Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20075/VcvSFmqEE--LTsRH6AlUAu96uPk.roa
File:                     VcvSFmqEE--LTsRH6AlUAu96uPk.roa (raw, json)
Hash identifier:          dLYo8dVU18CsV0qiUnFTWgsAhPXhvnyVOWmV1bX2vRI=
Subject key identifier:   55:CB:D2:16:6A:84:13:EF:8B:4E:C4:47:E8:09:54:02:EF:7A:B8:F9
Certificate issuer:       /CN=B8D07A5A02B1B45993E6CAEFB47D1D5E75DA193C
Certificate serial:       24
Authority key identifier: B8:D0:7A:5A:02:B1:B4:59:93:E6:CA:EF:B4:7D:1D:5E:75:DA:19:3C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uNB6WgKxtFmT5srvtH0dXnXaGTw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/VcvSFmqEE--LTsRH6AlUAu96uPk.roa
Signing time:             Wed 18 Sep 2024 08:03:02 +0000
ROA not before:           Wed 18 Sep 2024 08:03:02 +0000
ROA not after:            Mon 15 Sep 2025 01:30:03 +0000
asID:                     131969
IP address blocks:        133.88.20.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/uNB6WgKxtFmT5srvtH0dXnXaGTw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/uNB6WgKxtFmT5srvtH0dXnXaGTw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uNB6WgKxtFmT5srvtH0dXnXaGTw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Oct 2024 13:49:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36 (0x24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8D07A5A02B1B45993E6CAEFB47D1D5E75DA193C
        Validity
            Not Before: Sep 18 08:03:02 2024 GMT
            Not After : Sep 15 01:30:03 2025 GMT
        Subject: CN=55CBD2166A8413EF8B4EC447E8095402EF7AB8F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bd:86:31:40:9b:4f:b5:e1:9a:ea:13:31:24:
                    13:a3:57:c0:de:95:bf:99:25:d3:9e:5d:23:83:8a:
                    5d:be:ff:eb:47:86:69:53:0c:4b:5d:6b:5b:11:d5:
                    e1:81:f2:7a:52:72:b0:bd:12:6d:be:22:86:58:c0:
                    41:c1:eb:0d:8a:c2:c7:59:59:51:14:ac:04:84:79:
                    c5:01:f5:d0:b1:37:e9:6f:15:78:ea:bc:8b:d1:1e:
                    0d:88:91:b4:7b:e3:22:c7:2e:da:f0:b8:5c:78:76:
                    b6:6d:ac:b1:58:51:f3:28:e5:6d:41:b1:d7:e5:f4:
                    59:cd:61:0d:67:9c:36:68:25:0e:b9:68:ca:b4:dc:
                    e4:0e:15:09:af:1d:0b:3e:81:09:9b:bd:81:71:d2:
                    c6:62:f7:95:68:d5:b6:c3:c1:00:f4:4b:dd:87:f0:
                    93:26:14:40:f3:c8:8f:ae:ae:05:ee:de:e3:46:38:
                    3c:e0:62:52:6f:76:9a:ef:3f:fb:dd:bb:e3:08:b1:
                    35:0b:6d:ec:8c:3a:7f:a7:4e:ea:98:aa:64:53:a9:
                    21:2d:9f:34:11:cf:7e:bb:92:00:a2:a1:00:7b:a2:
                    40:cf:af:fa:86:ba:6e:52:d7:14:b0:6d:75:a9:e2:
                    a5:7e:fd:79:6a:4e:df:05:f6:24:de:21:f5:19:6b:
                    23:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:CB:D2:16:6A:84:13:EF:8B:4E:C4:47:E8:09:54:02:EF:7A:B8:F9
            X509v3 Authority Key Identifier:
                keyid:B8:D0:7A:5A:02:B1:B4:59:93:E6:CA:EF:B4:7D:1D:5E:75:DA:19:3C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/uNB6WgKxtFmT5srvtH0dXnXaGTw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uNB6WgKxtFmT5srvtH0dXnXaGTw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20075/VcvSFmqEE--LTsRH6AlUAu96uPk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.88.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         54:e3:ea:d4:cc:e0:11:20:d0:35:96:fe:d7:44:0f:c3:3a:e9:
         13:c1:a4:f4:93:5e:f9:92:68:96:16:55:f8:40:3f:1a:a7:df:
         d3:e6:c9:4f:2f:16:a4:0d:52:a0:cb:11:7b:24:3f:52:0e:da:
         f9:54:52:c8:b9:51:25:a9:f3:96:c7:46:19:12:22:ca:9a:99:
         29:4a:89:86:96:5c:dc:3f:65:18:89:78:59:fd:8d:a6:07:92:
         3e:4b:6b:55:9f:05:4c:47:4e:ad:93:26:1c:54:91:99:1b:d6:
         94:ab:86:63:a6:53:52:b7:9c:a4:b9:b4:57:8a:b4:78:68:0f:
         64:be:d7:d1:a5:e2:4c:65:da:e6:b4:c4:11:17:16:fa:de:c0:
         cb:d1:a8:54:df:de:13:cc:18:a0:7c:8f:9a:3a:91:33:ce:a5:
         97:df:84:38:55:8a:e2:dc:59:42:82:8a:2a:f7:bb:9b:62:a1:
         4a:67:a1:e1:24:29:fc:6d:d0:7f:bc:21:ba:cb:a6:fb:3d:76:
         e1:33:7a:da:16:ea:89:11:c2:c1:f8:55:67:c2:9f:80:7f:36:
         28:35:9a:03:68:27:61:45:0f:42:3c:5b:47:45:4d:aa:8a:fc:
         84:43:d4:41:64:7a:e7:ba:6e:fe:f5:ee:08:11:cf:70:24:67:
         ae:1d:f6:87
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBJDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCOEQw
N0E1QTAyQjFCNDU5OTNFNkNBRUZCNDdEMUQ1RTc1REExOTNDMB4XDTI0MDkxODA4
MDMwMloXDTI1MDkxNTAxMzAwM1owMzExMC8GA1UEAxMoNTVDQkQyMTY2QTg0MTNF
RjhCNEVDNDQ3RTgwOTU0MDJFRjdBQjhGOTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALq9hjFAm0+14ZrqEzEkE6NXwN6Vv5kl055dI4OKXb7/60eGaVMM
S11rWxHV4YHyelJysL0Sbb4ihljAQcHrDYrCx1lZURSsBIR5xQH10LE36W8VeOq8
i9EeDYiRtHvjIscu2vC4XHh2tm2ssVhR8yjlbUGx1+X0Wc1hDWecNmglDrloyrTc
5A4VCa8dCz6BCZu9gXHSxmL3lWjVtsPBAPRL3YfwkyYUQPPIj66uBe7e40Y4POBi
Um92mu8/+9274wixNQtt7Iw6f6dO6piqZFOpIS2fNBHPfruSAKKhAHuiQM+v+oa6
blLXFLBtdanipX79eWpO3wX2JN4h9RlrIw8CAwEAAaOCAigwggIkMB0GA1UdDgQW
BBRVy9IWaoQT74tOxEfoCVQC73q4+TAfBgNVHSMEGDAWgBS40HpaArG0WZPmyu+0
fR1eddoZPDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAwNzUvdU5CNldnS3h0Rm1UNXNydnRIMGRYblhhR1R3LmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvdU5CNldnS3h0Rm1UNXNydnRIMGRY
blhhR1R3LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMDc1L1ZjdlNGbXFFRS0tTFRzUkg2QWxVQXU5NnVQay5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAGFWBQwDQYJKoZIhvcNAQELBQADggEBAFTj6tTM4BEg0DWW/tdED8M6
6RPBpPSTXvmSaJYWVfhAPxqn39PmyU8vFqQNUqDLEXskP1IO2vlUUsi5USWp85bH
RhkSIsqamSlKiYaWXNw/ZRiJeFn9jaYHkj5La1WfBUxHTq2TJhxUkZkb1pSrhmOm
U1K3nKS5tFeKtHhoD2S+19Gl4kxl2ua0xBEXFvrewMvRqFTf3hPMGKB8j5o6kTPO
pZffhDhViuLcWUKCiir3u5tioUpnoeEkKfxt0H+8IbrLpvs9duEzetoW6okRwsH4
VWfCn4B/Nig1mgNoJ2FFD0I8W0dFTaqK/IRD1EFkeue6bv717ggRz3AkZ64d9oc=
-----END CERTIFICATE-----
Generated at Tue Oct 22 15:00:01 2024 by rpki-client on console-fra.rpki-client.org