Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20214/kafqO83HAVCwySc-07rlqdKTmgY.roa
File:                     kafqO83HAVCwySc-07rlqdKTmgY.roa (raw, json)
Hash identifier:          DFvL43vFx9bAV0wMN41/bL2NMFJruDgxGScpILO8nPE=
Subject key identifier:   91:A7:EA:3B:CD:C7:01:50:B0:C9:27:3E:D3:BA:E5:A9:D2:93:9A:06
Certificate issuer:       /CN=250E82975D8291C44AA7E53EA15124F0EEA20B05
Certificate serial:       19
Authority key identifier: 25:0E:82:97:5D:82:91:C4:4A:A7:E5:3E:A1:51:24:F0:EE:A2:0B:05
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20214/kafqO83HAVCwySc-07rlqdKTmgY.roa
Signing time:             Mon 30 Sep 2024 01:29:10 +0000
ROA not before:           Mon 30 Sep 2024 01:29:10 +0000
ROA not after:            Mon 15 Sep 2025 01:30:03 +0000
asID:                     63800
IP address blocks:        103.131.151.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20214/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20214/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25 (0x19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=250E82975D8291C44AA7E53EA15124F0EEA20B05
        Validity
            Not Before: Sep 30 01:29:10 2024 GMT
            Not After : Sep 15 01:30:03 2025 GMT
        Subject: CN=91A7EA3BCDC70150B0C9273ED3BAE5A9D2939A06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f3:21:4f:46:11:ce:49:51:79:8b:4f:16:bb:
                    52:f6:5d:76:28:cd:93:66:ae:b7:30:44:04:aa:fa:
                    49:36:71:1d:a1:da:79:14:ad:aa:d4:63:77:fe:b1:
                    ac:a1:cb:7d:32:1e:82:77:82:71:cc:52:a9:63:f6:
                    d0:2c:a8:13:18:93:19:12:7a:86:a1:db:fa:80:13:
                    c8:c6:7c:21:a3:6b:f7:ba:c5:1b:a7:d3:ce:98:0a:
                    0f:32:0b:1e:40:e4:bd:70:18:c4:01:3d:91:6d:7a:
                    f1:7d:c5:f1:ac:4b:55:f6:b4:49:83:0b:a7:d0:91:
                    35:cb:31:67:ad:64:3e:57:db:11:e5:6b:41:51:b5:
                    87:eb:27:10:5e:b2:af:32:c8:8b:89:dd:e2:3c:6b:
                    4d:d1:a4:44:69:5d:7d:98:29:e5:2d:4a:3a:85:ed:
                    10:a4:8f:57:96:9d:05:6c:4e:fd:66:54:6c:50:78:
                    94:08:cf:ff:8b:67:cc:d4:0f:ed:74:78:0b:cb:ec:
                    d8:24:3a:33:e4:05:01:b3:74:f6:f2:a4:ad:4d:20:
                    41:e6:3f:97:58:00:74:b7:7b:f7:d5:f3:71:46:57:
                    29:82:60:55:35:01:f3:00:ef:fe:6b:ca:59:13:64:
                    b6:4a:2d:87:b0:c9:8c:86:c7:a9:cb:95:07:58:0d:
                    65:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:A7:EA:3B:CD:C7:01:50:B0:C9:27:3E:D3:BA:E5:A9:D2:93:9A:06
            X509v3 Authority Key Identifier:
                keyid:25:0E:82:97:5D:82:91:C4:4A:A7:E5:3E:A1:51:24:F0:EE:A2:0B:05

