Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/nx0EHWCduSvlODq9FqZ8G2aLAxw.roa
File:                     nx0EHWCduSvlODq9FqZ8G2aLAxw.roa (raw, json)
Hash identifier:          Ri35NgLnfR/kFQMRkWfJI68VmUr4bW8FAMzGwStYdeY=
Subject key identifier:   9F:1D:04:1D:60:9D:B9:2B:E5:38:3A:BD:16:A6:7C:1B:66:8B:03:1C
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       01F9
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/nx0EHWCduSvlODq9FqZ8G2aLAxw.roa
Signing time:             Sat 31 Aug 2024 01:29:05 +0000
ROA not before:           Sat 31 Aug 2024 01:29:06 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     9371
IP address blocks:        133.167.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Oct 2024 13:34:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 505 (0x1f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Aug 31 01:29:06 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=9F1D041D609DB92BE5383ABD16A67C1B668B031C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:dc:f1:a8:68:10:4a:e1:3d:ca:66:9e:03:a9:
                    c2:62:21:4a:35:e0:a6:2a:6a:34:29:88:2c:41:6c:
                    d4:f5:12:28:03:eb:43:fa:60:32:42:62:5e:a1:fa:
                    e1:db:21:eb:40:5a:01:19:06:d2:b6:c6:df:dc:db:
                    d9:1b:44:3b:1c:ea:80:0b:18:1f:5d:55:62:1f:bc:
                    93:9c:51:a5:4c:23:a9:d3:05:28:23:67:51:59:55:
                    aa:3f:08:0f:82:61:fe:15:14:ce:fc:0f:70:f2:94:
                    65:16:cc:22:74:5b:33:ff:07:9a:4d:45:24:ac:bd:
                    ad:b7:ea:bc:fd:9a:06:f1:ea:6b:fd:30:69:6a:26:
                    e8:aa:ba:d5:ad:a0:e6:02:2e:c7:7d:49:da:f9:31:
                    ff:24:0f:c2:71:97:66:4d:ac:49:44:f2:91:41:97:
                    ca:fb:82:1d:36:ce:88:20:28:64:1d:ed:b3:c9:48:
                    08:57:93:2f:21:6f:b2:54:37:92:d1:80:bf:df:79:
                    ee:6d:91:41:41:d0:83:9b:63:0d:2d:28:4f:fd:46:
                    f0:d8:be:3e:54:ec:4e:cb:84:9e:2e:02:b7:8d:10:
                    27:96:6a:34:c5:12:c9:59:08:ff:cd:1c:c9:53:04:
                    b3:3f:1b:b9:40:a8:03:42:52:73:a2:ef:6c:89:0d:
                    20:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:1D:04:1D:60:9D:B9:2B:E5:38:3A:BD:16:A6:7C:1B:66:8B:03:1C
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/nx0EHWCduSvlODq9FqZ8G2aLAxw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.167.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         ce:01:30:c7:58:0e:45:83:f1:d7:c5:88:9a:23:df:4e:5e:44:
         d1:12:f1:7f:6c:67:c5:4c:8e:91:fd:40:15:50:44:df:75:e8:
         95:71:95:c1:6e:b5:2f:62:60:4d:e6:1a:1b:fa:f3:05:fd:6f:
         bc:43:0b:51:93:2b:e1:28:6b:fa:af:45:cb:21:54:fa:0b:98:
