Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/524/UvdJma5L5QPj-6x-k0iZwQRK9aw.roa
File:                     UvdJma5L5QPj-6x-k0iZwQRK9aw.roa (raw, json)
Hash identifier:          wqHMmCHCBFrgUCIzHv82uWnp6qM+dP8I75RkC3GV8oA=
Subject key identifier:   52:F7:49:99:AE:4B:E5:03:E3:FB:AC:7E:93:48:99:C1:04:4A:F5:AC
Certificate issuer:       /CN=EE13ACCF7E77B0292AE17B05340211C8F971760B
Certificate serial:       11
Authority key identifier: EE:13:AC:CF:7E:77:B0:29:2A:E1:7B:05:34:02:11:C8:F9:71:76:0B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7hOsz353sCkq4XsFNAIRyPlxdgs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/UvdJma5L5QPj-6x-k0iZwQRK9aw.roa
Signing time:             Thu 16 Nov 2023 01:14:35 +0000
ROA not before:           Thu 16 Nov 2023 01:14:35 +0000
ROA not after:            Thu 14 Nov 2024 01:30:03 +0000
asID:                     7527
IP address blocks:        210.171.228.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7hOsz353sCkq4XsFNAIRyPlxdgs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17 (0x11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE13ACCF7E77B0292AE17B05340211C8F971760B
        Validity
            Not Before: Nov 16 01:14:35 2023 GMT
            Not After : Nov 14 01:30:03 2024 GMT
        Subject: CN=52F74999AE4BE503E3FBAC7E934899C1044AF5AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:67:6b:d9:65:35:5a:4d:c5:0c:19:63:75:95:
                    b7:52:a0:3a:2e:01:03:d5:3e:80:f7:37:f0:b0:e0:
                    b6:c8:ac:41:d3:90:6a:94:18:2b:9c:1c:7e:62:38:
                    07:b2:4a:21:26:04:58:4c:2c:1c:5c:fb:84:b0:e3:
                    85:79:09:37:8d:a6:65:4a:35:3f:b0:57:c1:cf:01:
                    18:31:7a:8c:cf:c9:1c:ba:2f:06:0e:87:90:54:87:
                    7b:d9:4e:ed:a6:26:4b:7b:5f:57:05:12:da:3b:39:
                    ae:d9:44:83:7f:1f:49:25:58:a4:a3:bc:a5:cb:ef:
                    2e:c8:38:a4:ea:1a:cc:76:a0:46:11:25:a9:b5:2a:
                    85:97:cc:7e:fc:3d:0a:0d:d1:2d:b9:ea:f9:20:4f:
                    08:92:86:e2:15:6b:9a:aa:6a:0f:2e:48:13:e4:10:
                    b6:e0:1b:39:8c:7c:ea:32:df:22:a4:37:f5:9d:88:
                    e1:04:93:b4:bb:54:c8:81:1b:da:2f:2d:7b:47:3b:
                    bd:e5:66:13:43:12:8b:6d:86:54:0f:44:0d:4a:e8:
                    a8:12:d3:c0:3e:bb:58:ba:32:7e:d9:52:40:43:8a:
                    b6:17:c1:04:1f:a6:59:ea:c4:09:73:a7:1c:b6:42:
                    b6:9f:a5:08:c6:f5:d8:75:e2:a2:de:ed:d7:70:4f:
                    41:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:F7:49:99:AE:4B:E5:03:E3:FB:AC:7E:93:48:99:C1:04:4A:F5:AC
            X509v3 Authority Key Identifier:
