Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/465/TB3r_dIrDea6oAHUrFDcxmTllfg.roa
File:                     TB3r_dIrDea6oAHUrFDcxmTllfg.roa (raw, json)
Hash identifier:          uOQwAe9Q/drXvmJM34IYYTF5UXEWftuDN5KGmDBKQpE=
Subject key identifier:   4C:1D:EB:FD:D2:2B:0D:E6:BA:A0:01:D4:AC:50:DC:C6:64:E5:95:F8
Certificate issuer:       /CN=47A27188E214C396304497DB571B23F93EBFBDC6
Certificate serial:       4B
Authority key identifier: 47:A2:71:88:E2:14:C3:96:30:44:97:DB:57:1B:23:F9:3E:BF:BD:C6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/R6JxiOIUw5YwRJfbVxsj-T6_vcY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/TB3r_dIrDea6oAHUrFDcxmTllfg.roa
Signing time:             Mon 01 Jan 2024 01:30:33 +0000
ROA not before:           Mon 01 Jan 2024 01:30:33 +0000
ROA not after:            Sat 14 Dec 2024 01:30:03 +0000
asID:                     10011
IP address blocks:        61.121.224.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/R6JxiOIUw5YwRJfbVxsj-T6_vcY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/R6JxiOIUw5YwRJfbVxsj-T6_vcY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/R6JxiOIUw5YwRJfbVxsj-T6_vcY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75 (0x4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47A27188E214C396304497DB571B23F93EBFBDC6
        Validity
            Not Before: Jan  1 01:30:33 2024 GMT
            Not After : Dec 14 01:30:03 2024 GMT
        Subject: CN=4C1DEBFDD22B0DE6BAA001D4AC50DCC664E595F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:46:56:af:0a:63:9a:d6:b5:43:f5:b8:0f:fd:
                    09:8a:11:d4:d9:25:a7:0f:95:8f:9e:e4:74:dd:26:
                    9c:a4:d3:96:76:5d:e5:7d:53:5a:a2:c4:cb:7c:e7:
                    ae:45:84:76:b2:0b:ad:1d:45:56:84:4c:00:c0:e3:
                    56:35:64:c3:9b:c2:dc:86:09:fc:f6:98:5c:71:b1:
                    56:d5:10:88:78:ce:50:b0:10:e3:0f:5f:2a:f4:df:
                    95:31:1a:3d:65:7b:9f:33:83:0d:6a:57:b8:3b:26:
                    c2:d6:f5:ae:c6:42:18:c8:34:22:96:6c:67:d2:9b:
                    f0:77:65:ed:33:e3:ff:31:a5:a1:21:33:f8:dc:eb:
                    0d:44:1a:15:23:6e:c9:71:23:c0:b2:f8:b8:72:24:
                    e0:3d:40:65:68:77:8b:84:ee:ea:b4:f8:15:1c:5a:
                    1f:2d:ac:51:16:60:fc:31:19:23:8c:9e:b9:e2:96:
                    be:df:cf:37:29:bb:77:27:8e:c3:1f:21:15:93:c9:
                    c0:54:c8:ef:af:f2:e8:83:52:d9:14:72:c5:ca:9a:
                    37:1c:77:88:f7:b9:3d:e5:72:0b:d8:e4:f1:6c:80:
                    a8:a9:80:11:ab:da:c0:48:48:cc:86:67:ec:bc:f3:
                    8c:c8:3f:a6:6b:60:0a:84:d5:1f:d0:cc:79:6a:31:
                    80:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:1D:EB:FD:D2:2B:0D:E6:BA:A0:01:D4:AC:50:DC:C6:64:E5:95:F8
            X509v3 Authority Key Identifier:
                keyid:47:A2:71:88:E2:14:C3:96:30:44:97:DB:57:1B:23:F9:3E:BF:BD:C6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/R6JxiOIUw5YwRJfbVxsj-T6_vcY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/R6JxiOIUw5YwRJfbVxsj-T6_vcY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/TB3r_dIrDea6oAHUrFDcxmTllfg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.121.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         69:48:10:3a:31:15:68:a2:b1:ef:3c:73:5e:ae:f0:cb:61:43:
         eb:60:94:ed:78:f5:db:92:16:0e:fa:59:57:41:ab:4e:19:4c:
         0b:3f:09:46:a2:f5:18:21:78:7e:c4:de:26:76:27:f0:2d:5b:
         4b:45:c1:95:c7:7c:a4:b3:07:50:de:27:65:19:14:a2:2a:68:
         ee:a3:00:af:3c:a0:f4:45:b5:44:da:25:a5:20:21:94:17:a5:
         a9:3e:db:09:57:b1:7c:eb:c1:37:02:a0:b6:3c:7c:e2:6e:68:
         dc:db:f9:e2:e8:b6:85:55:81:f4:2e:df:e8:ab:00:63:97:67:
         58:c7:4d:c8:63:cf:92:8c:ef:18:05:fa:7e:f4:4f:7a:63:e5:
         28:49:72:30:02:7f:e2:10:8c:99:20:14:82:70:21:64:a3:26:
         00:73:f0:1a:6d:a7:68:3e:c5:e4:2e:f0:c9:12:85:31:f9:d8:
         f1:9c:08:cb:31:d4:c5:70:a7:f5:9e:30:0d:61:55:84:01:a3:
         26:fb:96:c3:e0:7e:6b:52:d5:b6:73:0f:b4:b5:8f:c7:c6:85:
         2e:59:f8:ad:58:eb:34:e4:06:37:a5:36:26:f1:34:08:c1:b0:
         07:aa:ce:03:89:ae:db:77:48:e7:f1:ec:dc:db:82:89:dc:ec:
         ed:d4:99:d7
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBSzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0N0Ey
NzE4OEUyMTRDMzk2MzA0NDk3REI1NzFCMjNGOTNFQkZCREM2MB4XDTI0MDEwMTAx
MzAzM1oXDTI0MTIxNDAxMzAwM1owMzExMC8GA1UEAxMoNEMxREVCRkREMjJCMERF
NkJBQTAwMUQ0QUM1MERDQzY2NEU1OTVGODCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANdGVq8KY5rWtUP1uA/9CYoR1Nklpw+Vj57kdN0mnKTTlnZd5X1T
WqLEy3znrkWEdrILrR1FVoRMAMDjVjVkw5vC3IYJ/PaYXHGxVtUQiHjOULAQ4w9f
KvTflTEaPWV7nzODDWpXuDsmwtb1rsZCGMg0IpZsZ9Kb8Hdl7TPj/zGloSEz+Nzr
DUQaFSNuyXEjwLL4uHIk4D1AZWh3i4Tu6rT4FRxaHy2sURZg/DEZI4yeueKWvt/P
Nym7dyeOwx8hFZPJwFTI76/y6INS2RRyxcqaNxx3iPe5PeVyC9jk8WyAqKmAEava
wEhIzIZn7LzzjMg/pmtgCoTVH9DMeWoxgM8CAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBRMHev90isN5rqgAdSsUNzGZOWV+DAfBgNVHSMEGDAWgBRHonGI4hTDljBEl9tX
GyP5Pr+9xjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNDY1L1I2SnhpT0lVdzVZd1JKZmJWeHNqLVQ2X3ZjWS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1I2SnhpT0lVdzVZd1JKZmJWeHNqLVQ2
X3ZjWS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC80NjUvVEIzcl9kSXJEZWE2b0FIVXJGRGN4bVRsbGZnLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBD154DANBgkqhkiG9w0BAQsFAAOCAQEAaUgQOjEVaKKx7zxzXq7wy2FD62CU
7Xj125IWDvpZV0GrThlMCz8JRqL1GCF4fsTeJnYn8C1bS0XBlcd8pLMHUN4nZRkU
oipo7qMArzyg9EW1RNolpSAhlBelqT7bCVexfOvBNwKgtjx84m5o3Nv54ui2hVWB
9C7f6KsAY5dnWMdNyGPPkozvGAX6fvRPemPlKElyMAJ/4hCMmSAUgnAhZKMmAHPw
Gm2naD7F5C7wyRKFMfnY8ZwIyzHUxXCn9Z4wDWFVhAGjJvuWw+B+a1LVtnMPtLWP
x8aFLln4rVjrNOQGN6U2JvE0CMGwB6rOA4mu23dI5/Hs3NuCidzs7dSZ1w==
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:11:50 2024 by rpki-client on console-ams.rpki-client.org