzlGSXl6RS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1F1TWtWOEZycUhRaGFvOWR1dzB6VzlG
SXl6RS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC85OTAvRms2dXppZGdkUDladTZ4LXZfSVNJeGlRTmFZLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAMrwjTANBgkqhkiG9w0BAQsFAAOCAQEAURK1OzkezndUFSodjQd5T9S5NTiV
GjTFMku82B7+vzugfF9lcRfHw8I7chTWaiIr6lsEHTJXlt/+1DWj7ela6iELMX33
xvGd/iZY3kbD9XPJSDAFDB6iGJAvcAtKqKMvntyxhDjnx9VxnM42pqxzhStAMRfK
9edfUFQiR6RMPYpQlOblaxIEJrUZEUuZ7IIVf6j+ns0pHzeAkk9RRBdA2eGkELuL
fRNSErBDT8rBYNR7eCX3vyRr4NvCgvb80vBsCr7y21jmeLbzdss1M/uOlDaw7Oj4
5WjNAB2mEBMchKIWZrpxcCd47iaq/RBm9SQyBF5qPhUJOEbIaO/QJaUqfw==
-----END CERTIFICATE-----
Generated at Mon Jun 17 14:52:22 2024 by rpki-client on console-ams.rpki-client.org