Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/240/Nub_hK47YsU7b-Nh890Fmt6xcc4.roa
File:                     Nub_hK47YsU7b-Nh890Fmt6xcc4.roa (raw, json)
Hash identifier:          RNqIqY9kQdvxbSByAJu8UM6MX53d4Kru+zH60DLvZwA=
Subject key identifier:   36:E6:FF:84:AE:3B:62:C5:3B:6F:E3:61:F3:DD:05:9A:DE:B1:71:CE
Certificate issuer:       /CN=B96964A7CE0A58F4AE3673F47D7A1D425BE4A07D
Certificate serial:       2A
Authority key identifier: B9:69:64:A7:CE:0A:58:F4:AE:36:73:F4:7D:7A:1D:42:5B:E4:A0:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/Nub_hK47YsU7b-Nh890Fmt6xcc4.roa
Signing time:             Sat 03 Aug 2024 02:01:48 +0000
ROA not before:           Sat 03 Aug 2024 02:01:48 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     9597
IP address blocks:        180.235.224.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42 (0x2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B96964A7CE0A58F4AE3673F47D7A1D425BE4A07D
        Validity
            Not Before: Aug  3 02:01:48 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=36E6FF84AE3B62C53B6FE361F3DD059ADEB171CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:24:e6:52:f5:1f:bd:f4:15:be:ee:ed:84:ec:
                    d9:07:83:dc:8a:e0:b3:45:68:b1:8f:88:56:5f:7e:
                    0a:89:4f:95:8e:7d:a8:cb:7a:13:b4:64:80:6d:5e:
                    66:ae:ee:df:2b:9d:cc:c8:66:78:93:24:f7:ec:b2:
                    7b:55:4f:cf:3a:14:d1:0d:6c:f7:b7:60:64:35:3f:
                    7a:74:a2:a6:98:c9:b4:d4:6e:a9:4c:81:37:e3:25:
                    da:b5:d8:96:7a:3a:de:f5:e5:52:dc:86:6b:4d:c7:
                    e0:8e:17:74:99:30:38:94:ae:6f:83:e9:ae:87:27:
                    be:c6:ec:5b:66:61:03:bf:f4:39:3e:5e:60:82:cf:
                    5e:37:94:e2:a0:c1:b7:8f:7c:48:d3:8b:28:14:44:
                    f8:c5:a0:da:6a:12:0a:36:5b:e4:62:16:00:1f:69:
                    30:fa:da:54:d7:9f:03:ab:65:e4:84:a1:13:0c:27:
                    e2:4d:10:43:e1:c4:37:a3:d2:bf:c0:63:d9:b9:8b:
                    31:88:d0:c4:46:f9:ea:73:ee:e7:b6:29:8c:9f:99:
                    65:c4:3c:c3:75:16:5c:27:45:6b:3c:cc:81:50:db:
                    75:43:bd:2b:91:09:ba:b2:fc:95:9e:75:0f:ac:ba:
                    38:06:ae:92:c8:64:27:07:7a:59:ef:58:e5:96:7c:
                    b2:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:E6:FF:84:AE:3B:62:C5:3B:6F:E3:61:F3:DD:05:9A:DE:B1:71:CE
            X509v3 Authority Key Identifier:
                keyid:B9:69:64:A7:CE:0A:58:F4:AE:36:73:F4:7D:7A:1D:42:5B:E4:A0:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/Nub_hK47YsU7b-Nh890Fmt6xcc4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.235.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         31:f5:d6:c6:73:03:a5:7f:2a:46:32:7f:fb:9f:df:5a:ea:58:
         e8:f1:e3:fd:56:ab:a3:07:9e:9e:08:a8:75:0c:45:1f:f6:94:
         c3:6a:64:48:ac:76:8f:6e:3a:96:3b:d1:13:2d:7e:ed:72:65:
         a0:b6:c1:cd:71:b5:38:63:49:1e:26:0f:5f:3e:c1:ef:40:1c:
         33:97:73:46:f8:5a:19:e7:74:b2:53:75:d8:51:03:44:94:c2:
         55:10:e4:47:53:2d:dc:c9:ba:b1:77:5e:20:db:69:02:75:a9:
         4f:1c:71:14:dc:0d:d3:ca:40:81:21:b2:80:a7:33:d4:cf:89:
         38:da:af:06:e7:dd:34:49:42:a1:6a:45:3f:24:c5:01:4c:17:
         c5:bc:9f:e5:d6:e2:c2:99:2c:82:3d:b7:a1:93:b3:6a:00:92:
         be:06:13:82:1c:8d:d6:10:76:f9:be:6b:f8:12:6b:35:ee:81:
         2d:46:58:86:91:bc:b8:92:59:98:33:43:02:07:f0:5a:af:ad:
         c4:3b:1e:cd:16:38:58:1c:22:67:90:aa:a0:ae:50:1b:83:7a:
         1c:d7:80:83:c8:d2:6c:51:e5:1a:62:ac:59:dc:c9:7f:02:c1:
         ec:3e:3f:78:77:a6:99:46:5f:3c:2d:4f:3b:b2:b0:ce:fd:bb:
         a8:a0:ce:90
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBKjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCOTY5
NjRBN0NFMEE1OEY0QUUzNjczRjQ3RDdBMUQ0MjVCRTRBMDdEMB4XDTI0MDgwMzAy
MDE0OFoXDTI1MDcxNTAxMzAwMlowMzExMC8GA1UEAxMoMzZFNkZGODRBRTNCNjJD
NTNCNkZFMzYxRjNERDA1OUFERUIxNzFDRTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOAk5lL1H730Fb7u7YTs2QeD3Irgs0VosY+IVl9+ColPlY59qMt6
E7RkgG1eZq7u3yudzMhmeJMk9+yye1VPzzoU0Q1s97dgZDU/enSippjJtNRuqUyB
N+Ml2rXYlno63vXlUtyGa03H4I4XdJkwOJSub4PprocnvsbsW2ZhA7/0OT5eYILP
XjeU4qDBt498SNOLKBRE+MWg2moSCjZb5GIWAB9pMPraVNefA6tl5IShEwwn4k0Q
Q+HEN6PSv8Bj2bmLMYjQxEb56nPu57YpjJ+ZZcQ8w3UWXCdFazzMgVDbdUO9K5EJ
urL8lZ51D6y6OAaukshkJwd6We9Y5ZZ8sj0CAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBQ25v+ErjtixTtv42Hz3QWa3rFxzjAfBgNVHSMEGDAWgBS5aWSnzgpY9K42c/R9
eh1CW+SgfTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjQwL3VXbGtwODRLV1BTdU5uUDBmWG9kUWx2a29IMC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3VXbGtwODRLV1BTdU5uUDBmWG9kUWx2
a29IMC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8yNDAvTnViX2hLNDdZc1U3Yi1OaDg5MEZtdDZ4Y2M0LnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBbTr4DANBgkqhkiG9w0BAQsFAAOCAQEAMfXWxnMDpX8qRjJ/+5/fWupY6PHj
/VaroweengiodQxFH/aUw2pkSKx2j246ljvREy1+7XJloLbBzXG1OGNJHiYPXz7B
70AcM5dzRvhaGed0slN12FEDRJTCVRDkR1Mt3Mm6sXdeINtpAnWpTxxxFNwN08pA
gSGygKcz1M+JONqvBufdNElCoWpFPyTFAUwXxbyf5dbiwpksgj23oZOzagCSvgYT
ghyN1hB2+b5r+BJrNe6BLUZYhpG8uJJZmDNDAgfwWq+txDsezRY4WBwiZ5CqoK5Q
G4N6HNeAg8jSbFHlGmKsWdzJfwLB7D4/eHemmUZfPC1PO7Kwzv27qKDOkA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 15:23:56 2024 by rpki-client on console-fra.rpki-client.org