Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/996/2QAMtcxOrfZUCl4J6cCb7ZR-2tg.roa
File:                     2QAMtcxOrfZUCl4J6cCb7ZR-2tg.roa (raw, json)
Hash identifier:          ttPAKY7IJs87Oog1dY/7f61qRNpgrt86FKyzf8SDxDo=
Subject key identifier:   D9:00:0C:B5:CC:4E:AD:F6:54:0A:5E:09:E9:C0:9B:ED:94:7E:DA:D8
Certificate issuer:       /CN=9260577566E47EDA0F5866CE0F4714A9198FA5F5
Certificate serial:       07
Authority key identifier: 92:60:57:75:66:E4:7E:DA:0F:58:66:CE:0F:47:14:A9:19:8F:A5:F5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kmBXdWbkftoPWGbOD0cUqRmPpfU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/996/2QAMtcxOrfZUCl4J6cCb7ZR-2tg.roa
Signing time:             Tue 23 Apr 2024 07:28:56 +0000
ROA not before:           Tue 23 Apr 2024 07:28:56 +0000
ROA not after:            Wed 23 Apr 2025 07:12:29 +0000
asID:                     45687
IP address blocks:        219.100.140.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/996/kmBXdWbkftoPWGbOD0cUqRmPpfU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/996/kmBXdWbkftoPWGbOD0cUqRmPpfU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kmBXdWbkftoPWGbOD0cUqRmPpfU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9260577566E47EDA0F5866CE0F4714A9198FA5F5
        Validity
            Not Before: Apr 23 07:28:56 2024 GMT
            Not After : Apr 23 07:12:29 2025 GMT
        Subject: CN=D9000CB5CC4EADF6540A5E09E9C09BED947EDAD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d3:a2:1c:f2:28:f4:16:28:b3:1e:a2:79:89:
                    91:fd:3b:03:69:d0:be:de:2f:eb:cb:82:7a:95:bf:
                    6d:ed:f0:5d:20:a4:10:b0:2a:57:05:ac:16:a5:dd:
                    22:aa:98:ad:57:50:d8:38:f8:33:42:d4:26:19:cb:
                    0a:14:10:95:31:2c:60:27:11:4b:e0:8d:9c:f4:44:
                    2f:c6:d3:a0:0c:b1:2b:b3:bc:ef:64:71:f1:b9:24:
                    69:0b:e3:e2:85:3e:90:f5:04:b1:ce:4f:d9:be:f4:
                    12:2a:82:bc:ff:5f:4d:9d:3d:a3:b2:40:2c:e0:1d:
                    c6:a5:c0:13:e1:4a:ea:71:17:a1:27:32:65:a0:30:
                    ee:5b:b1:ac:85:49:7e:cd:5d:4c:67:c3:5d:60:8d:
                    2b:6a:86:13:f2:01:8c:84:a9:96:f6:cf:fb:15:21:
                    3a:1c:39:17:92:e5:6a:0d:fe:0f:35:c8:04:95:7a:
                    da:94:dd:75:60:e6:18:80:74:e4:64:6c:fd:58:bc:
                    35:55:0f:36:c4:8a:47:e4:62:36:08:43:20:fe:0c:
                    50:14:08:f1:e0:12:c2:ae:e6:e6:ed:39:04:2d:e2:
                    dd:89:c3:3f:c3:f8:2a:00:39:ab:ed:b2:7b:5a:05:
                    d9:ec:19:34:f3:9a:9e:26:24:fb:44:21:f7:ff:20:
                    cf:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:00:0C:B5:CC:4E:AD:F6:54:0A:5E:09:E9:C0:9B:ED:94:7E:DA:D8
            X509v3 Authority Key Identifier:
                keyid:92:60:57:75:66:E4:7E:DA:0F:58:66:CE:0F:47:14:A9:19:8F:A5:F5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/996/kmBXdWbkftoPWGbOD0cUqRmPpfU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kmBXdWbkftoPWGbOD0cUqRmPpfU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/996/2QAMtcxOrfZUCl4J6cCb7ZR-2tg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.100.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:a3:64:13:09:a4:0c:7f:62:1a:a0:7d:23:ce:ca:71:9d:4e:
         69:70:41:2f:e0:96:7f:5b:85:eb:35:08:57:3e:14:39:37:68:
         23:c8:f7:29:4a:96:58:ed:5f:35:11:08:f6:6b:53:9b:fd:ef:
         4d:51:ca:01:d9:c6:0a:b7:37:10:5d:af:5b:e2:0e:63:c5:5c:
         d8:ad:98:8c:77:ab:1e:19:37:1e:45:9d:af:a7:b7:fa:34:7d:
         74:40:15:5f:30:5f:18:53:8d:43:ab:17:41:8a:80:b1:34:6b:
         89:ab:69:e7:3f:39:cd:4f:3f:dd:47:3f:69:7d:31:76:c3:36:
         2c:bf:18:1d:87:db:4c:4b:5b:5d:e8:10:8b:18:d1:e1:57:ab:
         ff:18:4c:71:ab:52:45:35:d9:71:6c:93:3c:dc:5a:43:7e:0b:
         45:e2:ce:db:4d:e6:b2:f9:4f:4a:e8:39:c4:a8:64:af:eb:52:
         b4:3e:07:26:06:34:2f:40:a7:d7:3b:31:69:2c:63:ae:52:30:
         53:c6:30:35:55:dc:06:d7:02:03:7f:03:d3:03:fd:9d:8f:a5:
         6a:f2:01:1b:85:35:e3:21:ee:f2:1e:fb:89:f0:f7:81:85:52:
         cd:3d:91:5f:a8:4f:da:84:b3:c3:67:4f:1f:ad:26:ac:1a:3d:
         8f:f0:3d:8d
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBBzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5MjYw
NTc3NTY2RTQ3RURBMEY1ODY2Q0UwRjQ3MTRBOTE5OEZBNUY1MB4XDTI0MDQyMzA3
Mjg1NloXDTI1MDQyMzA3MTIyOVowMzExMC8GA1UEAxMoRDkwMDBDQjVDQzRFQURG
NjU0MEE1RTA5RTlDMDlCRUQ5NDdFREFEODCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANjTohzyKPQWKLMeonmJkf07A2nQvt4v68uCepW/be3wXSCkELAq
VwWsFqXdIqqYrVdQ2Dj4M0LUJhnLChQQlTEsYCcRS+CNnPREL8bToAyxK7O872Rx
8bkkaQvj4oU+kPUEsc5P2b70EiqCvP9fTZ09o7JALOAdxqXAE+FK6nEXoScyZaAw
7luxrIVJfs1dTGfDXWCNK2qGE/IBjISplvbP+xUhOhw5F5Llag3+DzXIBJV62pTd
dWDmGIB05GRs/Vi8NVUPNsSKR+RiNghDIP4MUBQI8eASwq7m5u05BC3i3YnDP8P4
KgA5q+2ye1oF2ewZNPOaniYk+0Qh9/8gz58CAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBTZAAy1zE6t9lQKXgnpwJvtlH7a2DAfBgNVHSMEGDAWgBSSYFd1ZuR+2g9YZs4P
RxSpGY+l9TAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTk2L2ttQlhkV2JrZnRvUFdHYk9EMGNVcVJtUHBmVS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2ttQlhkV2JrZnRvUFdHYk9EMGNVcVJt
UHBmVS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC85OTYvMlFBTXRjeE9yZlpVQ2w0SjZjQ2I3WlItMnRnLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAttkjDANBgkqhkiG9w0BAQsFAAOCAQEARqNkEwmkDH9iGqB9I87KcZ1OaXBB
L+CWf1uF6zUIVz4UOTdoI8j3KUqWWO1fNREI9mtTm/3vTVHKAdnGCrc3EF2vW+IO
Y8Vc2K2YjHerHhk3HkWdr6e3+jR9dEAVXzBfGFONQ6sXQYqAsTRriatp5z85zU8/
3Uc/aX0xdsM2LL8YHYfbTEtbXegQixjR4Ver/xhMcatSRTXZcWyTPNxaQ34LReLO
203msvlPSug5xKhkr+tStD4HJgY0L0Cn1zsxaSxjrlIwU8YwNVXcBtcCA38D0wP9
nY+lavIBG4U14yHu8h77ifD3gYVSzT2RX6hP2oSzw2dPH60mrBo9j/A9jQ==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:03:12 2025 by rpki-client