Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/249/CKl5_ozthDaK_sVFSZXhmL5W-Bo.roa
File:                     CKl5_ozthDaK_sVFSZXhmL5W-Bo.roa (raw, json)
Hash identifier:          6b1FvaJAQt5JZdJCB7hnW0HpyqwORYiuYW7WQLmBm70=
Subject key identifier:   08:A9:79:FE:8C:ED:84:36:8A:FE:C5:45:49:95:E1:98:BE:56:F8:1A
Certificate issuer:       /CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
Certificate serial:       0E
Authority key identifier: 27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/CKl5_ozthDaK_sVFSZXhmL5W-Bo.roa
Signing time:             Wed 28 Feb 2024 04:51:56 +0000
ROA not before:           Wed 28 Feb 2024 04:51:56 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     7679
IP address blocks:        119.47.32.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
        Validity
            Not Before: Feb 28 04:51:56 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=08A979FE8CED84368AFEC5454995E198BE56F81A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:48:24:c3:c9:ad:f1:3f:99:ee:59:ce:c9:88:
                    90:66:3b:99:23:1d:6f:62:f5:ea:67:ce:4b:aa:4f:
                    ca:f3:a3:e1:cb:bb:b4:60:03:91:3c:31:d6:55:87:
                    66:8e:55:cd:6f:03:7a:c5:cc:6b:a3:0e:f3:b5:92:
                    5f:57:66:16:d7:a7:8f:64:cb:f8:e1:f9:89:2d:de:
                    98:9e:38:d6:97:d2:3c:25:3a:fe:a3:f1:2c:ae:01:
                    09:7f:3e:a2:c6:9d:b4:64:4f:a7:f6:fc:16:22:f5:
                    3f:53:27:b3:a1:73:fb:8b:4a:9c:23:d9:51:7d:14:
                    b9:34:ab:91:91:ac:80:7d:bf:92:fb:e9:44:79:5e:
                    83:1f:db:b4:ce:55:bb:ec:f6:09:d2:8d:d7:03:3e:
                    3e:9d:4e:46:06:97:79:a2:73:80:ac:d0:15:67:c5:
                    11:d2:72:fc:1e:29:cc:e3:f0:9f:39:ed:36:99:f8:
                    24:79:ab:23:3d:43:82:b2:20:69:1f:dd:04:85:6e:
                    0f:b1:01:8b:a3:ce:67:cf:ca:53:07:52:19:8d:30:
                    f3:e1:9f:90:f6:7a:ed:b0:fc:9e:cf:c7:f9:82:0c:
                    b5:6b:ba:ad:ed:fc:e8:0c:63:3c:c9:e3:ed:09:c3:
                    cb:d7:bd:7f:b1:e5:d0:f0:ad:e7:55:be:94:79:de:
                    3f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:A9:79:FE:8C:ED:84:36:8A:FE:C5:45:49:95:E1:98:BE:56:F8:1A
            X509v3 Authority Key Identifier:
                keyid:27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/CKl5_ozthDaK_sVFSZXhmL5W-Bo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.47.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b3:71:12:63:8e:54:e2:f6:3e:6c:14:c1:84:26:cd:76:6e:cd:
         31:fb:32:0e:41:d2:28:7a:c1:7d:9f:6d:bd:c7:24:31:dc:b9:
         47:81:a6:e9:a7:ee:98:ce:73:ab:ba:f5:20:f4:62:f7:a3:23:
         22:22:a1:b4:d3:56:6c:2f:7a:dc:fd:be:d6:ea:1b:7f:77:d2:
         b9:ed:bd:a9:93:58:ad:d6:04:ac:f9:fd:ce:f2:ec:c7:b5:b6:
         c9:9f:df:77:b7:c1:82:8d:9f:25:e6:d7:1b:1f:57:29:92:bf:
         6d:5e:ef:8b:7e:d4:74:70:10:1f:00:ea:c8:d0:1a:84:f2:4d:
         9f:38:24:b8:bd:9c:f0:5e:91:d1:1b:01:8e:fc:88:16:62:c4:
         3b:db:b5:13:1c:6f:9e:72:c8:08:8b:8c:74:1a:f2:d9:f4:25:
         1a:62:f9:69:8f:db:07:cf:52:3f:da:1c:b5:24:f1:f7:4d:8f:
         34:25:65:4e:90:f2:d4:3f:c8:7a:02:31:64:19:db:cf:96:31:
         8d:a0:80:02:b5:91:db:f2:2e:2d:a0:4a:28:78:28:a2:9b:50:
         af:17:18:5b:e4:a0:e6:bc:83:03:f8:9c:28:65:4b:b9:e6:43:
         24:f5:42:ca:c9:9a:6d:a0:f8:cd:91:fb:fa:52:52:87:8b:b7:
         27:cc:d9:75
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBDjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygyNzVE
OTc4MkIxM0U5OTEyOENEMzRGMjJDMDlGRThFN0I1Q0JBNzBCMB4XDTI0MDIyODA0
NTE1NloXDTI1MDIxNDAxMzAwM1owMzExMC8GA1UEAxMoMDhBOTc5RkU4Q0VEODQz
NjhBRkVDNTQ1NDk5NUUxOThCRTU2RjgxQTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAO1IJMPJrfE/me5ZzsmIkGY7mSMdb2L16mfOS6pPyvOj4cu7tGAD
kTwx1lWHZo5VzW8DesXMa6MO87WSX1dmFtenj2TL+OH5iS3emJ441pfSPCU6/qPx
LK4BCX8+osadtGRPp/b8FiL1P1Mns6Fz+4tKnCPZUX0UuTSrkZGsgH2/kvvpRHle
gx/btM5Vu+z2CdKN1wM+Pp1ORgaXeaJzgKzQFWfFEdJy/B4pzOPwnzntNpn4JHmr
Iz1DgrIgaR/dBIVuD7EBi6POZ8/KUwdSGY0w8+GfkPZ67bD8ns/H+YIMtWu6re38
6AxjPMnj7QnDy9e9f7Hl0PCt51W+lHneP8sCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBQIqXn+jO2ENor+xUVJleGYvlb4GjAfBgNVHSMEGDAWgBQnXZeCsT6ZEozTTyLA
n+jntcunCzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjQ5L0oxMlhnckUtbVJLTTAwOGl3Sl9vNTdYTHB3cy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0oxMlhnckUtbVJLTTAwOGl3Sl9vNTdY
THB3cy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8yNDkvQ0tsNV9venRoRGFLX3NWRlNaWGhtTDVXLUJvLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBXcvIDANBgkqhkiG9w0BAQsFAAOCAQEAs3ESY45U4vY+bBTBhCbNdm7NMfsy
DkHSKHrBfZ9tvcckMdy5R4Gm6afumM5zq7r1IPRi96MjIiKhtNNWbC963P2+1uob
f3fSue29qZNYrdYErPn9zvLsx7W2yZ/fd7fBgo2fJebXGx9XKZK/bV7vi37UdHAQ
HwDqyNAahPJNnzgkuL2c8F6R0RsBjvyIFmLEO9u1ExxvnnLICIuMdBry2fQlGmL5
aY/bB89SP9octSTx902PNCVlTpDy1D/IegIxZBnbz5YxjaCAArWR2/IuLaBKKHgo
optQrxcYW+Sg5ryDA/icKGVLueZDJPVCysmabaD4zZH7+lJSh4u3J8zZdQ==
-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:32 2024 by rpki-client on console-ams.rpki-client.org