Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20031/or6de6J7lmrdwkTyUF0dQ07ueD4.roa
File:                     or6de6J7lmrdwkTyUF0dQ07ueD4.roa (raw, json)
Hash identifier:          PYQ3o/aQaE1XIb88b5SsnWqKuWipeT0pfjx+wUVxuko=
Subject key identifier:   A2:BE:9D:7B:A2:7B:96:6A:DD:C2:44:F2:50:5D:1D:43:4E:EE:78:3E
Certificate issuer:       /CN=7642A07D9AC9D227EA42F79E6D131CB1A920EDCE
Certificate serial:       17
Authority key identifier: 76:42:A0:7D:9A:C9:D2:27:EA:42:F7:9E:6D:13:1C:B1:A9:20:ED:CE
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/or6de6J7lmrdwkTyUF0dQ07ueD4.roa
Signing time:             Mon 20 Nov 2023 03:54:11 +0000
ROA not before:           Mon 20 Nov 2023 03:54:11 +0000
ROA not after:            Thu 14 Nov 2024 01:30:03 +0000
asID:                     7511
IP address blocks:        203.147.112.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 22 Jun 2024 01:30:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23 (0x17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7642A07D9AC9D227EA42F79E6D131CB1A920EDCE
        Validity
            Not Before: Nov 20 03:54:11 2023 GMT
            Not After : Nov 14 01:30:03 2024 GMT
        Subject: CN=A2BE9D7BA27B966ADDC244F2505D1D434EEE783E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:91:be:c9:84:16:95:6b:d2:b1:d0:94:6f:8d:
                    29:d1:af:b9:66:3a:a4:05:2f:11:6a:ce:aa:36:64:
                    91:b7:58:23:dd:da:f7:e2:b8:da:55:8f:9c:e4:dc:
                    11:47:fb:7b:b1:7a:76:81:6a:89:78:29:72:84:31:
                    0c:ff:63:91:80:39:64:e0:10:d3:14:32:5c:50:f3:
                    20:9d:14:f8:4f:71:42:34:cd:34:27:ce:f2:b3:b4:
                    50:12:8c:4d:35:14:74:00:ef:2a:86:73:a3:9f:2a:
                    c3:21:66:12:fc:02:3f:11:71:aa:e0:df:59:6b:0f:
                    1c:ad:21:b8:aa:3a:23:fe:69:d2:04:26:13:1c:65:
                    d7:40:bf:7f:43:b7:6a:8c:ec:d5:ae:62:2e:cf:b0:
                    24:3b:d4:3c:2a:56:aa:c8:67:d1:14:68:36:3d:2e:
                    9d:86:8a:5f:62:9d:8d:eb:47:36:83:03:81:6f:4f:
                    a1:1a:33:7f:fe:fc:af:d9:f7:2b:79:83:51:b8:df:
                    a6:ab:62:ce:ed:1f:b7:63:0e:34:37:09:14:b4:e6:
                    b3:c3:53:97:b3:96:fc:28:b6:30:ce:5d:e3:89:77:
                    0d:4d:79:24:64:2a:c6:bc:a0:21:6a:44:20:c9:52:
                    42:ee:5a:ab:a5:f4:ea:62:17:38:cd:45:7c:bc:7e:
                    0a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:BE:9D:7B:A2:7B:96:6A:DD:C2:44:F2:50:5D:1D:43:4E:EE:78:3E
            X509v3 Authority Key Identifier:
                keyid:76:42:A0:7D:9A:C9:D2:27:EA:42:F7:9E:6D:13:1C:B1:A9:20:ED:CE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/or6de6J7lmrdwkTyUF0dQ07ueD4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.147.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         85:07:fd:c2:9c:d9:84:15:9a:bc:ed:dd:c7:dd:85:23:c5:6c:
         cd:86:8b:19:83:12:a4:92:03:bd:9f:9f:44:e5:4f:ff:93:de:
         02:6d:3d:37:75:cf:3e:a4:78:7c:4a:50:44:9f:80:cc:e5:5b:
         ce:d2:bf:e6:9a:b4:22:ff:b8:4a:27:95:07:eb:8e:2d:2b:98:
         1a:bb:33:5f:61:e4:9f:ff:70:86:0f:a6:d2:48:80:d0:e7:64:
         9a:64:56:db:d7:7b:9c:4c:9d:5b:88:17:ab:66:fd:1c:b6:0a:
         c3:e1:fe:3e:b6:35:80:1b:07:13:fe:15:69:82:44:10:6d:5a:
         f4:1d:fd:4f:b8:3f:d4:cc:8e:bb:9a:7d:63:97:95:41:19:3f:
         c5:ef:08:d7:aa:bb:1c:d7:66:a9:dc:45:81:44:40:59:ed:8e:
         80:02:98:5e:33:64:d2:3c:2b:e3:73:5f:4a:cb:c5:a6:20:02:
         78:bd:66:2f:b2:c9:5d:19:63:86:89:6f:f6:8d:b8:99:6a:d0:
         de:2d:6b:2b:f8:e1:14:e1:43:b9:98:af:95:d6:cf:93:5b:87:
         8a:4f:f4:4f:2a:7b:8c:98:0c:21:73:19:40:67:1a:c5:87:12:
         41:24:bd:19:97:33:fd:76:af:8d:60:3c:7e:c5:a9:33:41:b0:
         f7:d8:5e:a7
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBFzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3NjQy
QTA3RDlBQzlEMjI3RUE0MkY3OUU2RDEzMUNCMUE5MjBFRENFMB4XDTIzMTEyMDAz
NTQxMVoXDTI0MTExNDAxMzAwM1owMzExMC8GA1UEAxMoQTJCRTlEN0JBMjdCOTY2
QUREQzI0NEYyNTA1RDFENDM0RUVFNzgzRTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJ+RvsmEFpVr0rHQlG+NKdGvuWY6pAUvEWrOqjZkkbdYI93a9+K4
2lWPnOTcEUf7e7F6doFqiXgpcoQxDP9jkYA5ZOAQ0xQyXFDzIJ0U+E9xQjTNNCfO
8rO0UBKMTTUUdADvKoZzo58qwyFmEvwCPxFxquDfWWsPHK0huKo6I/5p0gQmExxl
10C/f0O3aozs1a5iLs+wJDvUPCpWqshn0RRoNj0unYaKX2KdjetHNoMDgW9PoRoz
f/78r9n3K3mDUbjfpqtizu0ft2MONDcJFLTms8NTl7OW/Ci2MM5d44l3DU15JGQq
xrygIWpEIMlSQu5aq6X06mIXOM1FfLx+CgMCAwEAAaOCAigwggIkMB0GA1UdDgQW
BBSivp17onuWat3CRPJQXR1DTu54PjAfBgNVHSMEGDAWgBR2QqB9msnSJ+pC955t
ExyxqSDtzjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAwMzEvZGtLZ2ZackowaWZxUXZlZWJSTWNzYWtnN2M0LmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvZGtLZ2ZackowaWZxUXZlZWJSTWNz
YWtnN2M0LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMDMxL29yNmRlNko3bG1yZHdrVHlVRjBkUTA3dWVENC5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBATLk3AwDQYJKoZIhvcNAQELBQADggEBAIUH/cKc2YQVmrzt3cfdhSPF
bM2GixmDEqSSA72fn0TlT/+T3gJtPTd1zz6keHxKUESfgMzlW87Sv+aatCL/uEon
lQfrji0rmBq7M19h5J//cIYPptJIgNDnZJpkVtvXe5xMnVuIF6tm/Ry2CsPh/j62
NYAbBxP+FWmCRBBtWvQd/U+4P9TMjruafWOXlUEZP8XvCNequxzXZqncRYFEQFnt
joACmF4zZNI8K+NzX0rLxaYgAni9Zi+yyV0ZY4aJb/aNuJlq0N4tayv44RThQ7mY
r5XWz5Nbh4pP9E8qe4yYDCFzGUBnGsWHEkEkvRmXM/12r41gPH7FqTNBsPfYXqc=
-----END CERTIFICATE-----
Generated at Sat Jun 15 02:01:38 2024 by rpki-client on console-fra.rpki-client.org