Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/997/59YD1688dwqrpuMTo5UctqdsPHo.roa
File:                     59YD1688dwqrpuMTo5UctqdsPHo.roa (raw, json)
Hash identifier:          kbOnxgQ667wKQr1Gou1i2OPNeGaU0IeNvHcz0a3Tyt8=
Subject key identifier:   E7:D6:03:D7:AF:3C:77:0A:AB:A6:E3:13:A3:95:1C:B6:A7:6C:3C:7A
Certificate issuer:       /CN=B7187C4D4BDDD435728B412888E0655334208E0B
Certificate serial:       39
Authority key identifier: B7:18:7C:4D:4B:DD:D4:35:72:8B:41:28:88:E0:65:53:34:20:8E:0B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/txh8TUvd1DVyi0EoiOBlUzQgjgs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/997/59YD1688dwqrpuMTo5UctqdsPHo.roa
Signing time:             Fri 01 Sep 2023 01:29:51 +0000
ROA not before:           Fri 01 Sep 2023 01:29:51 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     17707
IP address blocks:        218.223.16.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/997/txh8TUvd1DVyi0EoiOBlUzQgjgs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/997/txh8TUvd1DVyi0EoiOBlUzQgjgs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/txh8TUvd1DVyi0EoiOBlUzQgjgs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57 (0x39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7187C4D4BDDD435728B412888E0655334208E0B
        Validity
            Not Before: Sep  1 01:29:51 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=E7D603D7AF3C770AABA6E313A3951CB6A76C3C7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:2c:c2:98:b8:94:d4:1e:62:5e:e6:2c:94:46:
                    dc:06:97:a8:0b:7a:60:d2:0c:37:80:db:3c:63:81:
                    74:ee:06:3f:67:7d:17:c0:6c:78:db:02:98:b3:62:
                    d0:dd:8a:25:f2:d6:cb:cc:29:11:a5:59:e0:26:87:
                    d6:87:35:84:61:99:6b:6b:4a:a7:08:29:ba:dd:78:
                    3d:48:06:63:b1:4f:de:ea:fd:a7:75:ec:cc:09:fd:
                    81:69:90:b9:5d:4c:43:f6:c1:94:dc:34:13:74:68:
                    c9:ef:52:b4:b9:36:77:6c:17:ab:c5:b2:03:94:01:
                    35:99:ac:56:4c:f7:1a:ae:73:7e:1a:7d:86:ec:e0:
                    b6:ac:78:b2:3f:82:5d:a5:2c:97:24:e1:81:ca:e4:
                    a5:ba:23:52:13:0a:61:20:03:d0:3e:a0:69:ff:47:
                    dd:6b:b1:a4:33:d5:e4:42:02:ab:c0:40:1b:21:a6:
                    95:15:27:f6:4c:61:3a:e5:bf:6d:6b:53:14:7e:24:
                    59:59:d6:4d:8f:e3:2d:fb:bf:91:51:72:e7:fc:e3:
                    eb:fe:11:91:fb:3d:1f:76:a1:b2:52:f1:39:2a:49:
                    a7:0e:be:4d:7a:14:6d:3f:7e:81:e0:b1:9f:b2:08:
                    bc:2c:52:b4:70:9c:32:20:50:cd:8e:44:3d:5a:ae:
                    5c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:D6:03:D7:AF:3C:77:0A:AB:A6:E3:13:A3:95:1C:B6:A7:6C:3C:7A
            X509v3 Authority Key Identifier:
                keyid:B7:18:7C:4D:4B:DD:D4:35:72:8B:41:28:88:E0:65:53:34:20:8E:0B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/997/txh8TUvd1DVyi0EoiOBlUzQgjgs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/txh8TUvd1DVyi0EoiOBlUzQgjgs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/997/59YD1688dwqrpuMTo5UctqdsPHo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.223.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b1:20:18:b4:7d:3e:0c:d8:7b:34:e7:18:ce:0c:05:a4:91:03:
         03:c3:2b:c8:e9:33:f8:84:e3:71:d7:a2:03:2b:41:13:15:34:
         47:27:5e:ac:0d:67:62:a7:2f:d0:ff:58:43:ea:75:0a:3f:0f:
         2a:50:af:d2:69:26:93:44:be:99:8e:84:9d:35:9c:d5:e4:d8:
         5b:88:0c:28:34:63:c5:79:91:97:49:ab:b6:05:98:40:63:d9:
         ed:66:5a:1b:20:8f:3b:29:46:ad:7a:c8:70:0c:8f:b5:68:68:
         4e:d0:2f:8f:65:71:3e:b9:05:59:39:e2:e8:e4:29:0c:8b:de:
         32:40:61:32:ed:36:1b:b7:29:0f:fd:6e:50:a6:90:74:fd:55:
         fa:84:25:c6:64:05:79:e9:81:8a:b4:a7:62:49:32:b8:74:80:
         bc:fd:91:b4:63:de:cf:15:18:91:3a:dd:44:2e:aa:01:18:61:
         8b:c4:ae:97:a2:19:0c:8a:5d:f6:86:2b:82:70:f5:58:02:37:
         7b:41:f0:77:4f:da:ad:d1:a6:67:f5:93:bc:17:9d:6d:99:05:
         88:1c:ea:ce:ef:a1:b1:7d:56:4a:83:b8:c2:50:cb:62:2e:43:
         f1:95:bc:4a:e2:58:54:dc:49:78:39:6b:37:3a:03:96:49:9a:
         a5:3e:f7:0f
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBOTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCNzE4
N0M0RDRCRERENDM1NzI4QjQxMjg4OEUwNjU1MzM0MjA4RTBCMB4XDTIzMDkwMTAx
Mjk1MVoXDTI0MDgxNDAxMzAwMlowMzExMC8GA1UEAxMoRTdENjAzRDdBRjNDNzcw
QUFCQTZFMzEzQTM5NTFDQjZBNzZDM0M3QTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANIswpi4lNQeYl7mLJRG3AaXqAt6YNIMN4DbPGOBdO4GP2d9F8Bs
eNsCmLNi0N2KJfLWy8wpEaVZ4CaH1oc1hGGZa2tKpwgput14PUgGY7FP3ur9p3Xs
zAn9gWmQuV1MQ/bBlNw0E3Roye9StLk2d2wXq8WyA5QBNZmsVkz3Gq5zfhp9huzg
tqx4sj+CXaUslyThgcrkpbojUhMKYSAD0D6gaf9H3WuxpDPV5EICq8BAGyGmlRUn
9kxhOuW/bWtTFH4kWVnWTY/jLfu/kVFy5/zj6/4Rkfs9H3ahslLxOSpJpw6+TXoU
bT9+geCxn7IIvCxStHCcMiBQzY5EPVquXGECAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBTn1gPXrzx3Cqum4xOjlRy2p2w8ejAfBgNVHSMEGDAWgBS3GHxNS93UNXKLQSiI
4GVTNCCOCzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTk3L3R4aDhUVXZkMURWeWkwRW9pT0JsVXpRZ2pncy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3R4aDhUVXZkMURWeWkwRW9pT0JsVXpR
Z2pncy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC85OTcvNTlZRDE2ODhkd3FycHVNVG81VWN0cWRzUEhvLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBNrfEDANBgkqhkiG9w0BAQsFAAOCAQEAsSAYtH0+DNh7NOcYzgwFpJEDA8Mr
yOkz+ITjcdeiAytBExU0RyderA1nYqcv0P9YQ+p1Cj8PKlCv0mkmk0S+mY6EnTWc
1eTYW4gMKDRjxXmRl0mrtgWYQGPZ7WZaGyCPOylGrXrIcAyPtWhoTtAvj2VxPrkF
WTni6OQpDIveMkBhMu02G7cpD/1uUKaQdP1V+oQlxmQFeemBirSnYkkyuHSAvP2R
tGPezxUYkTrdRC6qARhhi8Sul6IZDIpd9oYrgnD1WAI3e0Hwd0/ardGmZ/WTvBed
bZkFiBzqzu+hsX1WSoO4wlDLYi5D8ZW8SuJYVNxJeDlrNzoDlkmapT73Dw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 15:06:52 2024 by rpki-client on console-ams.rpki-client.org