Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20040/sV-pdvmvbtkfkVOJLTj1F9EcDWU.roa
File:                     sV-pdvmvbtkfkVOJLTj1F9EcDWU.roa (raw, json)
Hash identifier:          lcyd1T7YBNmG4ZlfdajG/Tw4FeDh3zJrL8Y0i3Jg210=
Subject key identifier:   B1:5F:A9:76:F9:AF:6E:D9:1F:91:53:89:2D:38:F5:17:D1:1C:0D:65
Certificate issuer:       /CN=5ECB165AAD7C3C143CC2F84E4775E59D9D7D94F9
Certificate serial:       1E
Authority key identifier: 5E:CB:16:5A:AD:7C:3C:14:3C:C2:F8:4E:47:75:E5:9D:9D:7D:94:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XssWWq18PBQ8wvhOR3XlnZ19lPk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20040/sV-pdvmvbtkfkVOJLTj1F9EcDWU.roa
Signing time:             Fri 31 May 2024 01:29:03 +0000
ROA not before:           Fri 31 May 2024 01:29:03 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     9607
IP address blocks:        103.96.112.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20040/XssWWq18PBQ8wvhOR3XlnZ19lPk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20040/XssWWq18PBQ8wvhOR3XlnZ19lPk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XssWWq18PBQ8wvhOR3XlnZ19lPk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30 (0x1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ECB165AAD7C3C143CC2F84E4775E59D9D7D94F9
        Validity
            Not Before: May 31 01:29:03 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=B15FA976F9AF6ED91F9153892D38F517D11C0D65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f4:be:59:2e:62:04:a9:74:7d:dc:d1:a7:e4:
                    80:a6:4d:8e:55:52:97:a1:81:32:b1:0b:e0:ef:ab:
                    50:3f:76:3d:55:8f:e0:6b:c8:30:29:e6:c0:ce:71:
                    d8:03:92:fe:17:0a:59:35:45:c1:43:7a:07:90:f7:
                    3a:6b:09:b7:da:d5:e6:33:11:7c:ea:c7:3d:dd:7c:
                    3a:90:6c:c6:bb:5b:ce:63:7f:ea:bf:3b:99:af:ef:
                    b5:d7:06:84:9e:19:d4:d5:2e:d7:06:86:40:cb:73:
                    f9:d0:8e:b3:7a:10:10:e2:c7:f1:8e:a2:62:29:2f:
                    f9:54:30:e6:eb:4d:75:77:c6:e1:be:6d:33:4b:e5:
                    d6:a2:37:f3:0e:f3:9a:c6:d9:80:53:66:c4:2f:d4:
                    1d:20:d8:e0:9e:08:ea:af:39:ca:f1:34:c3:8d:dd:
                    f0:28:34:24:09:fe:49:93:b5:c3:f3:a1:ef:c5:f3:
                    0d:82:0c:11:76:40:34:cd:91:a4:53:43:ae:7c:e5:
                    c6:7f:26:41:31:c5:ad:d9:88:9d:5b:13:56:b4:be:
                    0b:c8:7f:c5:ac:7f:f4:8a:2a:f5:3d:68:51:1c:6d:
                    78:9f:25:82:1d:79:b2:0a:60:7f:70:8f:f8:3c:86:
                    e7:4f:a7:72:37:79:a3:29:58:42:af:80:ef:f6:86:
                    49:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:5F:A9:76:F9:AF:6E:D9:1F:91:53:89:2D:38:F5:17:D1:1C:0D:65
            X509v3 Authority Key Identifier:
