Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/373/n2FNjx6bP-IiZ8M79CbM5EFcgmI.roa
File:                     n2FNjx6bP-IiZ8M79CbM5EFcgmI.roa (raw, json)
Hash identifier:          T/tr5DnCF6BOAjacVP0QYqdhCs5gSQU8fTibD5UNTxw=
Subject key identifier:   9F:61:4D:8F:1E:9B:3F:E2:22:67:C3:3B:F4:26:CC:E4:41:5C:82:62
Certificate issuer:       /CN=89CF5C2AFA5B576577351C4199018D44CDC2D6DA
Certificate serial:       17
Authority key identifier: 89:CF:5C:2A:FA:5B:57:65:77:35:1C:41:99:01:8D:44:CD:C2:D6:DA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/n2FNjx6bP-IiZ8M79CbM5EFcgmI.roa
Signing time:             Fri 11 Aug 2023 07:39:06 +0000
ROA not before:           Fri 11 Aug 2023 07:39:06 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9615
IP address blocks:        119.63.112.0/20 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23 (0x17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89CF5C2AFA5B576577351C4199018D44CDC2D6DA
        Validity
            Not Before: Aug 11 07:39:06 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=9F614D8F1E9B3FE22267C33BF426CCE4415C8262
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:28:62:53:62:2c:04:78:60:97:ff:e2:d3:01:
                    d0:94:a2:f1:73:19:95:f2:6c:fd:78:58:6b:d5:bb:
                    ca:de:14:12:e2:24:3d:0a:5a:7b:d4:05:60:41:fb:
                    a9:06:a3:84:cf:ed:62:d9:30:f4:15:73:3a:a4:86:
                    42:85:7b:24:82:0c:eb:79:9b:a0:ca:2a:c5:b7:33:
                    56:4c:c7:8a:8a:58:20:b0:e0:10:a0:83:91:ab:e9:
                    c4:a3:d4:91:be:78:e9:8d:69:ae:f1:46:a9:50:11:
                    80:37:5c:c0:24:b3:17:a2:cf:3a:69:e3:ab:77:d2:
                    f6:31:f0:19:10:94:f6:40:90:24:a4:6f:0a:e0:ac:
                    9a:e4:af:fc:c0:39:19:2f:c5:60:79:a5:3a:4c:12:
                    9f:5f:cd:f2:85:14:07:32:e5:77:7a:0f:49:fc:91:
                    5b:ab:c3:10:f0:bb:82:00:3b:e5:4e:58:39:75:b5:
                    ec:68:65:d1:2e:8f:62:e4:d5:8c:90:2a:65:8b:a0:
                    e7:83:62:a3:0d:e2:74:bb:c3:8e:3a:d3:50:55:9f:
                    51:b1:32:78:06:b1:cd:80:d5:80:28:2b:90:29:75:
                    66:7b:38:99:84:28:6c:7d:3b:78:32:35:ec:73:63:
                    38:28:6e:a3:51:f7:66:a6:76:b6:b6:19:9f:2f:0c:
                    a8:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:61:4D:8F:1E:9B:3F:E2:22:67:C3:3B:F4:26:CC:E4:41:5C:82:62
            X509v3 Authority Key Identifier:
                keyid:89:CF:5C:2A:FA:5B:57:65:77:35:1C:41:99:01:8D:44:CD:C2:D6:DA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/n2FNjx6bP-IiZ8M79CbM5EFcgmI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.63.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         39:bc:34:02:ac:a2:6e:0c:1e:f9:9a:bd:f9:6f:03:03:95:9b:
