Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10699/C_EiKdq7NyVx-m0OOkvD3VAor6Q.roa
File:                     C_EiKdq7NyVx-m0OOkvD3VAor6Q.roa (raw, json)
Hash identifier:          TG91ezd+VUVdKAOEW10lPIfAAwreDeHW3Blff76wlRI=
Subject key identifier:   0B:F1:22:29:DA:BB:37:25:71:FA:6D:0E:3A:4B:C3:DD:50:28:AF:A4
Certificate issuer:       /CN=CFEA2C2AAD63BCCA4D4AC96A852140D4261597B8
Certificate serial:       54
Authority key identifier: CF:EA:2C:2A:AD:63:BC:CA:4D:4A:C9:6A:85:21:40:D4:26:15:97:B8
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/z-osKq1jvMpNSslqhSFA1CYVl7g.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10699/C_EiKdq7NyVx-m0OOkvD3VAor6Q.roa
Signing time:             Thu 29 Feb 2024 01:29:38 +0000
ROA not before:           Thu 29 Feb 2024 01:29:38 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     7671
IP address blocks:        122.100.16.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10699/z-osKq1jvMpNSslqhSFA1CYVl7g.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10699/z-osKq1jvMpNSslqhSFA1CYVl7g.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/z-osKq1jvMpNSslqhSFA1CYVl7g.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 14:09:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84 (0x54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFEA2C2AAD63BCCA4D4AC96A852140D4261597B8
        Validity
            Not Before: Feb 29 01:29:38 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=0BF12229DABB372571FA6D0E3A4BC3DD5028AFA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:e8:e2:fc:06:f6:b2:38:22:40:2d:a9:cd:96:
                    4f:da:eb:1c:40:71:3c:e9:30:95:cd:63:6e:27:e2:
                    4d:d6:0a:08:7d:1d:12:62:07:3b:a4:2e:d4:cc:e3:
                    be:d5:ec:ad:6e:3a:ca:ed:ff:97:de:07:09:6f:85:
                    82:22:16:a6:2e:32:34:9e:83:6b:76:b8:c2:63:d2:
                    d4:4b:5b:59:c7:42:99:13:87:2f:ad:9b:52:a2:5d:
                    c6:22:99:65:de:c1:ea:7d:25:d7:18:b4:03:8c:3b:
                    a4:66:0c:c6:9e:3c:73:6f:5a:c2:98:6d:61:4d:02:
                    c2:9d:25:90:ef:24:2c:af:72:66:dd:e9:9c:7f:1e:
                    ba:b5:70:9b:8b:0a:82:87:16:fc:aa:f3:08:02:7c:
                    51:34:ac:95:ef:e8:1b:17:1d:71:f8:60:41:f2:c1:
                    20:b2:b6:63:e0:c3:f3:2b:a0:dc:48:df:9d:6f:00:
                    dc:46:23:3d:33:86:fa:da:a3:52:e3:c5:fb:d2:bb:
                    d0:9e:23:ca:f1:6f:4f:0c:d7:2f:8d:59:54:e4:ba:
                    ab:37:cb:ee:5c:3c:d0:56:69:f5:e9:33:2e:c9:ed:
                    16:60:8b:69:7b:8d:e3:39:f7:d8:f5:67:0c:e8:1d:
                    46:95:df:5d:fe:7e:94:91:9b:fa:3b:96:b5:33:9a:
                    7b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:F1:22:29:DA:BB:37:25:71:FA:6D:0E:3A:4B:C3:DD:50:28:AF:A4
            X509v3 Authority Key Identifier:
