Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/psXj9Z4kpF0uWEmdMVkWk-lW3-I.roa
File:                     psXj9Z4kpF0uWEmdMVkWk-lW3-I.roa (raw, json)
Hash identifier:          4wiszn1v9L+AgZgQj282lHKRCuMEnHvKzEfVhVpld6s=
Subject key identifier:   A6:C5:E3:F5:9E:24:A4:5D:2E:58:49:9D:31:59:16:93:E9:56:DF:E2
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       016E
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/psXj9Z4kpF0uWEmdMVkWk-lW3-I.roa
Signing time:             Thu 31 Oct 2024 01:34:23 +0000
ROA not before:           Thu 31 Oct 2024 01:34:23 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     2527
IP address blocks:        150.246.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 366 (0x16e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Oct 31 01:34:23 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=A6C5E3F59E24A45D2E58499D31591693E956DFE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:db:69:2c:9c:d4:c5:9b:05:7b:99:26:5f:d8:
                    64:e2:d8:cb:91:a0:12:45:c8:30:c8:86:e0:f7:46:
                    cc:c4:92:3c:cd:af:68:d7:9e:1d:cc:48:1b:a7:89:
                    2b:c7:0c:96:6e:c3:51:47:1a:b5:36:3f:87:65:79:
                    08:31:f0:60:8d:22:02:ac:ff:ac:88:cb:a8:72:2e:
                    74:5e:0b:59:0e:5f:3f:01:19:28:79:25:45:0a:53:
                    09:ec:1f:37:df:a4:f6:86:c6:34:47:4b:5a:93:25:
                    6e:19:08:6e:54:cf:b4:fc:84:b7:36:7f:65:c2:9d:
                    ca:07:15:e7:b8:d6:1f:11:4d:a2:eb:ea:af:b7:01:
                    3a:fa:e9:04:7c:28:0b:d4:83:4e:aa:7b:b1:5b:25:
                    90:dd:07:0d:b6:ca:ec:0e:08:48:6e:dc:2e:66:e9:
                    80:28:4f:67:bf:f3:ef:b5:ac:cd:bf:61:ed:37:de:
                    19:58:a0:dd:e2:93:15:e7:c5:90:91:f6:ab:94:89:
                    f4:64:93:b7:51:91:41:b6:ea:9d:96:d1:cb:3c:f9:
                    b4:0d:7a:88:43:1d:a0:15:a8:57:d4:b7:55:33:8f:
                    6c:f5:e1:d8:e0:40:42:77:61:ef:c3:51:f0:37:5f:
                    04:27:b5:9a:ef:47:7e:86:14:ab:d2:79:54:00:97:
                    dd:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:C5:E3:F5:9E:24:A4:5D:2E:58:49:9D:31:59:16:93:E9:56:DF:E2
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/psXj9Z4kpF0uWEmdMVkWk-lW3-I.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.246.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         40:53:74:d1:5d:19:33:2f:82:27:9f:25:82:1b:e1:ff:69:0a:
         07:cf:96:8d:ca:df:40:5d:c0:a5:20:49:49:86:96:54:dc:2c:
         2b:5f:bb:87:c1:8e:76:a6:60:d3:12:5e:f2:71:36:fd:c0:e2:
         2c:87:84:c3:da:9a:75:6c:17:d7:da:b5:fb:99:27:1c:23:d0:
         2d:1a:3f:b3:06:3b:fc:a9:1c:a2:1b:a9:25:e2:62:a5:17:2c:
         47:9d:8b:49:d1:c5:2b:fe:50:fc:b3:e0:da:fd:c1:4f:78:52:
         a8:45:b8:e4:40:93:09:87:55:7f:4e:4e:7b:3b:9f:4e:f1:9b:
         97:11:b2:91:9b:aa:49:e4:da:dd:40:84:61:a7:e3:12:03:ca:
         6a:b7:62:e8:8a:70:2c:34:05:ed:3a:8b:ff:9f:fe:b5:79:97:
         cb:c7:09:cd:bd:14:1e:10:22:69:87:90:42:89:61:ab:75:9f:
         3b:0f:19:a0:8f:7d:dd:0a:96:7b:e2:de:c1:4e:3b:b3:ac:db:
         cd:6c:2f:68:2d:8b:35:c4:2e:27:ee:58:0a:7b:bf:69:41:5a:
         4a:1f:26:59:98:e3:8e:2b:87:5c:3a:13:ae:b5:67:7b:d0:9f:
         14:db:c6:98:c7:a7:f5:02:bd:c3:07:0a:ca:38:f7:ad:31:e8:
         82:1b:41:ba
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgICAW4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDk1
QTE4MkZBMThENDU4MjMzMjg0QUE4REM4OEJEMDc1RTVENzAyRDAeFw0yNDEwMzEw
MTM0MjNaFw0yNTEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKEE2QzVFM0Y1OUUyNEE0
NUQyRTU4NDk5RDMxNTkxNjkzRTk1NkRGRTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCq22ksnNTFmwV7mSZf2GTi2MuRoBJFyDDIhuD3RszEkjzNr2jX
nh3MSBuniSvHDJZuw1FHGrU2P4dleQgx8GCNIgKs/6yIy6hyLnReC1kOXz8BGSh5
JUUKUwnsHzffpPaGxjRHS1qTJW4ZCG5Uz7T8hLc2f2XCncoHFee41h8RTaLr6q+3
ATr66QR8KAvUg06qe7FbJZDdBw22yuwOCEhu3C5m6YAoT2e/8++1rM2/Ye033hlY
oN3ikxXnxZCR9quUifRkk7dRkUG26p2W0cs8+bQNeohDHaAVqFfUt1Uzj2z14djg
QEJ3Ye/DUfA3XwQntZrvR36GFKvSeVQAl93DAgMBAAGjggIhMIICHTAdBgNVHQ4E
FgQUpsXj9Z4kpF0uWEmdMVkWk+lW3+IwHwYDVR0jBBgwFoAUCVoYL6GNRYIzKEqo
3Ii9B15dcC0wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBlBgNVHR8EXjBcMFqg
WKBWhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzQzL0NWb1lMNkdOUllJektFcW8zSWk5QjE1ZGNDMC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0NWb1lMNkdOUllJektFcW8zSWk5QjE1
ZGNDMC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG6BggrBgEFBQcBCwSBrTCBqjBgBggr
BgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC80My9wc1hqOVo0a3BGMHVXRW1kTVZrV2stbFczLUkucm9hMEYG
CCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvcnJk
cC9hcC9ub3RpZmljYXRpb24ueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAF
AwMAlvYwDQYJKoZIhvcNAQELBQADggEBAEBTdNFdGTMvgiefJYIb4f9pCgfPlo3K
30BdwKUgSUmGllTcLCtfu4fBjnamYNMSXvJxNv3A4iyHhMPamnVsF9fatfuZJxwj
0C0aP7MGO/ypHKIbqSXiYqUXLEedi0nRxSv+UPyz4Nr9wU94UqhFuORAkwmHVX9O
Tns7n07xm5cRspGbqknk2t1AhGGn4xIDymq3YuiKcCw0Be06i/+f/rV5l8vHCc29
FB4QImmHkEKJYat1nzsPGaCPfd0Klnvi3sFOO7Os281sL2gtizXELifuWAp7v2lB
WkofJlmY444rh1w6E661Z3vQnxTbxpjHp/UCvcMHCso4960x6IIbQbo=
-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:44 2024 by rpki-client on console-ams.rpki-client.org