                keyid:EE:13:AC:CF:7E:77:B0:29:2A:E1:7B:05:34:02:11:C8:F9:71:76:0B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7hOsz353sCkq4XsFNAIRyPlxdgs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/UvdJma5L5QPj-6x-k0iZwQRK9aw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.171.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:b6:33:4f:11:77:32:14:7e:74:dc:18:28:18:5d:e5:9c:7c:
         22:fa:0b:97:9f:f7:be:eb:7c:8b:98:59:6a:60:1a:31:4f:5d:
         82:f4:43:9c:e7:fe:83:0f:0d:cb:d0:e1:d5:b1:a2:a5:99:11:
         e1:7a:8a:18:a5:f0:76:a9:f7:ce:01:2e:b5:76:28:4e:db:d2:
         35:f4:9b:0a:f0:6a:87:58:34:51:e1:bc:c1:dc:be:0d:6a:a5:
         bd:74:77:47:e4:a6:cb:de:8e:92:26:78:11:b6:45:62:31:0b:
         31:e9:0e:af:e4:e5:ab:b4:b2:ec:36:59:55:87:be:d6:c7:20:
         64:e6:5c:7f:29:ee:48:19:dc:76:9d:76:6a:4f:2a:73:e9:93:
         5b:df:86:ff:60:f3:7d:bc:6e:45:ec:0f:68:84:36:73:ba:e2:
         2a:02:c2:3b:d9:bd:95:26:44:fb:06:8d:c0:40:bc:7a:0e:4b:
         68:2b:33:c7:f9:f1:fc:2e:2d:46:0b:cb:00:ba:3c:27:98:90:
         e1:5f:38:c1:5c:5b:66:ef:d9:c0:80:84:fe:f0:d7:77:96:2f:
         f6:5b:77:72:e6:f8:23:80:41:e8:5c:b1:9c:76:19:51:ef:04:
         92:4e:30:e2:59:3c:bb:75:3e:bd:4d:49:89:cf:3a:c3:3a:80:
         65:4e:6a:cd
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBETANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhFRTEz
QUNDRjdFNzdCMDI5MkFFMTdCMDUzNDAyMTFDOEY5NzE3NjBCMB4XDTIzMTExNjAx
MTQzNVoXDTI0MTExNDAxMzAwM1owMzExMC8GA1UEAxMoNTJGNzQ5OTlBRTRCRTUw
M0UzRkJBQzdFOTM0ODk5QzEwNDRBRjVBQzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMJna9llNVpNxQwZY3WVt1KgOi4BA9U+gPc38LDgtsisQdOQapQY
K5wcfmI4B7JKISYEWEwsHFz7hLDjhXkJN42mZUo1P7BXwc8BGDF6jM/JHLovBg6H
kFSHe9lO7aYmS3tfVwUS2js5rtlEg38fSSVYpKO8pcvvLsg4pOoazHagRhElqbUq
hZfMfvw9Cg3RLbnq+SBPCJKG4hVrmqpqDy5IE+QQtuAbOYx86jLfIqQ39Z2I4QST
tLtUyIEb2i8te0c7veVmE0MSi22GVA9EDUroqBLTwD67WLoyftlSQEOKthfBBB+m
WerECXOnHLZCtp+lCMb12HXiot7t13BPQX8CAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBRS90mZrkvlA+P7rH6TSJnBBEr1rDAfBgNVHSMEGDAWgBTuE6zPfnewKSrhewU0
AhHI+XF2CzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNTI0LzdoT3N6MzUzc0NrcTRYc0ZOQUlSeVBseGRncy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwLzdoT3N6MzUzc0NrcTRYc0ZOQUlSeVBs
eGRncy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC81MjQvVXZkSm1hNUw1UVBqLTZ4LWswaVp3UVJLOWF3LnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAtKr5DANBgkqhkiG9w0BAQsFAAOCAQEAiLYzTxF3MhR+dNwYKBhd5Zx8IvoL
l5/3vut8i5hZamAaMU9dgvRDnOf+gw8Ny9Dh1bGipZkR4XqKGKXwdqn3zgEutXYo
TtvSNfSbCvBqh1g0UeG8wdy+DWqlvXR3R+Smy96OkiZ4EbZFYjELMekOr+Tlq7Sy
7DZZVYe+1scgZOZcfynuSBncdp12ak8qc+mTW9+G/2DzfbxuRewPaIQ2c7riKgLC
O9m9lSZE+waNwEC8eg5LaCszx/nx/C4tRgvLALo8J5iQ4V84wVxbZu/ZwICE/vDX
d5Yv9lt3cub4I4BB6FyxnHYZUe8Ekk4w4lk8u3U+vU1Jic86wzqAZU5qzQ==
-----END CERTIFICATE-----
Generated at Thu May 30 03:38:47 2024 by rpki-client on console-ams.rpki-client.org