                keyid:5E:CB:16:5A:AD:7C:3C:14:3C:C2:F8:4E:47:75:E5:9D:9D:7D:94:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20040/XssWWq18PBQ8wvhOR3XlnZ19lPk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XssWWq18PBQ8wvhOR3XlnZ19lPk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20040/sV-pdvmvbtkfkVOJLTj1F9EcDWU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.96.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:2f:da:e5:91:3a:04:7b:a7:7c:36:a6:ab:b4:14:96:55:56:
         32:2f:3d:6a:2f:21:6b:66:38:2b:63:c0:44:3e:e6:b4:bd:89:
         c7:65:d4:14:b7:15:41:b3:a0:85:4c:3c:d0:79:5c:7c:48:7e:
         75:2b:58:ff:6e:ae:8b:bb:5b:c9:86:18:a5:c2:f1:9c:34:71:
         d1:1f:8c:12:80:83:c6:09:8b:e7:21:85:2a:01:b8:ab:ac:25:
         c2:a1:a6:39:4a:3e:02:a8:7c:8d:b0:f8:99:66:6d:69:eb:ca:
         d5:51:95:98:f3:f0:13:39:70:fc:69:53:1d:00:a4:2b:de:06:
         a8:66:5c:19:f7:aa:3b:1f:2c:1b:70:99:6a:14:69:32:c7:81:
         a1:70:5d:4d:5f:2b:76:97:b1:93:57:9c:f0:cf:88:9e:c9:c8:
         72:ff:e8:5c:b1:a2:1c:6a:a9:1b:9a:91:3b:3e:23:43:12:f6:
         78:07:c5:e6:44:b9:cb:19:57:e3:87:e1:b0:97:fb:38:82:f0:
         76:e7:f4:4c:18:3b:17:a3:78:90:f1:8b:99:dd:33:52:73:88:
         3c:12:48:3b:b0:07:4c:ff:eb:91:0d:70:28:d5:4e:1d:54:19:
         e4:48:3b:ee:2d:3f:6c:9b:1d:42:7e:5f:f1:53:e9:79:70:12:
         9d:89:79:bc
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBHjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1RUNC
MTY1QUFEN0MzQzE0M0NDMkY4NEU0Nzc1RTU5RDlEN0Q5NEY5MB4XDTI0MDUzMTAx
MjkwM1oXDTI1MDUxNTAxMzAwM1owMzExMC8GA1UEAxMoQjE1RkE5NzZGOUFGNkVE
OTFGOTE1Mzg5MkQzOEY1MTdEMTFDMEQ2NTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKf0vlkuYgSpdH3c0afkgKZNjlVSl6GBMrEL4O+rUD92PVWP4GvI
MCnmwM5x2AOS/hcKWTVFwUN6B5D3OmsJt9rV5jMRfOrHPd18OpBsxrtbzmN/6r87
ma/vtdcGhJ4Z1NUu1waGQMtz+dCOs3oQEOLH8Y6iYikv+VQw5utNdXfG4b5tM0vl
1qI38w7zmsbZgFNmxC/UHSDY4J4I6q85yvE0w43d8Cg0JAn+SZO1w/Oh78XzDYIM
EXZANM2RpFNDrnzlxn8mQTHFrdmInVsTVrS+C8h/xax/9Ioq9T1oURxteJ8lgh15
sgpgf3CP+DyG50+ncjd5oylYQq+A7/aGSf0CAwEAAaOCAigwggIkMB0GA1UdDgQW
BBSxX6l2+a9u2R+RU4ktOPUX0RwNZTAfBgNVHSMEGDAWgBReyxZarXw8FDzC+E5H
deWdnX2U+TAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAwNDAvWHNzV1dxMThQQlE4d3ZoT1IzWGxuWjE5bFBrLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvWHNzV1dxMThQQlE4d3ZoT1IzWGxu
WjE5bFBrLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMDQwL3NWLXBkdm12YnRrZmtWT0pMVGoxRjlFY0RXVS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAJnYHAwDQYJKoZIhvcNAQELBQADggEBAFYv2uWROgR7p3w2pqu0FJZV
VjIvPWovIWtmOCtjwEQ+5rS9icdl1BS3FUGzoIVMPNB5XHxIfnUrWP9urou7W8mG
GKXC8Zw0cdEfjBKAg8YJi+chhSoBuKusJcKhpjlKPgKofI2w+JlmbWnrytVRlZjz
8BM5cPxpUx0ApCveBqhmXBn3qjsfLBtwmWoUaTLHgaFwXU1fK3aXsZNXnPDPiJ7J
yHL/6FyxohxqqRuakTs+I0MS9ngHxeZEucsZV+OH4bCX+ziC8Hbn9EwYOxejeJDx
i5ndM1JziDwSSDuwB0z/65ENcCjVTh1UGeRIO+4tP2ybHUJ+X/FT6XlwEp2Jebw=
-----END CERTIFICATE-----
Generated at Sat Apr 5 20:08:46 2025 by rpki-client