Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/Bylwl9rkD4ZkYE7gTcKmCa9pMsM.roa
File:                     Bylwl9rkD4ZkYE7gTcKmCa9pMsM.roa (raw, json)
Hash identifier:          wzEtW3j1YkFTs2mYuy4G7p9iHXtL97i8WnKR1Xczfz4=
Subject key identifier:   07:29:70:97:DA:E4:0F:86:64:60:4E:E0:4D:C2:A6:09:AF:69:32:C3
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       010F
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/Bylwl9rkD4ZkYE7gTcKmCa9pMsM.roa
Signing time:             Fri 01 Dec 2023 01:30:16 +0000
ROA not before:           Fri 01 Dec 2023 01:30:16 +0000
ROA not after:            Thu 14 Nov 2024 01:30:03 +0000
asID:                     2527
IP address blocks:        218.221.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Jul 2024 10:51:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 271 (0x10f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Dec  1 01:30:16 2023 GMT
            Not After : Nov 14 01:30:03 2024 GMT
        Subject: CN=07297097DAE40F8664604EE04DC2A609AF6932C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f4:bb:16:5a:bb:46:81:ee:ec:70:d8:89:cb:
                    d1:6c:56:72:10:83:d8:92:e1:2a:a3:92:9d:f9:a3:
                    58:f6:0f:ad:f2:8e:81:38:90:13:b9:1c:e8:d8:87:
                    0a:52:e6:07:ac:9c:2e:c0:5c:71:f5:6f:93:9c:d5:
                    e9:f2:cf:46:2c:3b:7d:c3:35:a9:e2:c8:c9:c7:e6:
                    84:d8:50:a2:a2:29:02:00:2a:f2:20:69:3c:b7:3f:
                    64:2b:0b:4e:2f:2d:d8:d4:1e:99:2f:4a:b5:0e:ca:
                    20:b6:4a:ce:ab:35:e9:2c:ff:40:ed:4e:cb:d4:9f:
                    d4:66:28:29:a2:81:3b:b1:72:9d:c3:de:a8:29:56:
                    ba:d6:d1:1f:d8:00:e9:7f:42:8c:87:83:21:ec:ee:
                    09:76:c6:85:87:68:54:ad:c4:be:28:4b:8e:3f:ec:
                    c5:48:ec:e2:01:93:e7:17:d5:dc:db:7a:49:d5:13:
                    3e:01:4a:2f:ff:bc:76:b0:c1:ac:cb:2a:02:b3:70:
                    4a:bf:e3:43:ea:34:1b:9d:31:7d:1d:ca:f4:a7:c7:
                    4e:7e:11:b1:67:7a:6b:c1:ce:f9:d0:95:f1:6c:03:
                    0e:e8:e6:fa:91:bc:26:77:48:6c:d8:75:9e:a4:1c:
                    ac:52:a5:43:d7:f2:57:46:b6:d6:0e:24:78:f6:a6:
                    31:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:29:70:97:DA:E4:0F:86:64:60:4E:E0:4D:C2:A6:09:AF:69:32:C3
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/Bylwl9rkD4ZkYE7gTcKmCa9pMsM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.221.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         36:75:a0:2d:cf:56:48:66:04:73:50:0a:01:8a:30:ca:a9:1e:
         80:3b:22:62:f1:71:40:8f:db:07:e6:2e:f7:69:6e:dd:6d:fb:
