Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/_xtPgF7x02v87mdlekAtgcpeKZI.roa
File:                     _xtPgF7x02v87mdlekAtgcpeKZI.roa (raw, json)
Hash identifier:          Ce7G+qb6PRFOPU9MkICIXIUhYcwLFJaZcUG/7XAFvzI=
Subject key identifier:   FF:1B:4F:80:5E:F1:D3:6B:FC:EE:67:65:7A:40:2D:81:CA:5E:29:92
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0673
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_xtPgF7x02v87mdlekAtgcpeKZI.roa
Signing time:             Tue 30 Apr 2024 01:37:56 +0000
ROA not before:           Tue 30 Apr 2024 01:37:56 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        110.161.224.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Dec 2024 00:11:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1651 (0x673)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 01:37:56 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=FF1B4F805EF1D36BFCEE67657A402D81CA5E2992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:dd:38:56:ab:04:ed:73:9a:a8:fa:8b:98:51:
                    d1:c8:7e:a1:72:a9:6e:6a:bf:1e:90:ee:5e:53:41:
                    03:9c:8e:63:95:f9:ce:50:a3:e8:d2:7b:3d:7a:2c:
                    dc:be:1f:d1:d8:8f:b5:5c:60:cb:5f:11:c4:4b:2d:
                    0d:a3:31:50:26:e1:7c:03:f6:2c:29:6a:6b:ec:49:
                    2d:f4:e8:9d:5b:29:24:ac:f7:f5:0b:1a:b5:ad:d1:
                    6a:8c:6c:a5:dd:db:2a:a3:c2:1a:a6:3c:ac:51:8b:
                    72:42:49:7f:ed:1b:ea:66:a0:d1:04:39:0a:f0:6a:
                    81:c2:a6:11:75:2b:6c:bc:3c:b0:86:7f:4c:23:cf:
                    20:cd:fb:18:62:ee:e2:5e:f6:46:fa:60:b1:d3:b8:
                    97:a8:c4:c9:9a:d1:8b:4d:d4:a1:98:cd:f3:cc:ba:
                    92:b4:bb:a8:62:7b:43:75:71:4f:8a:a3:2b:da:e8:
                    5e:05:39:b5:0c:7d:bb:3f:24:80:4e:6a:3e:06:de:
                    a5:5d:9f:55:2e:aa:43:62:bf:5b:de:f8:01:0f:62:
                    01:33:9d:1a:09:f1:f5:54:5a:01:3a:d5:fc:27:60:
                    0a:24:e6:29:f6:fe:76:9c:13:36:02:eb:45:5a:dc:
                    c3:a0:c3:9f:82:29:f1:f0:c9:e2:91:89:c6:31:22:
                    1e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:1B:4F:80:5E:F1:D3:6B:FC:EE:67:65:7A:40:2D:81:CA:5E:29:92
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_xtPgF7x02v87mdlekAtgcpeKZI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.161.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         20:92:21:2a:4c:03:58:42:50:71:d6:b5:66:87:3c:7e:08:7c:
         51:be:e1:60:bd:d2:9b:c0:12:96:08:fc:ef:ff:41:81:04:b1:
         a0:a3:2c:5f:01:f6:d9:c3:50:17:da:eb:9f:f6:e6:98:1d:6f:
         5d:ed:f6:ce:17:31:68:6a:4c:47:fa:6d:24:bb:bc:b0:62:a0:
         17:35:9c:4b:14:de:8b:73:b0:a8:9a:be:95:91:31:51:de:20:
         5f:35:2b:54:ba:05:18:e3:09:6b:e4:dd:00:09:1b:56:52:3b:
         78:33:23:8e:cd:fb:56:f0:ea:7e:76:2a:96:5b:72:a5:68:89:
         92:1c:e9:42:61:7f:a1:49:c1:42:f5:bf:c0:96:1d:3b:0a:db:
         3f:33:61:05:9e:31:9e:d0:96:1a:b1:81:3e:20:16:a7:42:30:
         b1:5d:5a:1a:3c:94:ed:8e:31:7b:a4:6c:db:98:27:9e:7e:fd:
         ba:ed:42:d8:91:39:ef:fd:f7:4a:21:bc:40:59:55:9c:c0:f6:
         87:e3:15:26:9b:b6:fa:cc:fd:01:f7:ab:e2:42:82:17:ca:c5:
         d6:68:40:b0:38:46:ca:d0:5d:40:5b:23:85:6a:8a:94:e1:2c:
         e1:65:de:48:dd:ba:c4:e6:f4:b8:62:51:f6:d6:71:d3:78:e9:
         f8:25:e7:d1
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICBnMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjk2
NUIwQjIwRERFMDdBNEM5NzhFMjQwNzNFQTBFMTExN0IzNzQ3MzAeFw0yNDA0MzAw
MTM3NTZaFw0yNTA0MTUwMTMwMDJaMDMxMTAvBgNVBAMTKEZGMUI0RjgwNUVGMUQz
NkJGQ0VFNjc2NTdBNDAyRDgxQ0E1RTI5OTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDa3ThWqwTtc5qo+ouYUdHIfqFyqW5qvx6Q7l5TQQOcjmOV+c5Q
o+jSez16LNy+H9HYj7VcYMtfEcRLLQ2jMVAm4XwD9iwpamvsSS306J1bKSSs9/UL
GrWt0WqMbKXd2yqjwhqmPKxRi3JCSX/tG+pmoNEEOQrwaoHCphF1K2y8PLCGf0wj
zyDN+xhi7uJe9kb6YLHTuJeoxMma0YtN1KGYzfPMupK0u6hie0N1cU+Koyva6F4F
ObUMfbs/JIBOaj4G3qVdn1UuqkNiv1ve+AEPYgEznRoJ8fVUWgE61fwnYAok5in2
/nacEzYC60Va3MOgw5+CKfHwyeKRicYxIh45AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU/xtPgF7x02v87mdlekAtgcpeKZIwHwYDVR0jBBgwFoAUaWWwsg3eB6TJeOJA
c+oOERezdHMwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzMwOS9hV1d3c2czZUI2VEplT0pBYy1vT0VSZXpkSE0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9hV1d3c2czZUI2VEplT0pBYy1vT0VS
ZXpkSE0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMzA5L194dFBnRjd4MDJ2ODdtZGxla0F0Z2NwZUtaSS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAVuoeAwDQYJKoZIhvcNAQELBQADggEBACCSISpMA1hCUHHWtWaHPH4IfFG+
4WC90pvAEpYI/O//QYEEsaCjLF8B9tnDUBfa65/25pgdb13t9s4XMWhqTEf6bSS7
vLBioBc1nEsU3otzsKiavpWRMVHeIF81K1S6BRjjCWvk3QAJG1ZSO3gzI47N+1bw
6n52KpZbcqVoiZIc6UJhf6FJwUL1v8CWHTsK2z8zYQWeMZ7QlhqxgT4gFqdCMLFd
Who8lO2OMXukbNuYJ55+/brtQtiROe/990ohvEBZVZzA9ofjFSabtvrM/QH3q+JC
ghfKxdZoQLA4RsrQXUBbI4VqipThLOFl3kjdusTm9LhiUfbWcdN46fgl59E=
-----END CERTIFICATE-----
Generated at Tue Nov 26 02:27:15 2024 by rpki-client on console-ams.rpki-client.org