         58:35:02:d4:f3:15:9d:ac:83:9e:8a:4a:8a:6b:46:56:b3:b5:
         18:1a:b1:f5:d4:0a:43:ff:fa:82:ab:3f:71:f3:1d:00:81:e0:
         46:ad:65:e6:12:2d:80:ae:41:78:50:53:cf:9f:37:40:bc:9c:
         e5:6d:c1:bb:59:4a:2c:b6:71:4f:b8:7a:1f:05:33:a4:cc:a1:
         7a:8d:9e:f4:c2:73:ab:18:8c:d9:5d:4b:10:0c:b7:87:2d:56:
         35:ca:f0:8b:34:0a:94:f2:7e:8e:54:42:2b:2c:bf:e1:11:17:
         88:2b:53:d7:94:a6:ec:fb:93:6b:d5:15:6d:1b:75:2b:0a:c8:
         45:8b:96:d0:33:26:4d:5f:a4:c7:85:42:92:94:f0:6c:6a:1f:
         92:be:ba:0b:9c:f0:2a:02:b6:f0:73:f9:ee:ca:ec:7e:fa:4c:
         ab:dc:24:34:92:77:9f:56:ab:5a:b6:dc:58:05:80:aa:ec:3a:
         41:96:08:17:0a:a5:52:40:8d:56:45:a1:2b:e9:f4:0b:f0:a0:
         32:9f:51:cc:a4:77:bb:25:c1:51:50:42:bf:49:f0:b1:4a:2f:
         c1:dd:01:c3:e8:4b:9f:46:52:49:e6:b5:3f:2d:f0:a8:b3:71:
         75:6c:64:e6
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBFzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4OUNG
NUMyQUZBNUI1NzY1NzczNTFDNDE5OTAxOEQ0NENEQzJENkRBMB4XDTIzMDgxMTA3
MzkwNloXDTI0MDcxNDAxMzAwM1owMzExMC8GA1UEAxMoOUY2MTREOEYxRTlCM0ZF
MjIyNjdDMzNCRjQyNkNDRTQ0MTVDODI2MjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAKkoYlNiLAR4YJf/4tMB0JSi8XMZlfJs/XhYa9W7yt4UEuIkPQpa
e9QFYEH7qQajhM/tYtkw9BVzOqSGQoV7JIIM63mboMoqxbczVkzHiopYILDgEKCD
kavpxKPUkb546Y1prvFGqVARgDdcwCSzF6LPOmnjq3fS9jHwGRCU9kCQJKRvCuCs
muSv/MA5GS/FYHmlOkwSn1/N8oUUBzLld3oPSfyRW6vDEPC7ggA75U5YOXW17Ghl
0S6PYuTVjJAqZYug54Niow3idLvDjjrTUFWfUbEyeAaxzYDVgCgrkCl1Zns4mYQo
bH07eDI17HNjOChuo1H3ZqZ2trYZny8MqHcCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBSfYU2PHps/4iJnwzv0JszkQVyCYjAfBgNVHSMEGDAWgBSJz1wq+ltXZXc1HEGZ
AY1EzcLW2jAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMzczL2ljOWNLdnBiVjJWM05SeEJtUUdOUk0zQzF0by5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2ljOWNLdnBiVjJWM05SeEJtUUdOUk0z
QzF0by5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC8zNzMvbjJGTmp4NmJQLUlpWjhNNzlDYk01RUZjZ21JLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBHc/cDANBgkqhkiG9w0BAQsFAAOCAQEAObw0Aqyibgwe+Zq9+W8DA5WbWDUC
1PMVnayDnopKimtGVrO1GBqx9dQKQ//6gqs/cfMdAIHgRq1l5hItgK5BeFBTz583
QLyc5W3Bu1lKLLZxT7h6HwUzpMyheo2e9MJzqxiM2V1LEAy3hy1WNcrwizQKlPJ+
jlRCKyy/4REXiCtT15Sm7PuTa9UVbRt1KwrIRYuW0DMmTV+kx4VCkpTwbGofkr66
C5zwKgK28HP57srsfvpMq9wkNJJ3n1arWrbcWAWAquw6QZYIFwqlUkCNVkWhK+n0
C/CgMp9RzKR3uyXBUVBCv0nwsUovwd0Bw+hLn0ZSSea1Py3wqLNxdWxk5g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 15:06:43 2024 by rpki-client on console-ams.rpki-client.org