Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/233/jsaJlhGw-FrMjV5c6w2bhDZl08o.roa
File:                     jsaJlhGw-FrMjV5c6w2bhDZl08o.roa (raw, json)
Hash identifier:          HFjnOnWDSd78O7fkzJv0NHa4Wj0KZBlKc3PS3EV+W80=
Subject key identifier:   8E:C6:89:96:11:B0:F8:5A:CC:8D:5E:5C:EB:0D:9B:84:36:65:D3:CA
Certificate issuer:       /CN=D788678E64D29184C23DAAADB594BFD9BAE2405C
Certificate serial:       42
Authority key identifier: D7:88:67:8E:64:D2:91:84:C2:3D:AA:AD:B5:94:BF:D9:BA:E2:40:5C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/14hnjmTSkYTCPaqttZS_2briQFw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/jsaJlhGw-FrMjV5c6w2bhDZl08o.roa
Signing time:             Sat 31 Aug 2024 01:30:16 +0000
ROA not before:           Sat 31 Aug 2024 01:30:16 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     7670
IP address blocks:        210.236.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/14hnjmTSkYTCPaqttZS_2briQFw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/14hnjmTSkYTCPaqttZS_2briQFw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/14hnjmTSkYTCPaqttZS_2briQFw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66 (0x42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D788678E64D29184C23DAAADB594BFD9BAE2405C
        Validity
            Not Before: Aug 31 01:30:16 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=8EC6899611B0F85ACC8D5E5CEB0D9B843665D3CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:62:22:15:e1:d9:9e:4d:de:7d:d7:c4:a6:e7:
                    04:8c:63:ce:90:10:dc:6a:fb:5e:52:48:c4:86:9c:
                    a5:8e:67:a0:15:02:8d:8c:94:56:98:e1:75:ff:c4:
                    2c:4b:b6:a6:9c:02:09:ec:d4:b6:6c:c2:44:b6:fb:
                    8e:3b:45:a8:5f:84:5a:52:9b:3d:c3:6d:6b:57:92:
                    dd:0c:8c:57:a7:36:1e:6e:49:a0:30:30:72:c8:8c:
                    17:29:1c:b5:66:35:94:f2:86:51:bb:39:40:d8:36:
                    06:8a:a0:fc:d1:dc:4e:f7:95:45:6d:79:0d:37:d8:
                    97:64:80:25:2f:4d:db:1b:8e:91:e4:9f:db:15:ff:
                    da:18:15:d7:ae:7f:aa:09:02:36:e3:ad:67:06:a1:
                    7d:65:c9:7e:a9:2a:2b:80:ea:71:59:ee:86:46:18:
                    f2:31:eb:c5:76:17:fc:63:a0:e2:69:06:c0:ab:34:
                    2a:53:b5:cc:0c:b7:15:0e:7e:b4:df:17:1a:66:8c:
                    e4:6c:fe:42:ae:f4:61:73:f4:06:35:2a:1e:ce:b3:
                    c7:60:f9:d1:15:78:8b:8c:dc:24:87:c0:2f:13:3a:
                    cd:d7:fb:99:93:06:20:08:47:79:89:72:e6:86:53:
                    a8:8a:83:b2:e2:cd:df:e8:dd:38:17:18:42:9e:b3:
                    a3:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:C6:89:96:11:B0:F8:5A:CC:8D:5E:5C:EB:0D:9B:84:36:65:D3:CA
            X509v3 Authority Key Identifier:
                keyid:D7:88:67:8E:64:D2:91:84:C2:3D:AA:AD:B5:94:BF:D9:BA:E2:40:5C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/14hnjmTSkYTCPaqttZS_2briQFw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/14hnjmTSkYTCPaqttZS_2briQFw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/jsaJlhGw-FrMjV5c6w2bhDZl08o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.236.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5f:18:4c:38:ba:71:e5:60:bf:07:1d:75:53:53:56:e2:44:01:
         f5:81:45:93:8c:0a:53:74:fe:60:38:da:87:9c:e2:4a:90:2c:
         55:43:84:42:65:77:f0:04:59:f9:38:82:04:5a:be:2e:d6:94:
         46:c1:e7:f7:6c:0e:b0:0a:e5:3b:7d:a7:0f:18:a4:3f:d8:99:
         0b:aa:65:a8:f6:45:e9:27:ec:b4:af:f3:7c:0c:92:51:04:ad:
         01:43:10:28:49:1d:21:9e:2d:04:85:54:ce:12:ee:3e:a9:34:
         8c:77:93:30:cc:8b:92:54:26:4a:c4:54:d6:bd:59:d6:3f:17:
         a5:d9:7a:fd:aa:97:59:b3:55:9e:b3:f8:dc:f5:96:04:7c:7a:
         81:9d:72:1f:ef:b9:b4:25:75:b4:90:1f:91:7a:6b:2d:86:5a:
         57:aa:a0:7c:d6:73:b1:ae:bc:71:29:08:a8:26:7e:4f:88:6d:
         63:44:2b:55:30:36:07:79:fc:0e:6d:ab:65:8d:b6:f1:eb:4b:
         66:52:fa:62:26:13:53:fb:2c:04:df:85:ad:92:a8:ab:8b:53:
         91:dd:71:8a:2f:e0:d6:14:80:d6:96:03:71:ee:08:34:eb:a5:
         c9:0b:81:36:15:8b:2c:44:ac:28:78:f1:fd:bd:c9:e0:cc:a2:
         be:af:18:27
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBQjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhENzg4
Njc4RTY0RDI5MTg0QzIzREFBQURCNTk0QkZEOUJBRTI0MDVDMB4XDTI0MDgzMTAx
MzAxNloXDTI1MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoOEVDNjg5OTYxMUIwRjg1
QUNDOEQ1RTVDRUIwRDlCODQzNjY1RDNDQTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMZiIhXh2Z5N3n3XxKbnBIxjzpAQ3Gr7XlJIxIacpY5noBUCjYyU
Vpjhdf/ELEu2ppwCCezUtmzCRLb7jjtFqF+EWlKbPcNta1eS3QyMV6c2Hm5JoDAw
csiMFykctWY1lPKGUbs5QNg2Boqg/NHcTveVRW15DTfYl2SAJS9N2xuOkeSf2xX/
2hgV165/qgkCNuOtZwahfWXJfqkqK4DqcVnuhkYY8jHrxXYX/GOg4mkGwKs0KlO1
zAy3FQ5+tN8XGmaM5Gz+Qq70YXP0BjUqHs6zx2D50RV4i4zcJIfALxM6zdf7mZMG
IAhHeYly5oZTqIqDsuLN3+jdOBcYQp6zoxcCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBSOxomWEbD4WsyNXlzrDZuENmXTyjAfBgNVHSMEGDAWgBTXiGeOZNKRhMI9qq21
lL/ZuuJAXDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjMzLzE0aG5qbVRTa1lUQ1BhcXR0WlNfMmJyaVFGdy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzE0aG5qbVRTa1lUQ1BhcXR0WlNfMmJy
aVFGdy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8yMzMvanNhSmxoR3ctRnJNalY1YzZ3MmJoRFpsMDhvLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBdLsADANBgkqhkiG9w0BAQsFAAOCAQEAXxhMOLpx5WC/Bx11U1NW4kQB9YFF
k4wKU3T+YDjah5ziSpAsVUOEQmV38ARZ+TiCBFq+LtaURsHn92wOsArlO32nDxik
P9iZC6plqPZF6SfstK/zfAySUQStAUMQKEkdIZ4tBIVUzhLuPqk0jHeTMMyLklQm
SsRU1r1Z1j8Xpdl6/aqXWbNVnrP43PWWBHx6gZ1yH++5tCV1tJAfkXprLYZaV6qg
fNZzsa68cSkIqCZ+T4htY0QrVTA2B3n8Dm2rZY228etLZlL6YiYTU/ssBN+FrZKo
q4tTkd1xii/g1hSA1pYDce4INOulyQuBNhWLLESsKHjx/b3J4Myivq8YJw==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:07 2025 by rpki-client