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20214/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20214/kafqO83HAVCwySc-07rlqdKTmgY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:39:36:d8:22:56:38:90:fa:f7:35:60:7e:08:1a:63:e9:7d:
         16:6d:14:bb:fc:21:b4:1a:fb:e5:8e:48:32:6a:2c:2f:ad:82:
         61:13:26:77:a2:74:5b:76:ed:9d:52:ce:fd:12:d3:7d:fb:87:
         f7:05:1d:5a:93:17:0d:6b:ba:87:15:29:e5:64:7c:29:36:ba:
         7c:a0:41:76:64:cd:1d:7b:b5:71:be:52:9b:fd:ff:5c:38:03:
         0b:9b:ba:ca:60:48:c2:4d:f7:3d:2f:75:1d:ed:b5:02:b3:a9:
         c9:31:ae:40:12:7f:b5:d9:3a:8c:af:a0:f0:e6:c7:6d:e4:6c:
         84:7c:87:30:a3:5f:85:3a:f3:54:1c:16:91:76:61:a7:6b:ad:
         d4:6d:48:a4:c9:78:30:ab:79:0a:89:11:bf:01:ca:04:55:76:
         96:fd:46:83:80:70:1b:fd:f7:ee:1c:2c:f1:cc:6a:c1:35:27:
         0a:07:55:8e:95:8d:6a:d3:a1:57:7f:75:5e:13:03:75:dc:a3:
         f9:dc:19:1d:43:51:aa:2c:9b:aa:91:7c:46:b2:00:7c:09:03:
         5c:c4:5b:15:32:14:f5:2d:ef:74:60:63:01:74:74:eb:d7:54:
         7e:63:4c:1d:d7:a7:f0:c0:39:27:1d:37:21:d0:5c:5f:19:e7:
         0a:48:65:43
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBGTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyNTBF
ODI5NzVEODI5MUM0NEFBN0U1M0VBMTUxMjRGMEVFQTIwQjA1MB4XDTI0MDkzMDAx
MjkxMFoXDTI1MDkxNTAxMzAwM1owMzExMC8GA1UEAxMoOTFBN0VBM0JDREM3MDE1
MEIwQzkyNzNFRDNCQUU1QTlEMjkzOUEwNjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALPzIU9GEc5JUXmLTxa7UvZddijNk2autzBEBKr6STZxHaHaeRSt
qtRjd/6xrKHLfTIegneCccxSqWP20CyoExiTGRJ6hqHb+oATyMZ8IaNr97rFG6fT
zpgKDzILHkDkvXAYxAE9kW168X3F8axLVfa0SYMLp9CRNcsxZ61kPlfbEeVrQVG1
h+snEF6yrzLIi4nd4jxrTdGkRGldfZgp5S1KOoXtEKSPV5adBWxO/WZUbFB4lAjP
/4tnzNQP7XR4C8vs2CQ6M+QFAbN09vKkrU0gQeY/l1gAdLd799XzcUZXKYJgVTUB
8wDv/mvKWRNktkoth7DJjIbHqcuVB1gNZR0CAwEAAaOCAigwggIkMB0GA1UdDgQW
BBSRp+o7zccBULDJJz7TuuWp0pOaBjAfBgNVHSMEGDAWgBQlDoKXXYKRxEqn5T6h
USTw7qILBTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjAyMTQvSlE2Q2wxMkNrY1JLcC1VLW9WRWs4TzZpQ3dVLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvSlE2Q2wxMkNrY1JLcC1VLW9WRWs4
TzZpQ3dVLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzIwMjE0L2thZnFPODNIQVZDd3lTYy0wN3JscWRLVG1nWS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBABng5cwDQYJKoZIhvcNAQELBQADggEBAFo5NtgiVjiQ+vc1YH4IGmPp
fRZtFLv8IbQa++WOSDJqLC+tgmETJneidFt27Z1Szv0S0337h/cFHVqTFw1ruocV
KeVkfCk2unygQXZkzR17tXG+Upv9/1w4AwubuspgSMJN9z0vdR3ttQKzqckxrkAS
f7XZOoyvoPDmx23kbIR8hzCjX4U681QcFpF2YadrrdRtSKTJeDCreQqJEb8BygRV
dpb9RoOAcBv99+4cLPHMasE1JwoHVY6VjWrToVd/dV4TA3Xco/ncGR1DUaosm6qR
fEayAHwJA1zEWxUyFPUt73RgYwF0dOvXVH5jTB3Xp/DAOScdNyHQXF8Z5wpIZUM=
-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:28 2024 by rpki-client on console-ams.rpki-client.org