Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/240/bQsERLDOuB32Gsmq1G-I8vcLmHU.roa
File:                     bQsERLDOuB32Gsmq1G-I8vcLmHU.roa (raw, json)
Hash identifier:          mq3hBX5l1mqqs30amUuJCTWkXVGNOzIXFrB1aZouzQ0=
Subject key identifier:   6D:0B:04:44:B0:CE:B8:1D:F6:1A:C9:AA:D4:6F:88:F2:F7:0B:98:75
Certificate issuer:       /CN=B96964A7CE0A58F4AE3673F47D7A1D425BE4A07D
Certificate serial:       09
Authority key identifier: B9:69:64:A7:CE:0A:58:F4:AE:36:73:F4:7D:7A:1D:42:5B:E4:A0:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/bQsERLDOuB32Gsmq1G-I8vcLmHU.roa
Signing time:             Fri 18 Aug 2023 02:24:20 +0000
ROA not before:           Fri 18 Aug 2023 02:24:20 +0000
ROA not after:            Sat 17 Aug 2024 02:01:09 +0000
asID:                     9597
IP address blocks:        122.200.192.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B96964A7CE0A58F4AE3673F47D7A1D425BE4A07D
        Validity
            Not Before: Aug 18 02:24:20 2023 GMT
            Not After : Aug 17 02:01:09 2024 GMT
        Subject: CN=6D0B0444B0CEB81DF61AC9AAD46F88F2F70B9875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:eb:27:55:a4:b6:82:7e:c3:60:f3:99:bd:3f:
                    b4:e7:10:d9:71:f5:d6:89:1e:af:9a:49:21:6f:52:
                    bb:4d:cd:0f:15:01:5b:98:47:31:84:5a:59:d3:3d:
                    89:3d:4b:9c:96:18:97:94:70:56:6b:07:cd:80:cc:
                    ee:ea:c0:35:aa:db:7e:a2:ce:b3:9f:51:26:d3:d0:
                    ca:85:96:7c:26:15:64:3e:82:eb:8a:85:2a:a4:39:
                    6c:b5:37:f8:e6:ea:29:d5:7d:c0:fa:64:94:22:23:
                    0f:42:6a:86:63:ae:d9:3b:c2:39:02:f6:1d:59:3f:
                    b2:a6:b8:e7:d0:c1:94:b8:57:c6:20:21:27:96:7c:
                    0e:08:74:e7:86:82:70:58:4c:4c:1d:f5:43:b8:d8:
                    40:4a:cd:34:7b:10:8c:e2:ef:80:a2:8b:5e:46:55:
                    f7:30:7d:f6:b6:b1:bd:4d:a1:c3:bd:fe:60:f2:f4:
                    ba:76:45:28:fd:2a:cf:c9:c7:32:e8:ab:46:2e:0e:
                    8a:1d:15:8c:f5:9b:eb:8a:d7:fc:8b:d8:1e:d6:0b:
                    b9:c6:86:74:1f:fb:7f:a5:b9:05:22:24:01:0c:34:
                    ae:a4:a3:21:aa:62:b9:a5:5d:d1:88:0c:65:e1:9d:
                    40:0f:e9:c2:fd:f8:4e:94:75:12:dd:96:7e:3f:7a:
                    49:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:0B:04:44:B0:CE:B8:1D:F6:1A:C9:AA:D4:6F:88:F2:F7:0B:98:75
            X509v3 Authority Key Identifier:
                keyid:B9:69:64:A7:CE:0A:58:F4:AE:36:73:F4:7D:7A:1D:42:5B:E4:A0:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/bQsERLDOuB32Gsmq1G-I8vcLmHU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.200.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         41:f9:db:8a:6a:9c:f0:48:9d:4b:a8:27:c4:27:e9:85:2d:11:
         d9:f3:3c:69:c3:df:fa:37:b3:2b:7a:ba:fc:3e:3b:cf:ce:4b:
         be:18:70:3e:df:25:c9:6c:5c:c7:b3:e8:75:a8:aa:5f:25:c9:
         45:91:51:52:5f:a2:17:02:f9:8e:e9:7d:40:b1:b4:d7:d6:fc:
         75:84:89:87:dc:1d:bd:8f:cb:bc:86:da:d3:b2:60:b0:af:1c:
         80:ba:34:f4:bf:4e:bd:e7:ff:28:5a:f0:cf:72:fa:1a:8d:03:
         ef:fa:3a:1e:b1:c4:a0:9b:c8:58:90:8b:58:29:4c:f3:62:2e:
         07:45:db:9b:53:7b:38:a9:39:75:e9:60:ab:77:dc:96:c6:a4:
         18:67:ae:a8:6f:53:f9:2f:0c:d8:20:d8:f6:c1:17:bc:91:79:
         b7:e3:78:78:3b:1e:04:b2:86:54:ac:00:77:4d:d8:4f:6d:5c:
         b6:34:89:33:11:a9:c2:f8:d4:b7:50:78:a4:21:0b:1b:ec:13:
         f8:e7:65:73:f0:2d:e9:08:4b:21:c5:9a:a3:bf:9b:64:7e:81:
         43:86:43:f6:c4:50:5c:11:5f:93:77:94:2e:f5:72:58:1c:9a:
         65:58:8b:f6:0c:3b:0d:4e:b7:cd:1c:ea:b6:28:67:d2:95:e0:
         77:26:ed:f8
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBCTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCOTY5
NjRBN0NFMEE1OEY0QUUzNjczRjQ3RDdBMUQ0MjVCRTRBMDdEMB4XDTIzMDgxODAy
MjQyMFoXDTI0MDgxNzAyMDEwOVowMzExMC8GA1UEAxMoNkQwQjA0NDRCMENFQjgx
REY2MUFDOUFBRDQ2Rjg4RjJGNzBCOTg3NTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMHrJ1WktoJ+w2Dzmb0/tOcQ2XH11oker5pJIW9Su03NDxUBW5hH
MYRaWdM9iT1LnJYYl5RwVmsHzYDM7urANarbfqLOs59RJtPQyoWWfCYVZD6C64qF
KqQ5bLU3+ObqKdV9wPpklCIjD0JqhmOu2TvCOQL2HVk/sqa459DBlLhXxiAhJ5Z8
Dgh054aCcFhMTB31Q7jYQErNNHsQjOLvgKKLXkZV9zB99raxvU2hw73+YPL0unZF
KP0qz8nHMuirRi4Oih0VjPWb64rX/IvYHtYLucaGdB/7f6W5BSIkAQw0rqSjIapi
uaVd0YgMZeGdQA/pwv34TpR1Et2Wfj96SQkCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBRtCwREsM64HfYayarUb4jy9wuYdTAfBgNVHSMEGDAWgBS5aWSnzgpY9K42c/R9
eh1CW+SgfTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjQwL3VXbGtwODRLV1BTdU5uUDBmWG9kUWx2a29IMC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3VXbGtwODRLV1BTdU5uUDBmWG9kUWx2
a29IMC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8yNDAvYlFzRVJMRE91QjMyR3NtcTFHLUk4dmNMbUhVLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBnrIwDANBgkqhkiG9w0BAQsFAAOCAQEAQfnbimqc8EidS6gnxCfphS0R2fM8
acPf+jezK3q6/D47z85LvhhwPt8lyWxcx7PodaiqXyXJRZFRUl+iFwL5jul9QLG0
19b8dYSJh9wdvY/LvIba07JgsK8cgLo09L9Ovef/KFrwz3L6Go0D7/o6HrHEoJvI
WJCLWClM82IuB0Xbm1N7OKk5delgq3fclsakGGeuqG9T+S8M2CDY9sEXvJF5t+N4
eDseBLKGVKwAd03YT21ctjSJMxGpwvjUt1B4pCELG+wT+Odlc/At6QhLIcWao7+b
ZH6BQ4ZD9sRQXBFfk3eULvVyWByaZViL9gw7DU63zRzqtihn0pXgdybt+A==
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:43 2024 by rpki-client on console-fra.rpki-client.org