Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2370/A4zBfYk4tOFyRxFd_4WatAnXylM.roa
File:                     A4zBfYk4tOFyRxFd_4WatAnXylM.roa (raw, json)
Hash identifier:          wqKAmd8jfZ7N0EQ9e3/BGuyjPw5vQ2AELqw+6lwnlzM=
Subject key identifier:   03:8C:C1:7D:89:38:B4:E1:72:47:11:5D:FF:85:9A:B4:09:D7:CA:53
Certificate issuer:       /CN=00711F2DD7667CFB08804BE8FA284A49E613EDC4
Certificate serial:       2E
Authority key identifier: 00:71:1F:2D:D7:66:7C:FB:08:80:4B:E8:FA:28:4A:49:E6:13:ED:C4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/AHEfLddmfPsIgEvo-ihKSeYT7cQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2370/A4zBfYk4tOFyRxFd_4WatAnXylM.roa
Signing time:             Mon 01 Jan 2024 01:28:09 +0000
ROA not before:           Mon 01 Jan 2024 01:28:09 +0000
ROA not after:            Sat 14 Dec 2024 01:30:03 +0000
asID:                     55396
IP address blocks:        192.50.151.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2370/AHEfLddmfPsIgEvo-ihKSeYT7cQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2370/AHEfLddmfPsIgEvo-ihKSeYT7cQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/AHEfLddmfPsIgEvo-ihKSeYT7cQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46 (0x2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00711F2DD7667CFB08804BE8FA284A49E613EDC4
        Validity
            Not Before: Jan  1 01:28:09 2024 GMT
            Not After : Dec 14 01:30:03 2024 GMT
        Subject: CN=038CC17D8938B4E17247115DFF859AB409D7CA53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:92:ee:21:68:ab:5d:c1:c1:dd:bd:ab:e2:15:
                    e7:39:8b:d8:10:e9:bc:c5:7e:b9:84:21:ce:6f:e4:
                    0e:e6:dc:01:29:0a:d8:ea:72:a9:1a:3c:f2:8a:cf:
                    ad:a2:31:16:4b:04:de:66:59:fb:b0:e9:70:33:39:
                    f8:d8:a3:11:42:07:f7:2f:cc:e4:9f:89:f3:eb:09:
                    64:77:84:23:0a:7e:c5:aa:08:10:ec:82:96:72:af:
                    8a:75:fb:42:ab:71:6e:63:c0:bc:01:e4:15:76:7b:
                    56:fa:7b:06:2d:c7:da:e6:8b:53:1c:37:de:47:4e:
                    e9:24:ee:94:c8:09:d6:d1:68:41:53:21:8f:a5:fd:
                    e4:48:d4:4a:c0:60:55:87:35:50:60:a4:fa:fe:dd:
                    be:de:6c:02:8d:ae:45:ea:67:89:51:3f:c4:0c:f5:
                    40:09:c7:b9:9b:e9:4f:39:4b:26:55:a0:2d:87:dd:
                    66:2b:36:d3:f2:61:05:78:98:df:3d:59:e6:82:d8:
                    20:ae:64:48:7c:0a:e3:4a:a0:a0:81:69:c6:9d:1c:
                    7f:21:a0:cc:52:20:9d:00:2a:0a:f1:0d:82:fc:9b:
                    43:68:b4:5a:fa:bb:00:0d:0f:58:f8:d8:c9:19:4d:
                    0a:6b:44:8d:02:8e:9f:e7:c7:00:76:1f:b7:20:01:
                    c9:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:8C:C1:7D:89:38:B4:E1:72:47:11:5D:FF:85:9A:B4:09:D7:CA:53
            X509v3 Authority Key Identifier:
                keyid:00:71:1F:2D:D7:66:7C:FB:08:80:4B:E8:FA:28:4A:49:E6:13:ED:C4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2370/AHEfLddmfPsIgEvo-ihKSeYT7cQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/AHEfLddmfPsIgEvo-ihKSeYT7cQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2370/A4zBfYk4tOFyRxFd_4WatAnXylM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.50.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:36:80:cd:21:46:3f:b9:84:fd:f2:15:c4:55:4b:5f:9c:f5:
         60:eb:62:9c:d6:d4:25:0f:6b:3a:64:55:ed:7a:67:2e:d9:8d:
         63:50:8e:69:24:2a:33:84:41:f2:f2:4b:99:5f:f0:66:35:36:
         16:ce:b1:75:cc:21:38:ca:16:b4:dc:cb:10:ff:e9:10:44:8c:
         1a:b9:e1:ef:f0:35:1b:2a:4a:24:4d:87:75:51:2c:7b:4d:75:
         60:4b:ee:05:93:2a:60:1e:b4:3f:58:d6:29:8a:c9:c3:df:ee:
         1c:74:1e:7c:62:4d:7a:02:18:3c:35:ed:93:9e:e3:ce:16:02:
         aa:cc:2a:58:23:e9:37:e7:76:cf:ec:10:13:7f:15:0c:2f:da:
         63:bb:1f:ef:a2:b3:d8:fe:b0:d2:4f:42:79:2b:ec:5a:8f:94:
         05:49:75:64:bc:1f:a3:64:e4:79:00:da:69:9a:b0:88:0f:71:
         a1:87:1f:ae:ed:8a:61:92:f3:10:d7:85:88:31:cd:f1:85:6b:
         d8:a9:36:5a:a6:b6:1d:30:c0:a7:b3:50:e3:ad:06:ef:e1:d8:
         2a:b9:39:f0:d9:a7:2f:13:a7:3d:2d:1b:47:a3:d0:52:6f:78:
         20:ba:bc:13:9f:fc:9e:a3:4f:f9:d9:4a:9e:34:98:60:a2:b4:
         d7:77:05:17
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgIBLjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwMDcx
MUYyREQ3NjY3Q0ZCMDg4MDRCRThGQTI4NEE0OUU2MTNFREM0MB4XDTI0MDEwMTAx
MjgwOVoXDTI0MTIxNDAxMzAwM1owMzExMC8GA1UEAxMoMDM4Q0MxN0Q4OTM4QjRF
MTcyNDcxMTVERkY4NTlBQjQwOUQ3Q0E1MzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAK6S7iFoq13Bwd29q+IV5zmL2BDpvMV+uYQhzm/kDubcASkK2Opy
qRo88orPraIxFksE3mZZ+7DpcDM5+NijEUIH9y/M5J+J8+sJZHeEIwp+xaoIEOyC
lnKvinX7QqtxbmPAvAHkFXZ7Vvp7Bi3H2uaLUxw33kdO6STulMgJ1tFoQVMhj6X9
5EjUSsBgVYc1UGCk+v7dvt5sAo2uRepniVE/xAz1QAnHuZvpTzlLJlWgLYfdZis2
0/JhBXiY3z1Z5oLYIK5kSHwK40qgoIFpxp0cfyGgzFIgnQAqCvENgvybQ2i0Wvq7
AA0PWPjYyRlNCmtEjQKOn+fHAHYftyAByckCAwEAAaOCAiYwggIiMB0GA1UdDgQW
BBQDjMF9iTi04XJHEV3/hZq0CdfKUzAfBgNVHSMEGDAWgBQAcR8t12Z8+wiAS+j6
KEpJ5hPtxDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa
oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjM3MC9BSEVmTGRkbWZQc0lnRXZvLWloS1NlWVQ3Y1EuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9BSEVmTGRkbWZQc0lnRXZvLWloS1Nl
WVQ3Y1EuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI
KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMjM3MC9BNHpCZllrNHRPRnlSeEZkXzRXYXRBblh5bE0ucm9h
MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv
cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA
ATAGAwQAwDKXMA0GCSqGSIb3DQEBCwUAA4IBAQCsNoDNIUY/uYT98hXEVUtfnPVg
62Kc1tQlD2s6ZFXtemcu2Y1jUI5pJCozhEHy8kuZX/BmNTYWzrF1zCE4yha03MsQ
/+kQRIwaueHv8DUbKkokTYd1USx7TXVgS+4FkypgHrQ/WNYpisnD3+4cdB58Yk16
Ahg8Ne2TnuPOFgKqzCpYI+k353bP7BATfxUML9pjux/vorPY/rDST0J5K+xaj5QF
SXVkvB+jZOR5ANppmrCID3Ghhx+u7YphkvMQ14WIMc3xhWvYqTZaprYdMMCns1Dj
rQbv4dgquTnw2acvE6c9LRtHo9BSb3ggurwTn/yeo0/52UqeNJhgorTXdwUX
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:29 2024 by rpki-client on console-ams.rpki-client.org