Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/271/46bzfyUNgikkwxJNrnJfDFOzBNI.roa
File:                     46bzfyUNgikkwxJNrnJfDFOzBNI.roa (raw, json)
Hash identifier:          j5cgXyqJMGjJdMN+BfchDcg4aAuXCXZXmdTz3gZTclw=
Subject key identifier:   E3:A6:F3:7F:25:0D:82:29:24:C3:12:4D:AE:72:5F:0C:53:B3:04:D2
Certificate issuer:       /CN=594B015EC9A0A5C03D8879469CDA7C7C4B9A6C10
Certificate serial:       0A
Authority key identifier: 59:4B:01:5E:C9:A0:A5:C0:3D:88:79:46:9C:DA:7C:7C:4B:9A:6C:10
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WUsBXsmgpcA9iHlGnNp8fEuabBA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/271/46bzfyUNgikkwxJNrnJfDFOzBNI.roa
Signing time:             Thu 16 Jan 2025 01:34:49 +0000
ROA not before:           Thu 16 Jan 2025 01:34:49 +0000
ROA not after:            Thu 15 Jan 2026 01:30:03 +0000
asID:                     59108
IP address blocks:        203.140.176.0/20 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/271/WUsBXsmgpcA9iHlGnNp8fEuabBA.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/271/WUsBXsmgpcA9iHlGnNp8fEuabBA.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WUsBXsmgpcA9iHlGnNp8fEuabBA.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=594B015EC9A0A5C03D8879469CDA7C7C4B9A6C10
        Validity
            Not Before: Jan 16 01:34:49 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=E3A6F37F250D822924C3124DAE725F0C53B304D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:9f:27:86:ef:4f:f5:da:e8:89:43:dd:8e:6d:
                    b4:ae:05:6e:48:9a:ca:49:c8:c9:c2:e3:ce:d7:1a:
                    cd:35:95:c6:a9:a4:92:2f:c5:2e:f0:64:13:3f:10:
                    c8:f9:6d:b8:9f:a9:81:a8:f2:f5:b0:64:6e:34:0a:
                    d1:5d:83:45:5e:df:a7:7b:41:77:47:c1:25:06:11:
                    41:19:d0:0c:c0:0a:4c:a7:ae:e0:64:3c:96:af:a4:
                    71:e7:22:96:2d:59:88:31:58:c4:89:83:7f:f5:a0:
                    e5:45:39:a9:d4:7b:eb:88:fd:9a:6a:17:7d:97:f4:
                    e3:06:88:80:1b:7a:43:f9:a0:24:74:2b:8d:be:88:
                    1b:ff:fa:83:77:0f:2f:bd:eb:52:50:d5:d0:a2:dd:
                    99:ad:07:81:7a:f2:20:65:e3:4b:7c:fe:af:9d:b7:
                    53:a5:fd:b6:20:4b:2d:13:66:c5:ba:2b:a5:bd:fb:
                    a9:2b:37:d8:50:53:e7:72:f8:70:7b:6a:c8:0b:70:
                    b8:bd:f0:8f:9a:d6:e1:e9:08:c7:f0:fc:c6:62:d0:
                    5a:eb:fd:09:97:dc:eb:4c:57:4b:ad:0e:76:29:52:
                    41:c4:64:2c:bd:6c:fe:a8:f2:67:b3:ce:ae:a8:46:
                    1f:a3:32:da:53:eb:fc:64:bf:0f:f1:9d:38:38:ac:
                    59:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:A6:F3:7F:25:0D:82:29:24:C3:12:4D:AE:72:5F:0C:53:B3:04:D2
            X509v3 Authority Key Identifier:
                keyid:59:4B:01:5E:C9:A0:A5:C0:3D:88:79:46:9C:DA:7C:7C:4B:9A:6C:10