                keyid:CF:EA:2C:2A:AD:63:BC:CA:4D:4A:C9:6A:85:21:40:D4:26:15:97:B8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10699/z-osKq1jvMpNSslqhSFA1CYVl7g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/z-osKq1jvMpNSslqhSFA1CYVl7g.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10699/C_EiKdq7NyVx-m0OOkvD3VAor6Q.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.100.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         06:94:19:11:31:6f:b1:b2:0c:12:ec:02:5a:b2:1b:01:68:9e:
         cf:82:ed:9b:c6:99:87:48:58:bf:07:fc:d2:1b:b5:60:3d:b8:
         ea:62:00:43:0b:8c:ce:a2:09:f6:17:bc:ed:9c:bd:68:12:0a:
         ca:2e:7d:80:f9:95:2b:d6:d7:e7:d7:b0:65:30:f7:13:14:72:
         47:97:22:d2:e7:dd:b4:bc:76:63:ea:c5:60:e7:0e:88:ee:c2:
         45:1c:ab:3a:38:17:6e:1d:09:fd:ee:86:59:62:15:46:34:e3:
         da:2f:09:bf:2b:30:e2:ef:09:45:22:d1:ec:6c:14:fc:13:20:
         ec:fe:7a:df:05:db:57:26:fd:17:0f:77:80:6e:85:6e:af:d6:
         c8:80:76:bf:1e:07:b9:51:52:e8:35:53:5c:d4:fa:8b:56:5c:
         dd:e8:c6:93:24:a9:09:aa:46:96:52:e3:a1:84:7f:28:d3:7f:
         15:04:8f:75:3a:76:15:94:40:f3:38:14:89:03:12:df:bf:91:
         c2:ff:59:e0:87:ed:e3:1c:4a:0c:4b:29:a6:87:96:da:94:56:
         23:39:f2:ae:36:a1:7f:c2:9b:61:8d:2f:cf:e9:d5:67:ec:0a:
         19:85:a8:11:60:c2:ec:33:22:d5:7b:ac:33:5e:48:61:d1:f3:
         b9:bf:50:62
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBVDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhDRkVB
MkMyQUFENjNCQ0NBNEQ0QUM5NkE4NTIxNDBENDI2MTU5N0I4MB4XDTI0MDIyOTAx
MjkzOFoXDTI1MDIxNDAxMzAwM1owMzExMC8GA1UEAxMoMEJGMTIyMjlEQUJCMzcy
NTcxRkE2RDBFM0E0QkMzREQ1MDI4QUZBNDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAPbo4vwG9rI4IkAtqc2WT9rrHEBxPOkwlc1jbifiTdYKCH0dEmIH
O6Qu1MzjvtXsrW46yu3/l94HCW+FgiIWpi4yNJ6Da3a4wmPS1EtbWcdCmROHL62b
UqJdxiKZZd7B6n0l1xi0A4w7pGYMxp48c29awphtYU0Cwp0lkO8kLK9yZt3pnH8e
urVwm4sKgocW/KrzCAJ8UTSsle/oGxcdcfhgQfLBILK2Y+DD8yug3EjfnW8A3EYj
PTOG+tqjUuPF+9K70J4jyvFvTwzXL41ZVOS6qzfL7lw80FZp9ekzLsntFmCLaXuN
4zn32PVnDOgdRpXfXf5+lJGb+juWtTOae4cCAwEAAaOCAigwggIkMB0GA1UdDgQW
BBQL8SIp2rs3JXH6bQ46S8PdUCivpDAfBgNVHSMEGDAWgBTP6iwqrWO8yk1KyWqF
IUDUJhWXuDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTA2OTkvei1vc0txMWp2TXBOU3NscWhTRkExQ1lWbDdnLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvei1vc0txMWp2TXBOU3NscWhTRkEx
Q1lWbDdnLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzEwNjk5L0NfRWlLZHE3TnlWeC1tME9Pa3ZEM1ZBb3I2US5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAN6ZBAwDQYJKoZIhvcNAQELBQADggEBAAaUGRExb7GyDBLsAlqyGwFo
ns+C7ZvGmYdIWL8H/NIbtWA9uOpiAEMLjM6iCfYXvO2cvWgSCsoufYD5lSvW1+fX
sGUw9xMUckeXItLn3bS8dmPqxWDnDojuwkUcqzo4F24dCf3uhlliFUY049ovCb8r
MOLvCUUi0exsFPwTIOz+et8F21cm/RcPd4BuhW6v1siAdr8eB7lRUug1U1zU+otW
XN3oxpMkqQmqRpZS46GEfyjTfxUEj3U6dhWUQPM4FIkDEt+/kcL/WeCH7eMcSgxL
KaaHltqUViM58q42oX/Cm2GNL8/p1WfsChmFqBFgwuwzItV7rDNeSGHR87m/UGI=
-----END CERTIFICATE-----
Generated at Mon Jun 17 11:39:06 2024 by rpki-client on console-fra.rpki-client.org