Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/cUkUTqGPV1RuVkImprR04OrV-Zc.roa
File:                     cUkUTqGPV1RuVkImprR04OrV-Zc.roa (raw, json)
Hash identifier:          ipXmiUuj+1Q0LaBOADTh/wHILMJuRPvweZOnkzmhwTE=
Subject key identifier:   71:49:14:4E:A1:8F:57:54:6E:56:42:26:A6:B4:74:E0:EA:D5:F9:97
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       01E6
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/cUkUTqGPV1RuVkImprR04OrV-Zc.roa
Signing time:             Fri 31 May 2024 01:34:47 +0000
ROA not before:           Fri 31 May 2024 01:34:47 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     4713
IP address blocks:        221.113.128.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jul 2024 07:52:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 486 (0x1e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: May 31 01:34:47 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=7149144EA18F57546E564226A6B474E0EAD5F997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:41:06:51:eb:7c:c8:58:74:11:fa:d2:54:d5:
                    50:79:58:a9:d5:59:f1:97:e3:b1:a8:2f:62:6f:9f:
                    44:07:7b:03:15:76:c3:0d:a3:81:76:77:92:1d:a6:
                    1c:31:a6:bc:0e:0e:18:a4:a6:42:23:6f:a2:9a:c9:
                    10:30:36:2c:ef:56:2d:75:d0:ab:2e:2c:d2:55:86:
                    a2:bb:d8:67:ca:95:e1:12:99:50:4f:79:3f:8c:61:
                    53:fb:10:7f:3a:de:28:57:04:21:c3:2e:b8:87:38:
                    5c:49:b1:2b:59:e4:7e:97:fe:c8:06:1a:ec:4f:e5:
                    0b:b9:13:24:b5:0a:38:d3:96:eb:06:68:4c:4b:05:
                    e1:5d:02:8e:b4:f1:e1:a2:4c:1c:dc:c2:38:c7:62:
                    38:da:34:59:9f:ed:7d:0f:44:1e:17:40:a7:01:7c:
                    19:34:c2:d2:3d:92:fb:9e:92:6e:ad:e5:2e:aa:cc:
                    9e:cc:be:64:80:ab:31:5e:89:ad:f8:64:82:59:59:
                    7c:1a:51:09:4c:b0:f2:6a:06:e1:10:b1:22:a9:91:
                    61:17:6f:e7:14:02:8d:46:98:a1:22:d3:c6:f5:62:
                    41:c3:b8:8f:c8:2d:ff:ae:fe:65:1c:ba:a1:87:92:
                    22:a0:c3:ac:74:1f:c3:9a:b5:64:12:66:1b:59:d9:
                    0d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:49:14:4E:A1:8F:57:54:6E:56:42:26:A6:B4:74:E0:EA:D5:F9:97
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/cUkUTqGPV1RuVkImprR04OrV-Zc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  221.113.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         b1:c2:9e:f8:8d:7e:62:0b:1a:e3:8a:6d:bd:38:48:13:ee:ad:
         4b:0c:05:7e:20:e4:bf:3f:1f:5a:61:ee:03:e3:ab:cb:e5:93:
         50:ee:7e:ae:14:c8:90:d0:b4:e7:a7:4e:d0:ca:4b:3e:4a:b6:
         7c:07:fe:ab:b3:00:97:a4:c4:12:a2:c3:6c:ba:e5:44:d6:3d:
         e2:66:4e:5b:97:83:f3:b1:0b:76:7a:c2:58:ef:27:53:e3:74:
         3b:57:cd:0f:05:e2:8e:9f:23:6f:b6:e0:f8:ed:0d:4d:9d:87:
         54:c0:3c:4b:ab:d8:e0:a8:8f:e8:16:e6:0f:b4:01:13:8e:e7:
         2a:fb:ec:e3:46:13:b8:01:66:1e:f3:55:10:44:7e:85:09:5f:
         6e:14:4c:9b:5c:81:95:8f:fa:a3:59:8b:60:3b:7b:ed:12:4b:
         b0:b6:a2:db:56:47:77:b6:d3:49:a6:2c:c1:82:a6:5a:a8:ff:
         98:a8:bd:0d:c2:5f:c0:aa:49:b5:ad:9e:c0:76:0b:65:e1:2a:
         9e:0d:7a:02:73:fb:98:f7:d1:c3:fb:d8:8f:ec:2b:89:73:cb:
         88:3a:88:a4:b9:25:bd:64:6c:b2:0c:63:1d:39:59:07:47:65:
         8d:68:f8:09:00:43:8d:a5:0a:09:9b:bd:bf:6f:fe:a9:07:3c:
         34:57:b3:c4
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAeYwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMkZD
MDk5MjNCMDVBN0U4RjFBREQ5QTU5ODRFREMxOTMyMERCOTc0QjAeFw0yNDA1MzEw
MTM0NDdaFw0yNTA1MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDcxNDkxNDRFQTE4RjU3
NTQ2RTU2NDIyNkE2QjQ3NEUwRUFENUY5OTcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCgQQZR63zIWHQR+tJU1VB5WKnVWfGX47GoL2Jvn0QHewMVdsMN
o4F2d5IdphwxprwODhikpkIjb6KayRAwNizvVi110KsuLNJVhqK72GfKleESmVBP
eT+MYVP7EH863ihXBCHDLriHOFxJsStZ5H6X/sgGGuxP5Qu5EyS1CjjTlusGaExL
BeFdAo608eGiTBzcwjjHYjjaNFmf7X0PRB4XQKcBfBk0wtI9kvuekm6t5S6qzJ7M
vmSAqzFeia34ZIJZWXwaUQlMsPJqBuEQsSKpkWEXb+cUAo1GmKEi08b1YkHDuI/I
Lf+u/mUcuqGHkiKgw6x0H8OatWQSZhtZ2Q1LAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUcUkUTqGPV1RuVkImprR04OrV+ZcwHwYDVR0jBBgwFoAUL8CZI7Bafo8a3ZpZ
hO3BkyDbl0swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzEzMS9MOENaSTdCYWZvOGEzWnBaaE8zQmt5RGJsMHMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9MOENaSTdCYWZvOGEzWnBaaE8zQmt5
RGJsMHMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTMxL2NVa1VUcUdQVjFSdVZrSW1wclIwNE9yVi1aYy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAfdcYAwDQYJKoZIhvcNAQELBQADggEBALHCnviNfmILGuOKbb04SBPurUsM
BX4g5L8/H1ph7gPjq8vlk1Dufq4UyJDQtOenTtDKSz5KtnwH/quzAJekxBKiw2y6
5UTWPeJmTluXg/OxC3Z6wljvJ1PjdDtXzQ8F4o6fI2+24PjtDU2dh1TAPEur2OCo
j+gW5g+0AROO5yr77ONGE7gBZh7zVRBEfoUJX24UTJtcgZWP+qNZi2A7e+0SS7C2
ottWR3e200mmLMGCplqo/5iovQ3CX8CqSbWtnsB2C2XhKp4NegJz+5j30cP72I/s
K4lzy4g6iKS5Jb1kbLIMYx05WQdHZY1o+AkAQ42lCgmbvb9v/qkHPDRXs8Q=
-----END CERTIFICATE-----
Generated at Wed Jun 26 09:28:33 2024 by rpki-client on console-fra.rpki-client.org