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/271/WUsBXsmgpcA9iHlGnNp8fEuabBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WUsBXsmgpcA9iHlGnNp8fEuabBA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/271/46bzfyUNgikkwxJNrnJfDFOzBNI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.140.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         88:1c:63:e4:5e:ab:df:9c:7b:52:1b:54:f0:06:23:3e:24:41:
         c3:df:d6:c0:83:1b:28:19:c4:a4:8a:61:ba:4c:62:18:36:49:
         41:0e:87:5b:cc:27:f9:ce:ad:c6:17:1c:e7:63:61:db:10:a4:
         5b:c5:3a:a7:46:81:a1:9b:d4:41:e4:8b:bb:5f:91:36:f3:15:
         fa:bf:d6:04:b2:16:84:21:6a:24:b6:30:f6:43:70:13:35:b3:
         e3:7c:05:34:8c:b1:0c:d7:c0:7e:d5:1f:a9:30:af:87:b8:c5:
         6a:cb:18:c9:ad:b8:00:d8:a7:c9:9b:8c:ee:4c:25:20:b6:3f:
         25:fd:99:f9:34:c0:6e:4a:a5:34:98:17:0f:07:45:57:69:ea:
         3d:09:e4:b6:37:a6:52:b8:21:a3:8b:79:92:52:de:27:8a:13:
         c8:4c:ed:57:27:7f:c5:02:42:ac:a8:2f:55:c5:29:f4:6a:6a:
         cb:d7:88:1a:49:10:fc:6b:aa:be:46:6b:06:3a:07:93:76:3f:
         80:8a:22:33:f6:8d:fd:c2:1f:04:ba:7c:2c:dd:9f:37:9a:85:
         d2:98:d6:82:66:b5:d8:9c:e2:b8:4f:8c:bd:85:87:60:bc:83:
         9c:7b:3d:94:d1:70:ac:13:1c:25:02:4e:a0:b9:ac:f3:a1:00:
         81:d6:01:ee
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBCjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1OTRC
MDE1RUM5QTBBNUMwM0Q4ODc5NDY5Q0RBN0M3QzRCOUE2QzEwMB4XDTI1MDExNjAx
MzQ0OVoXDTI2MDExNTAxMzAwM1owMzExMC8GA1UEAxMoRTNBNkYzN0YyNTBEODIy
OTI0QzMxMjREQUU3MjVGMEM1M0IzMDREMjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANifJ4bvT/Xa6IlD3Y5ttK4FbkiayknIycLjztcazTWVxqmkki/F
LvBkEz8QyPltuJ+pgajy9bBkbjQK0V2DRV7fp3tBd0fBJQYRQRnQDMAKTKeu4GQ8
lq+kcecili1ZiDFYxImDf/Wg5UU5qdR764j9mmoXfZf04waIgBt6Q/mgJHQrjb6I
G//6g3cPL73rUlDV0KLdma0HgXryIGXjS3z+r523U6X9tiBLLRNmxborpb37qSs3
2FBT53L4cHtqyAtwuL3wj5rW4ekIx/D8xmLQWuv9CZfc60xXS60OdilSQcRkLL1s
/qjyZ7POrqhGH6My2lPr/GS/D/GdODisWTECAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBTjpvN/JQ2CKSTDEk2ucl8MU7ME0jAfBgNVHSMEGDAWgBRZSwFeyaClwD2IeUac
2nx8S5psEDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjcxL1dVc0JYc21ncGNBOWlIbEduTnA4ZkV1YWJCQS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1dVc0JYc21ncGNBOWlIbEduTnA4ZkV1
YWJCQS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8yNzEvNDZiemZ5VU5naWtrd3hKTnJuSmZERk96Qk5JLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBMuMsDANBgkqhkiG9w0BAQsFAAOCAQEAiBxj5F6r35x7UhtU8AYjPiRBw9/W
wIMbKBnEpIphukxiGDZJQQ6HW8wn+c6txhcc52Nh2xCkW8U6p0aBoZvUQeSLu1+R
NvMV+r/WBLIWhCFqJLYw9kNwEzWz43wFNIyxDNfAftUfqTCvh7jFassYya24ANin
yZuM7kwlILY/Jf2Z+TTAbkqlNJgXDwdFV2nqPQnktjemUrgho4t5klLeJ4oTyEzt
Vyd/xQJCrKgvVcUp9Gpqy9eIGkkQ/GuqvkZrBjoHk3Y/gIoiM/aN/cIfBLp8LN2f
N5qF0pjWgma12JziuE+MvYWHYLyDnHs9lNFwrBMcJQJOoLms86EAgdYB7g==
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:46:11 2025 by rpki-client