         8d:c9:3f:5f:93:5a:c5:01:7d:fb:79:53:68:2f:8a:b9:1b:9b:
         a2:68:34:29:a8:c5:10:f5:b1:15:4a:03:33:7f:54:0f:24:bf:
         72:d9:dc:1f:03:fe:2b:7d:2d:7b:36:3c:4f:be:b8:ec:96:06:
         e5:e3:68:1d:63:99:3d:e5:f7:5d:c8:5c:83:65:90:a7:a0:0b:
         20:c1:1b:87:73:78:44:c4:0e:b1:47:37:55:9a:95:89:bc:1f:
         3b:b9:01:db:53:f5:de:21:20:cb:d1:e6:c5:50:6c:64:29:12:
         78:5f:df:37:43:60:cc:da:88:5e:c2:67:3f:95:b8:46:81:00:
         75:78:f3:f2:88:fb:54:41:6d:9f:dc:da:2e:a2:46:ab:a4:ae:
         42:0b:17:25:88:f7:ef:79:7d:c4:1c:a1:84:16:78:2b:28:e5:
         a6:af:36:6a:53:78:e4:89:ee:3c:7c:04:5a:65:08:33:cb:0f:
         a6:c9:9e:e3:ba:b7:21:e4:62:50:9d:86:e0:3c:a2:76:45:3f:
         6f:f1:83:e7:42:d1:3c:fa:88:74:bf:9b:3e:62:19:51:89:aa:
         75:27:2a:52
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgICAQ8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDk1
QTE4MkZBMThENDU4MjMzMjg0QUE4REM4OEJEMDc1RTVENzAyRDAeFw0yMzEyMDEw
MTMwMTZaFw0yNDExMTQwMTMwMDNaMDMxMTAvBgNVBAMTKDA3Mjk3MDk3REFFNDBG
ODY2NDYwNEVFMDREQzJBNjA5QUY2OTMyQzMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDX9LsWWrtGge7scNiJy9FsVnIQg9iS4Sqjkp35o1j2D63yjoE4
kBO5HOjYhwpS5gesnC7AXHH1b5Oc1enyz0YsO33DNaniyMnH5oTYUKKiKQIAKvIg
aTy3P2QrC04vLdjUHpkvSrUOyiC2Ss6rNeks/0DtTsvUn9RmKCmigTuxcp3D3qgp
VrrW0R/YAOl/QoyHgyHs7gl2xoWHaFStxL4oS44/7MVI7OIBk+cX1dzbeknVEz4B
Si//vHawwazLKgKzcEq/40PqNBudMX0dyvSnx05+EbFnemvBzvnQlfFsAw7o5vqR
vCZ3SGzYdZ6kHKxSpUPX8ldGttYOJHj2pjG7AgMBAAGjggIhMIICHTAdBgNVHQ4E
FgQUBylwl9rkD4ZkYE7gTcKmCa9pMsMwHwYDVR0jBBgwFoAUCVoYL6GNRYIzKEqo
3Ii9B15dcC0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg
WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzQzL0NWb1lMNkdOUllJektFcW8zSWk5QjE1ZGNDMC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0NWb1lMNkdOUllJektFcW8zSWk5QjE1
ZGNDMC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG6BggrBgEFBQcBCwSBrTCBqjBgBggr
BgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC80My9CeWx3bDlya0Q0WmtZRTdnVGNLbUNhOXBNc00ucm9hMEYG
CCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJk
cC9hcC9ub3RpZmljYXRpb24ueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAF
AwMA2t0wDQYJKoZIhvcNAQELBQADggEBADZ1oC3PVkhmBHNQCgGKMMqpHoA7ImLx
cUCP2wfmLvdpbt1t+43JP1+TWsUBfft5U2gvirkbm6JoNCmoxRD1sRVKAzN/VA8k
v3LZ3B8D/it9LXs2PE++uOyWBuXjaB1jmT3l913IXINlkKegCyDBG4dzeETEDrFH
N1WalYm8Hzu5AdtT9d4hIMvR5sVQbGQpEnhf3zdDYMzaiF7CZz+VuEaBAHV48/KI
+1RBbZ/c2i6iRqukrkILFyWI9+95fcQcoYQWeCso5aavNmpTeOSJ7jx8BFplCDPL
D6bJnuO6tyHkYlCdhuA8onZFP2/xg+dC0Tz6iHS/mz5iGVGJqnUnKlI=
-----END CERTIFICATE-----
Generated at Fri Jun 28 05:29:00 2024 by rpki-client on console-ams.rpki-client.org