Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/v9uLI9FoVRd9OW-EDF5pwitumVA.roa
File:                     v9uLI9FoVRd9OW-EDF5pwitumVA.roa (raw, json)
Hash identifier:          3pNXgRuUTGLwNfFtcshRfemirMDOJglUkQbK9Phjnmc=
Subject key identifier:   BF:DB:8B:23:D1:68:55:17:7D:39:6F:84:0C:5E:69:C2:2B:6E:99:50
Certificate issuer:       /CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
Certificate serial:       49
Authority key identifier: F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/v9uLI9FoVRd9OW-EDF5pwitumVA.roa
Signing time:             Sun 30 Jun 2024 01:36:20 +0000
ROA not before:           Sun 30 Jun 2024 01:36:20 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     9605
IP address blocks:        146.160.128.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:32:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73 (0x49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
        Validity
            Not Before: Jun 30 01:36:20 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=BFDB8B23D16855177D396F840C5E69C22B6E9950
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c4:6c:04:d1:0f:b9:84:87:e7:e0:a6:83:c2:
                    69:d2:c0:5a:31:27:3c:9b:f0:65:a0:93:b9:56:c4:
                    7e:23:f8:3c:fc:61:a6:7d:e2:e7:5e:b6:4f:c6:62:
                    da:4d:a9:b5:b2:2a:9a:e2:34:7e:b9:48:ba:5e:d0:
                    6c:11:e7:a1:46:e0:8a:6c:49:4f:15:43:7c:cf:f5:
                    63:c1:4d:d4:7e:cd:de:27:17:97:8a:6c:bf:e0:88:
                    04:2f:39:58:aa:f5:33:ad:dd:8e:6e:80:44:f0:51:
                    e6:b0:80:56:25:ae:a1:b7:2e:e2:27:b4:1b:7d:26:
                    3a:61:a1:49:f3:51:f9:2b:4b:07:86:c2:bd:3a:eb:
                    9a:33:fa:21:b0:79:da:8b:d2:8e:9a:83:e9:3e:21:
                    ae:0e:fa:60:06:1a:d3:15:04:31:12:ce:30:c9:10:
                    e3:e9:d2:f8:3c:a5:02:40:8c:d1:52:01:f7:b4:44:
                    cf:2a:ef:d2:04:5f:27:4d:bb:a8:95:81:e7:b2:66:
                    90:da:65:46:7d:35:d3:0e:ad:89:fc:0a:6f:6a:90:
                    0b:e2:aa:55:6a:44:02:e1:f8:2c:05:d1:62:8f:f8:
                    3b:6c:47:26:8d:74:75:c9:1a:7d:c6:46:b7:44:b8:
                    e4:b7:45:ee:46:c3:d7:47:47:e5:3b:30:43:4f:fe:
                    2a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:DB:8B:23:D1:68:55:17:7D:39:6F:84:0C:5E:69:C2:2B:6E:99:50
            X509v3 Authority Key Identifier:
                keyid:F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/v9uLI9FoVRd9OW-EDF5pwitumVA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.160.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         7d:93:c8:d4:fd:26:2d:29:bd:d5:94:7c:bd:05:67:5d:ae:bb:
         f3:08:65:e1:22:6e:5a:1d:3a:e2:38:cf:ac:12:4c:1a:08:86:
         81:90:3b:6e:d2:06:d4:ff:72:75:4f:c8:87:b1:59:ff:68:0f:
         0d:2c:1c:27:09:08:40:c9:17:38:8f:d7:5b:68:28:58:0a:d1:
         d2:a9:25:c8:26:d9:c1:ee:ef:e3:c7:29:20:f0:52:f1:ba:21:
         30:75:95:0d:e6:6f:c6:c3:3c:c7:64:35:5a:ce:31:db:9a:e4:
         14:a3:de:65:75:de:85:65:5d:69:cd:b7:52:e5:8a:48:25:73:
         d9:5f:72:75:40:40:93:d9:61:aa:74:e4:a8:74:60:11:bf:56:
         23:0b:6b:a2:43:6c:42:16:46:3d:c3:70:fa:97:96:db:69:ad:
         50:cb:02:99:a5:92:76:cd:28:d2:44:44:e7:71:ad:a4:90:b8:
         97:e7:8c:61:24:2b:5b:6e:a0:2c:f0:4f:2b:29:e8:2f:4f:ad:
         0e:80:25:be:ce:7e:42:30:b9:0f:5c:8e:7f:d4:9a:3a:37:99:
         f6:14:70:75:39:e1:aa:4a:87:5d:aa:05:bd:72:aa:99:58:d3:
         ec:2d:f3:07:34:8c:5e:d8:ef:b3:4b:53:1c:46:18:92:2e:43:
         ca:d2:59:d2
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBSTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhGODlF
MEYxNUMxRTIwRTE5MUFBRjE3Mjg4RjZFMzBGRjAxODY5QTZFMB4XDTI0MDYzMDAx
MzYyMFoXDTI1MDYyNDEwNDY0NVowMzExMC8GA1UEAxMoQkZEQjhCMjNEMTY4NTUx
NzdEMzk2Rjg0MEM1RTY5QzIyQjZFOTk1MDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAM7EbATRD7mEh+fgpoPCadLAWjEnPJvwZaCTuVbEfiP4PPxhpn3i
5162T8Zi2k2ptbIqmuI0frlIul7QbBHnoUbgimxJTxVDfM/1Y8FN1H7N3icXl4ps
v+CIBC85WKr1M63djm6ARPBR5rCAViWuobcu4ie0G30mOmGhSfNR+StLB4bCvTrr
mjP6IbB52ovSjpqD6T4hrg76YAYa0xUEMRLOMMkQ4+nS+DylAkCM0VIB97REzyrv
0gRfJ027qJWB57JmkNplRn010w6tifwKb2qQC+KqVWpEAuH4LAXRYo/4O2xHJo10
dckafcZGt0S45LdF7kbD10dH5TswQ0/+KjcCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBS/24sj0WhVF305b4QMXmnCK26ZUDAfBgNVHSMEGDAWgBT4ng8VweIOGRqvFyiP
bjD/AYaabjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzA5Ly1KNFBGY0hpRGhrYXJ4Y29qMjR3X3dHR21tNC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLy1KNFBGY0hpRGhrYXJ4Y29qMjR3X3dH
R21tNC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zMDkvdjl1TEk5Rm9WUmQ5T1ctRURGNXB3aXR1bVZBLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEB5KggDANBgkqhkiG9w0BAQsFAAOCAQEAfZPI1P0mLSm91ZR8vQVnXa678whl
4SJuWh064jjPrBJMGgiGgZA7btIG1P9ydU/Ih7FZ/2gPDSwcJwkIQMkXOI/XW2go
WArR0qklyCbZwe7v48cpIPBS8bohMHWVDeZvxsM8x2Q1Ws4x25rkFKPeZXXehWVd
ac23UuWKSCVz2V9ydUBAk9lhqnTkqHRgEb9WIwtrokNsQhZGPcNw+peW22mtUMsC
maWSds0o0kRE53GtpJC4l+eMYSQrW26gLPBPKynoL0+tDoAlvs5+QjC5D1yOf9Sa
OjeZ9hRwdTnhqkqHXaoFvXKqmVjT7C3zBzSMXtjvs0tTHEYYki5DytJZ0g==
-----END CERTIFICATE-----
Generated at Fri Nov 22 15:24:03 2024 by rpki-client on console-fra.rpki-client.org