Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/yvnA1MrpcqCFqx7K9AzNztfRu_o.roa
File:                     yvnA1MrpcqCFqx7K9AzNztfRu_o.roa (raw, json)
Hash identifier:          VCMK7Vjsngj0GDkSrIRiGt4YIENiSBxy/GdDyhHHTFM=
Subject key identifier:   CA:F9:C0:D4:CA:E9:72:A0:85:AB:1E:CA:F4:0C:CD:CE:D7:D1:BB:FA
Certificate issuer:       /CN=06FA662194FCF1EB983AB44CC913004180770D18
Certificate serial:       30
Authority key identifier: 06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/yvnA1MrpcqCFqx7K9AzNztfRu_o.roa
Signing time:             Thu 25 Jan 2024 01:22:37 +0000
ROA not before:           Thu 25 Jan 2024 01:22:37 +0000
ROA not after:            Tue 14 Jan 2025 01:30:02 +0000
asID:                     2514
IP address blocks:        219.102.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Dec 2024 00:11:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48 (0x30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06FA662194FCF1EB983AB44CC913004180770D18
        Validity
            Not Before: Jan 25 01:22:37 2024 GMT
            Not After : Jan 14 01:30:02 2025 GMT
        Subject: CN=CAF9C0D4CAE972A085AB1ECAF40CCDCED7D1BBFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:8b:bb:91:6e:8a:ea:54:31:38:9b:ce:fc:0c:
                    d0:a9:b0:67:4c:d7:52:27:3c:1d:c4:ae:f0:e9:6f:
                    13:05:8d:16:31:36:ad:bb:4b:1f:db:0c:7c:03:65:
                    4f:c6:ee:0b:93:d9:1a:fd:c7:fc:fb:d2:33:a5:d7:
                    d6:cc:b3:ff:18:64:4f:e6:2a:e9:d4:e7:a2:ef:92:
                    c4:a0:75:e1:86:34:f1:b8:6b:08:4b:91:89:78:c7:
                    a6:38:a4:8a:7e:4b:b9:fc:c9:23:06:3e:c5:36:ab:
                    bc:6b:c2:98:3e:ee:6f:96:ba:92:4a:fe:19:53:1d:
                    ef:00:cd:37:76:44:de:6e:39:1f:79:79:d4:f9:d7:
                    89:7a:a4:7c:6d:b8:50:d1:00:ab:5c:27:dc:06:83:
                    ef:16:b1:19:df:c2:d6:a5:17:21:74:59:54:79:0d:
                    49:16:a0:dd:c7:21:67:c7:71:05:ab:20:26:dd:95:
                    98:0c:ee:ba:b6:93:67:48:fa:1e:ba:ec:fe:5b:ba:
                    f3:63:6c:5a:4b:2a:1e:83:c2:29:4a:2b:6b:2d:96:
                    19:57:d7:24:e8:12:97:fe:38:f2:29:5b:74:58:dd:
                    44:66:b8:43:b5:ac:8a:70:69:55:04:cd:96:0d:72:
                    df:b0:54:16:ed:1d:9b:dd:c6:8b:cf:be:ec:dd:bd:
                    eb:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:F9:C0:D4:CA:E9:72:A0:85:AB:1E:CA:F4:0C:CD:CE:D7:D1:BB:FA
            X509v3 Authority Key Identifier:
                keyid:06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/yvnA1MrpcqCFqx7K9AzNztfRu_o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.102.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         17:bd:de:42:b9:35:e1:ea:6d:97:8b:9a:da:2c:62:b8:7b:29:
         b9:df:02:63:cb:68:c5:35:b9:95:bc:8d:e0:b1:ab:f4:e6:f7:
         c4:ac:03:46:2f:6d:52:eb:92:74:9b:8e:eb:fc:9d:51:2b:a3:
         74:b1:7e:82:9b:ef:70:cf:85:5b:75:ca:4e:60:a4:8b:07:e2:
         1d:66:fd:93:90:8c:ad:b5:d4:d8:53:d5:e2:25:52:b0:29:11:
         4f:86:61:42:a2:e8:c9:73:43:07:dd:17:71:6c:24:ba:4e:5a:
         42:25:cf:5c:8c:ce:a2:bd:46:ad:46:ff:96:3a:ff:c3:10:d9:
         38:71:cb:c2:82:bd:1d:86:bb:a0:36:a6:cd:14:6b:04:72:36:
         a2:25:51:80:b9:7b:85:98:ce:c8:6b:52:c8:1d:ae:7b:a0:ce:
         69:98:b5:b4:22:aa:f4:86:9c:0b:97:8d:a1:82:02:d8:41:85:
         55:9a:06:a5:0a:c1:72:05:5f:61:04:0e:6a:18:ea:fd:b5:cb:
         c8:5e:35:28:81:38:e8:88:31:91:5d:a3:0b:88:d1:28:d8:e0:
         ae:44:37:39:74:1e:20:1d:e5:bb:ed:de:65:64:bb:b8:ae:58:
         4a:98:79:76:d2:08:48:29:f7:f4:0f:50:91:bf:16:5a:f5:46:
         06:63:ff:9f
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIBMDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwNkZB
NjYyMTk0RkNGMUVCOTgzQUI0NENDOTEzMDA0MTgwNzcwRDE4MB4XDTI0MDEyNTAx
MjIzN1oXDTI1MDExNDAxMzAwMlowMzExMC8GA1UEAxMoQ0FGOUMwRDRDQUU5NzJB
MDg1QUIxRUNBRjQwQ0NEQ0VEN0QxQkJGQTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANeLu5FuiupUMTibzvwM0KmwZ0zXUic8HcSu8OlvEwWNFjE2rbtL
H9sMfANlT8buC5PZGv3H/PvSM6XX1syz/xhkT+Yq6dTnou+SxKB14YY08bhrCEuR
iXjHpjikin5LufzJIwY+xTarvGvCmD7ub5a6kkr+GVMd7wDNN3ZE3m45H3l51PnX
iXqkfG24UNEAq1wn3AaD7xaxGd/C1qUXIXRZVHkNSRag3cchZ8dxBasgJt2VmAzu
uraTZ0j6Hrrs/lu682NsWksqHoPCKUoray2WGVfXJOgSl/448ilbdFjdRGa4Q7Ws
inBpVQTNlg1y37BUFu0dm93Gi8++7N2961UCAwEAAaOCAiEwggIdMB0GA1UdDgQW
BBTK+cDUyulyoIWrHsr0DM3O19G7+jAfBgNVHSMEGDAWgBQG+mYhlPzx65g6tEzJ
EwBBgHcNGDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY
oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjkvQnZwbUlaVDg4ZXVZT3JSTXlSTUFRWUIzRFJnLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvQnZwbUlaVDg4ZXVZT3JSTXlSTUFRWUIz
RFJnLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgboGCCsGAQUFBwELBIGtMIGqMGAGCCsG
AQUFBzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzI5L3l2bkExTXJwY3FDRnF4N0s5QXpOenRmUnVfby5yb2EwRgYI
KwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRw
L2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwDbZjANBgkqhkiG9w0BAQsFAAOCAQEAF73eQrk14eptl4ua2ixiuHspud8CY8to
xTW5lbyN4LGr9Ob3xKwDRi9tUuuSdJuO6/ydUSujdLF+gpvvcM+FW3XKTmCkiwfi
HWb9k5CMrbXU2FPV4iVSsCkRT4ZhQqLoyXNDB90XcWwkuk5aQiXPXIzOor1GrUb/
ljr/wxDZOHHLwoK9HYa7oDamzRRrBHI2oiVRgLl7hZjOyGtSyB2ue6DOaZi1tCKq
9IacC5eNoYIC2EGFVZoGpQrBcgVfYQQOahjq/bXLyF41KIE46IgxkV2jC4jRKNjg
rkQ3OXQeIB3lu+3eZWS7uK5YSph5dtIISCn39A9Qkb8WWvVGBmP/nw==
-----END CERTIFICATE-----
Generated at Tue Nov 26 02:27:03 2024 by rpki-client on console-ams.rpki-client.org