Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/597/IsN5ClA339gX7ZW_RHq_4RCv9jU.roa
File:                     IsN5ClA339gX7ZW_RHq_4RCv9jU.roa (raw, json)
Hash identifier:          0OtkUqMK8hP1XcPCxkp191ZNSeNWyF/rUtvITPuF8NI=
Subject key identifier:   22:C3:79:0A:50:37:DF:D8:17:ED:95:BF:44:7A:BF:E1:10:AF:F6:35
Certificate issuer:       /CN=71F76FA07735F685991FC882C885E21EFBB161BC
Certificate serial:       3F
Authority key identifier: 71:F7:6F:A0:77:35:F6:85:99:1F:C8:82:C8:85:E2:1E:FB:B1:61:BC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/IsN5ClA339gX7ZW_RHq_4RCv9jU.roa
Signing time:             Wed 05 Jun 2024 07:28:40 +0000
ROA not before:           Wed 05 Jun 2024 07:28:40 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     0
IP address blocks:        101.203.104.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Sep 2024 01:36:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63 (0x3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71F76FA07735F685991FC882C885E21EFBB161BC
        Validity
            Not Before: Jun  5 07:28:40 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=22C3790A5037DFD817ED95BF447ABFE110AFF635
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b5:93:0a:fb:8b:cf:5b:48:0b:e7:16:2d:3b:
                    4b:6e:ee:20:e5:8d:27:97:1d:0d:bb:75:00:2f:31:
                    d9:f2:e6:43:82:97:31:0d:55:05:89:45:7d:b1:8a:
                    14:1e:d6:6c:e3:f9:30:09:7b:85:6e:fe:a3:a4:24:
                    16:ef:db:4c:35:d6:0d:8d:dd:c7:70:4e:ff:19:9a:
                    34:a7:02:01:51:7c:71:26:ab:7e:c1:6a:d2:fc:42:
                    f2:fd:9f:e6:41:f8:32:53:fb:10:a0:59:87:09:bc:
                    e6:9f:fd:ab:0f:5d:84:1b:e4:0e:1a:9d:e3:df:47:
                    ad:b2:47:8a:0c:ed:d8:76:27:58:10:51:a0:4e:65:
                    6c:e4:f8:b3:13:1a:9d:1b:e6:3b:ee:7d:72:e2:d4:
                    e9:16:d2:34:35:58:1b:b3:42:a9:7c:5d:98:57:4d:
                    d2:84:37:5f:fa:c9:bd:78:bf:10:ae:0b:02:5b:a0:
                    0a:6e:42:5d:04:36:98:6e:24:09:ac:19:06:1b:24:
                    ed:1b:79:e2:7a:fe:53:76:6d:42:85:57:1b:57:53:
                    96:e2:7b:3d:a3:42:67:59:73:d0:7b:c1:31:6e:93:
                    7d:ba:97:70:a0:d8:cb:1b:9b:0b:6f:1b:e7:cb:18:
                    43:f7:07:df:c3:a5:40:da:8a:79:e2:f8:bd:ce:32:
                    67:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:C3:79:0A:50:37:DF:D8:17:ED:95:BF:44:7A:BF:E1:10:AF:F6:35
            X509v3 Authority Key Identifier:
                keyid:71:F7:6F:A0:77:35:F6:85:99:1F:C8:82:C8:85:E2:1E:FB:B1:61:BC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/IsN5ClA339gX7ZW_RHq_4RCv9jU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.203.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:17:46:77:40:b5:8b:64:da:ec:64:ca:9c:72:77:7e:e1:e4:
         1f:7e:12:7b:d4:fa:d1:ae:0d:cc:28:fc:da:ac:86:b5:5d:71:
         1d:49:e8:f6:3e:a9:55:d1:1a:7b:56:9d:b9:57:2b:0e:55:7d:
         37:12:dd:cb:a9:69:c1:e4:6a:00:06:7a:05:e4:36:03:4f:73:
         08:21:3d:e5:85:51:29:0b:1b:cf:64:62:12:ae:98:59:83:b6:
         64:e6:73:35:5b:c4:a8:79:14:a6:2b:9b:f3:1a:d2:45:52:65:
         f5:3e:3d:a2:88:96:3d:54:d3:d5:5e:6c:fb:c6:70:d3:76:11:
         48:9c:31:7d:21:f5:94:ed:da:55:ab:fa:7c:39:1a:03:06:a5:
         b7:01:10:52:da:49:74:31:bc:10:a9:0f:d4:5e:a8:a1:50:b6:
         7a:bf:58:8c:74:79:bb:16:f1:05:42:65:4c:dd:b0:f5:25:e8:
         49:88:0e:a0:ba:3d:31:81:66:7f:fc:05:d2:9f:ba:5c:f8:5b:
         ed:56:72:46:be:ac:3c:9f:ca:9e:7c:b4:0d:7c:08:be:f1:b4:
         78:79:d7:e4:11:34:b5:47:43:e0:e0:ae:c1:9c:a9:a3:09:7e:
         63:5c:58:ad:dc:ef:46:4e:bf:2e:10:05:5c:4b:fb:79:17:9f:
         6e:04:f7:f1
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBPzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg3MUY3
NkZBMDc3MzVGNjg1OTkxRkM4ODJDODg1RTIxRUZCQjE2MUJDMB4XDTI0MDYwNTA3
Mjg0MFoXDTI1MDUxNTAxMzAwM1owMzExMC8GA1UEAxMoMjJDMzc5MEE1MDM3REZE
ODE3RUQ5NUJGNDQ3QUJGRTExMEFGRjYzNTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJy1kwr7i89bSAvnFi07S27uIOWNJ5cdDbt1AC8x2fLmQ4KXMQ1V
BYlFfbGKFB7WbOP5MAl7hW7+o6QkFu/bTDXWDY3dx3BO/xmaNKcCAVF8cSarfsFq
0vxC8v2f5kH4MlP7EKBZhwm85p/9qw9dhBvkDhqd499HrbJHigzt2HYnWBBRoE5l
bOT4sxManRvmO+59cuLU6RbSNDVYG7NCqXxdmFdN0oQ3X/rJvXi/EK4LAlugCm5C
XQQ2mG4kCawZBhsk7Rt54nr+U3ZtQoVXG1dTluJ7PaNCZ1lz0HvBMW6TfbqXcKDY
yxubC28b58sYQ/cH38OlQNqKeeL4vc4yZ9MCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBQiw3kKUDff2Bftlb9Eer/hEK/2NTAfBgNVHSMEGDAWgBRx92+gdzX2hZkfyILI
heIe+7FhvDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNTk3L2NmZHZvSGMxOW9XWkg4aUN5SVhpSHZ1eFlidy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2NmZHZvSGMxOW9XWkg4aUN5SVhpSHZ1
eFlidy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC81OTcvSXNONUNsQTMzOWdYN1pXX1JIcV80UkN2OWpVLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAGXLaDANBgkqhkiG9w0BAQsFAAOCAQEAbxdGd0C1i2Ta7GTKnHJ3fuHkH34S
e9T60a4NzCj82qyGtV1xHUno9j6pVdEae1aduVcrDlV9NxLdy6lpweRqAAZ6BeQ2
A09zCCE95YVRKQsbz2RiEq6YWYO2ZOZzNVvEqHkUpiub8xrSRVJl9T49ooiWPVTT
1V5s+8Zw03YRSJwxfSH1lO3aVav6fDkaAwaltwEQUtpJdDG8EKkP1F6ooVC2er9Y
jHR5uxbxBUJlTN2w9SXoSYgOoLo9MYFmf/wF0p+6XPhb7VZyRr6sPJ/Knny0DXwI
vvG0eHnX5BE0tUdD4OCuwZypowl+Y1xYrdzvRk6/LhAFXEv7eRefbgT38Q==
-----END CERTIFICATE-----
Generated at Fri Sep 20 10:40:02 2024 by rpki-client on console-ams.rpki-client.org