Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/_mVjedjox9sOvEh20Qy1w9c-Plo.roa
File:                     _mVjedjox9sOvEh20Qy1w9c-Plo.roa (raw, json)
Hash identifier:          ujdxJg0Jp8kPok+xjbbjkEIN7dZKX9zsHzv/V0tIFzE=
Subject key identifier:   FE:65:63:79:D8:E8:C7:DB:0E:BC:48:76:D1:0C:B5:C3:D7:3E:3E:5A
Certificate issuer:       /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Certificate serial:       E5
Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/_mVjedjox9sOvEh20Qy1w9c-Plo.roa
Signing time:             Fri 31 May 2024 01:31:26 +0000
ROA not before:           Fri 31 May 2024 01:31:26 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     9370
IP address blocks:        113.20.160.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 229 (0xe5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
        Validity
            Not Before: May 31 01:31:26 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=FE656379D8E8C7DB0EBC4876D10CB5C3D73E3E5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:9d:4e:6a:ae:e4:38:55:ce:d1:75:f2:14:b6:
                    b1:0b:49:15:84:f5:74:83:38:3a:ea:e0:6a:13:ae:
                    71:5e:eb:1a:d0:14:01:a0:3d:d0:41:a5:2f:54:c3:
                    bd:3d:b4:95:cd:9d:c1:e0:88:ff:06:b9:ae:94:9d:
                    ca:74:29:30:ba:ea:fb:0e:7b:53:09:38:d8:72:85:
                    06:a4:7c:20:90:79:74:ec:5f:db:bc:99:c0:c5:5e:
                    bb:01:53:1a:88:c0:b1:2f:da:56:e3:bb:82:54:6e:
                    01:de:7b:b0:4d:4b:60:e6:13:70:5a:24:f9:2e:6e:
                    e5:bf:8d:4b:b8:0b:e9:14:69:d7:1f:13:db:22:a5:
                    c1:f6:e5:bb:5d:37:54:87:b5:27:f1:89:04:9b:40:
                    71:1e:06:49:a0:bd:82:88:d6:ee:7e:34:39:47:0c:
                    9f:f1:ad:89:87:33:c9:83:b9:e0:31:3a:2e:09:bb:
                    1a:a4:ba:b2:c1:18:09:dc:0c:7e:90:8f:17:8b:8e:
                    19:94:e2:c7:37:1e:30:ec:19:b6:e6:c8:6f:48:3b:
                    58:c2:29:01:0a:07:93:d0:6b:5b:c2:03:61:8c:e8:
                    72:49:9a:5e:d4:19:42:a4:a8:1b:45:40:d0:fd:8f:
                    f7:3e:81:9f:38:af:c7:ce:11:cc:11:ff:49:89:cc:
                    b9:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:65:63:79:D8:E8:C7:DB:0E:BC:48:76:D1:0C:B5:C3:D7:3E:3E:5A
            X509v3 Authority Key Identifier:
                keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/_mVjedjox9sOvEh20Qy1w9c-Plo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.20.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8e:17:b3:87:62:c7:90:05:0a:ac:5f:c7:b6:9d:d7:d8:9c:7d:
         4b:13:dd:75:f2:ce:df:ff:71:49:d7:1d:96:c6:86:f1:ce:62:
         79:19:4b:79:e2:89:ae:79:08:bd:32:51:d1:34:0f:94:70:18:
         28:93:77:ec:52:57:07:39:72:4a:3c:a6:f3:d5:0d:e3:cf:e7:
         65:e0:32:19:c9:9f:59:7b:8e:cc:b1:cf:11:cc:10:36:13:92:
         f0:84:e5:18:fa:cb:cf:1d:0f:a3:fc:db:0e:eb:18:30:70:ab:
         06:f1:e8:62:6f:05:2c:60:08:b1:e3:2e:c9:1d:42:2d:98:ce:
         2a:f7:1b:0c:78:95:bb:08:6a:c5:15:f3:94:97:20:80:83:83:
         98:b4:e5:40:93:43:e0:c7:d5:f4:cc:78:f6:92:38:4f:56:de:
         45:69:a8:1e:9c:63:ef:83:d0:cd:b3:c8:a2:4d:11:37:f3:4a:
         47:d2:5f:ef:44:23:7b:fc:2d:9e:51:d9:2d:85:40:b0:92:9b:
         30:45:58:53:e5:c3:43:88:cd:f6:e2:57:83:b6:a3:5b:58:5d:
         d7:2e:6a:dd:35:55:3f:ac:0a:c1:14:03:7a:f1:c6:33:91:a6:
         5c:70:63:be:f1:00:30:cd:c5:eb:65:18:b3:3d:e8:ee:97:e2:
         1b:38:8a:b9
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAOUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoOUEy
MUJERkYyRENBRkNDMTM4RjVCRkQ2QzAzMzBEMDIxOUUwRjUzMjAeFw0yNDA1MzEw
MTMxMjZaFw0yNTA1MTUwMTMwMDNaMDMxMTAvBgNVBAMTKEZFNjU2Mzc5RDhFOEM3
REIwRUJDNDg3NkQxMENCNUMzRDczRTNFNUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCdnU5qruQ4Vc7RdfIUtrELSRWE9XSDODrq4GoTrnFe6xrQFAGg
PdBBpS9Uw709tJXNncHgiP8Gua6Uncp0KTC66vsOe1MJONhyhQakfCCQeXTsX9u8
mcDFXrsBUxqIwLEv2lbju4JUbgHee7BNS2DmE3BaJPkubuW/jUu4C+kUadcfE9si
pcH25btdN1SHtSfxiQSbQHEeBkmgvYKI1u5+NDlHDJ/xrYmHM8mDueAxOi4Juxqk
urLBGAncDH6QjxeLjhmU4sc3HjDsGbbmyG9IO1jCKQEKB5PQa1vCA2GM6HJJml7U
GUKkqBtFQND9j/c+gZ84r8fOEcwR/0mJzLlhAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU/mVjedjox9sOvEh20Qy1w9c+PlowHwYDVR0jBBgwFoAUmiG9/y3K/ME49b/W
wDMNAhng9TIwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzI0Ny9taUc5X3kzS19NRTQ5Yl9Xd0RNTkFobmc5VEkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9taUc5X3kzS19NRTQ5Yl9Xd0RNTkFo
bmc5VEkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMjQ3L19tVmplZGpveDlzT3ZFaDIwUXkxdzljLVBsby5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAVxFKAwDQYJKoZIhvcNAQELBQADggEBAI4Xs4dix5AFCqxfx7ad19icfUsT
3XXyzt//cUnXHZbGhvHOYnkZS3niia55CL0yUdE0D5RwGCiTd+xSVwc5cko8pvPV
DePP52XgMhnJn1l7jsyxzxHMEDYTkvCE5Rj6y88dD6P82w7rGDBwqwbx6GJvBSxg
CLHjLskdQi2Yzir3Gwx4lbsIasUV85SXIICDg5i05UCTQ+DH1fTMePaSOE9W3kVp
qB6cY++D0M2zyKJNETfzSkfSX+9EI3v8LZ5R2S2FQLCSmzBFWFPlw0OIzfbiV4O2
o1tYXdcuat01VT+sCsEUA3rxxjORplxwY77xADDNxetlGLM96O6X4hs4irk=
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:29 2024 by rpki-client on console-ams.rpki-client.org