         e4:8d:7f:97:61:fa:c6:a8:31:35:d7:6d:f6:29:83:17:28:e5:
         da:d5:b8:39:21:69:30:64:f7:53:ae:1e:8d:89:8e:c7:69:dd:
         f9:57:1e:b3:95:63:90:db:ee:8f:22:b1:77:25:46:89:c1:cf:
         cc:54:b7:e0:29:db:1a:44:e5:01:ce:27:26:cc:3f:76:b0:07:
         a3:7b:4c:6b:4b:b4:97:b1:53:19:8e:a8:93:50:fb:17:4f:cd:
         36:12:aa:ef:af:85:43:57:a9:0c:18:cd:60:6f:b7:2c:86:89:
         3e:81:35:b0:b6:c3:0b:7e:24:0c:28:eb:87:d0:3e:e6:0c:1a:
         6e:cd:9c:e2:d0:bf:79:20:24:56:31:6c:34:b3:0f:d7:45:ea:
         56:52:25:bc:a3:39:01:16:94:9e:4e:79:43:7a:7b:eb:41:03:
         f4:80:17:ef:3f:93:16:85:fa:a1:dd:d4:43:b8:3d:f2:35:05:
         95:56:55:8d
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgICAfkwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjAz
MjBGNkQwOURCMThDMEY3MEIzNTRBM0Q4NzQ1MEY3MEU2RDcxQTAeFw0yNDA4MzEw
MTI5MDZaFw0yNTA4MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDlGMUQwNDFENjA5REI5
MkJFNTM4M0FCRDE2QTY3QzFCNjY4QjAzMUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDN3PGoaBBK4T3KZp4DqcJiIUo14KYqajQpiCxBbNT1EigD60P6
YDJCYl6h+uHbIetAWgEZBtK2xt/c29kbRDsc6oALGB9dVWIfvJOcUaVMI6nTBSgj
Z1FZVao/CA+CYf4VFM78D3DylGUWzCJ0WzP/B5pNRSSsva236rz9mgbx6mv9MGlq
JuiqutWtoOYCLsd9Sdr5Mf8kD8Jxl2ZNrElE8pFBl8r7gh02zoggKGQd7bPJSAhX
ky8hb7JUN5LRgL/fee5tkUFB0IObYw0tKE/9RvDYvj5U7E7LhJ4uAreNECeWajTF
EslZCP/NHMlTBLM/G7lAqANCUnOi72yJDSBrAgMBAAGjggInMIICIzAdBgNVHQ4E
FgQUnx0EHWCduSvlODq9FqZ8G2aLAxwwHwYDVR0jBBgwFoAUIDIPbQnbGMD3CzVK
PYdFD3Dm1xowGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBoBgNVHR8EYTBfMF2g
W6BZhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEwMjQ3L0lESVBiUW5iR01EM0N6VktQWWRGRDNEbTF4by5jcmwwbQYI
KwYBBQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9y
eS5uaWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0lESVBiUW5iR01EM0N6VktQWWRG
RDNEbTF4by5jZXIwDgYDVR0PAQH/BAQDAgeAMIG9BggrBgEFBQcBCwSBsDCBrTBj
BggrBgEFBQcwC4ZXcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2Fw
L0E5MUE3MzgxMDAwMC8xMDI0Ny9ueDBFSFdDZHVTdmxPRHE5RnFaOEcyYUxBeHcu
cm9hMEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQu
anAvcnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTAL
BAIAATAFAwMAhacwDQYJKoZIhvcNAQELBQADggEBAM4BMMdYDkWD8dfFiJoj305e
RNES8X9sZ8VMjpH9QBVQRN916JVxlcFutS9iYE3mGhv68wX9b7xDC1GTK+Eoa/qv
RcshVPoLmOSNf5dh+saoMTXXbfYpgxco5drVuDkhaTBk91OuHo2Jjsdp3flXHrOV
Y5Db7o8isXclRonBz8xUt+Ap2xpE5QHOJybMP3awB6N7TGtLtJexUxmOqJNQ+xdP
zTYSqu+vhUNXqQwYzWBvtyyGiT6BNbC2wwt+JAwo64fQPuYMGm7NnOLQv3kgJFYx
bDSzD9dF6lZSJbyjOQEWlJ5OeUN6e+tBA/SAF+8/kxaF+qHd1EO4PfI1BZVWVY0=
-----END CERTIFICATE-----
Generated at Fri Sep 27 05:00:11 2024 by rpki-client on console-fra.rpki-client.org