Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10966/8Qk7VLIWiERpVtT-STsytmnnVdM.roa
File:                     8Qk7VLIWiERpVtT-STsytmnnVdM.roa (raw, json)
Hash identifier:          wHzgrk+SOMLlilkko56GWCBLONSgJoegrqgWShgzhKc=
Subject key identifier:   F1:09:3B:54:B2:16:88:44:69:56:D4:FE:49:3B:32:B6:69:E7:55:D3
Certificate issuer:       /CN=FB72FAA523BA6526855D99065E21B4B958C5F016
Certificate serial:       3A
Authority key identifier: FB:72:FA:A5:23:BA:65:26:85:5D:99:06:5E:21:B4:B9:58:C5:F0:16
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/8Qk7VLIWiERpVtT-STsytmnnVdM.roa
Signing time:             Sat 31 Aug 2024 01:30:41 +0000
ROA not before:           Sat 31 Aug 2024 01:30:41 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     146987
IP address blocks:        157.120.112.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58 (0x3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB72FAA523BA6526855D99065E21B4B958C5F016
        Validity
            Not Before: Aug 31 01:30:41 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=F1093B54B21688446956D4FE493B32B669E755D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:57:e5:49:58:83:30:b9:56:e1:42:82:24:c3:
                    99:21:6a:ac:2d:f0:fd:2a:9d:63:af:f2:d9:d6:05:
                    22:01:5e:10:ba:62:cc:fd:ff:71:e0:cb:ec:5f:2c:
                    d9:2a:51:7e:ff:1f:75:27:b8:aa:58:5b:ea:f9:51:
                    9a:48:44:88:52:5e:ca:8e:e7:12:57:f3:87:eb:0c:
                    9d:ea:41:99:94:84:0d:51:ec:83:a2:26:f8:f5:aa:
                    f3:22:0d:b6:1d:45:9f:23:b1:c1:9f:e9:a2:f6:ca:
                    e5:c2:7c:32:fe:f5:f3:18:72:02:5f:f4:72:7f:da:
                    8e:df:90:68:51:1d:e0:56:97:1c:9d:54:33:68:8d:
                    ee:47:da:fc:b7:2e:a6:b0:82:05:15:07:e7:72:59:
                    4a:76:23:46:68:5c:0a:08:61:eb:16:d0:0e:b7:63:
                    85:ea:ca:5f:84:44:c6:19:27:59:8e:e0:14:a0:16:
                    a6:d1:1e:90:85:4b:26:87:cd:02:05:68:ab:c6:93:
                    f1:42:d1:1b:56:3c:bd:43:2d:be:cf:ff:d2:35:0e:
                    4c:c2:0a:9b:bf:49:6a:e9:de:d9:13:80:e6:3d:28:
                    50:3c:2f:1d:dd:a1:39:4c:e2:9e:f7:1e:a3:b2:8f:
                    30:a4:e5:f7:de:39:94:8e:29:a6:7e:09:de:30:21:
                    10:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:09:3B:54:B2:16:88:44:69:56:D4:FE:49:3B:32:B6:69:E7:55:D3
            X509v3 Authority Key Identifier:
                keyid:FB:72:FA:A5:23:BA:65:26:85:5D:99:06:5E:21:B4:B9:58:C5:F0:16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/8Qk7VLIWiERpVtT-STsytmnnVdM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.120.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:03:eb:4c:37:b9:31:3c:58:d7:40:e4:45:cc:3f:60:4b:5f:
         d4:e6:6d:c5:a6:02:af:50:c2:c1:b2:29:cb:b1:6a:23:64:bf:
         4b:8b:62:c9:e0:a6:ab:22:04:32:27:86:26:55:9e:35:3b:91:
         f8:c0:0b:46:a7:15:59:72:8e:f5:9d:bc:e5:f9:67:0d:86:f7:
         52:52:7a:90:da:1c:18:4a:fc:94:8a:1f:4b:72:ff:78:4d:ee:
         00:98:62:12:b8:b5:88:f4:d0:c2:10:99:e3:86:fe:0d:6a:be:
         9f:ae:dd:ae:27:a1:38:04:f8:af:9e:4a:fd:bc:c1:82:40:54:
         f6:ee:a4:eb:2f:ee:1c:86:e4:4a:1b:3d:50:43:ce:95:88:a4:
         27:69:46:f9:20:64:c5:68:7f:e1:7d:65:0f:bb:94:a5:ff:63:
         2f:53:61:c0:f8:30:6c:55:c5:f2:f0:d2:85:ce:cb:77:80:8e:
         39:e6:3c:56:43:21:6a:df:a0:dd:82:a7:32:11:70:c4:ff:e5:
         29:df:5b:0a:e8:7d:6d:c3:0f:27:24:93:e5:8c:cc:7b:ce:70:
         31:04:74:0c:16:c9:0a:7f:52:87:55:93:8f:ad:c7:30:74:d0:
         70:30:dd:70:4e:14:e5:e0:44:8d:a7:5c:64:d9:5e:65:42:7d:
         32:52:55:ba
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBOjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGQjcy
RkFBNTIzQkE2NTI2ODU1RDk5MDY1RTIxQjRCOTU4QzVGMDE2MB4XDTI0MDgzMTAx
MzA0MVoXDTI1MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoRjEwOTNCNTRCMjE2ODg0
NDY5NTZENEZFNDkzQjMyQjY2OUU3NTVEMzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMBX5UlYgzC5VuFCgiTDmSFqrC3w/SqdY6/y2dYFIgFeELpizP3/
ceDL7F8s2SpRfv8fdSe4qlhb6vlRmkhEiFJeyo7nElfzh+sMnepBmZSEDVHsg6Im
+PWq8yINth1FnyOxwZ/povbK5cJ8Mv718xhyAl/0cn/ajt+QaFEd4FaXHJ1UM2iN
7kfa/LcuprCCBRUH53JZSnYjRmhcCghh6xbQDrdjherKX4RExhknWY7gFKAWptEe
kIVLJofNAgVoq8aT8ULRG1Y8vUMtvs//0jUOTMIKm79Jaune2ROA5j0oUDwvHd2h
OUzinvceo7KPMKTl9945lI4ppn4J3jAhEJ8CAwEAAaOCAigwggIkMB0GA1UdDgQW
BBTxCTtUshaIRGlW1P5JOzK2aedV0zAfBgNVHSMEGDAWgBT7cvqlI7plJoVdmQZe
IbS5WMXwFjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTA5NjYvLTNMNnBTTzZaU2FGWFprR1hpRzB1VmpGOEJZLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvLTNMNnBTTzZaU2FGWFprR1hpRzB1
VmpGOEJZLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzEwOTY2LzhRazdWTElXaUVScFZ0VC1TVHN5dG1ublZkTS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBACdeHAwDQYJKoZIhvcNAQELBQADggEBAAgD60w3uTE8WNdA5EXMP2BL
X9TmbcWmAq9QwsGyKcuxaiNkv0uLYsngpqsiBDInhiZVnjU7kfjAC0anFVlyjvWd
vOX5Zw2G91JSepDaHBhK/JSKH0ty/3hN7gCYYhK4tYj00MIQmeOG/g1qvp+u3a4n
oTgE+K+eSv28wYJAVPbupOsv7hyG5EobPVBDzpWIpCdpRvkgZMVof+F9ZQ+7lKX/
Yy9TYcD4MGxVxfLw0oXOy3eAjjnmPFZDIWrfoN2CpzIRcMT/5SnfWwrofW3DDyck
k+WMzHvOcDEEdAwWyQp/UodVk4+txzB00HAw3XBOFOXgRI2nXGTZXmVCfTJSVbo=
-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:26 2024 by rpki-client on console-ams.rpki-client.org