Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/DVkcdx3RxagL7M4wY7-U2gHTQm4.roa
File:                     DVkcdx3RxagL7M4wY7-U2gHTQm4.roa (raw, json)
Hash identifier:          qy19bLu+2CIsDGwTuwgon6wQnpqDgIZbtWS9c+fbN/0=
Subject key identifier:   0D:59:1C:77:1D:D1:C5:A8:0B:EC:CE:30:63:BF:94:DA:01:D3:42:6E
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       0198
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/DVkcdx3RxagL7M4wY7-U2gHTQm4.roa
Signing time:             Thu 31 Oct 2024 01:30:17 +0000
ROA not before:           Thu 31 Oct 2024 01:30:17 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     59125
IP address blocks:        202.247.160.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 20:23:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 408 (0x198)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Oct 31 01:30:17 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=0D591C771DD1C5A80BECCE3063BF94DA01D3426E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:73:df:e5:2a:3f:9f:1e:4b:53:07:5f:83:97:
                    66:b1:3f:fa:31:42:e7:37:f5:b2:51:fa:b0:ed:74:
                    6f:22:0d:fe:26:67:0f:d2:a7:a2:ff:44:d5:f8:d5:
                    b9:c8:7d:7c:f0:1d:2c:fc:3c:17:cb:bf:65:dd:48:
                    96:22:9c:c0:e4:2f:e1:fd:8f:99:95:38:7c:f1:30:
                    90:7e:a2:58:f3:f7:85:b7:36:e9:b9:23:70:a7:b8:
                    ff:1c:a6:c9:74:e7:a1:f6:ed:ed:b5:b4:5f:e1:0d:
                    32:94:80:7d:6f:48:cf:2c:67:46:d4:65:ae:f4:d9:
                    a5:1b:ad:d2:11:72:9c:90:1d:31:cc:f0:2c:14:59:
                    e5:83:10:d6:4d:3c:23:17:4d:a1:cd:f0:c6:00:b7:
                    15:ae:45:eb:9a:e5:2e:67:70:7c:8b:54:44:fd:33:
                    35:67:67:68:91:6a:e9:71:e0:f8:29:48:d3:e3:d6:
                    72:01:00:44:1e:37:f9:31:1b:80:86:1d:6d:cf:98:
                    0e:3b:d1:9c:df:ae:97:c5:33:77:45:58:1a:f1:20:
                    57:77:cd:9b:09:4f:28:61:d0:b7:03:41:26:1e:26:
                    fe:37:bd:1b:eb:86:71:53:fd:4a:00:5a:c6:33:18:
                    5f:2e:da:db:0d:e4:3d:56:f7:b9:9f:17:cc:f9:c8:
                    f6:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:59:1C:77:1D:D1:C5:A8:0B:EC:CE:30:63:BF:94:DA:01:D3:42:6E
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/DVkcdx3RxagL7M4wY7-U2gHTQm4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.247.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         10:bf:94:d6:60:d6:7f:ef:69:ba:dc:64:ff:2d:c8:53:54:fb:
         95:3d:7e:90:90:ba:34:50:b8:9a:20:ef:fb:b7:e8:bf:8e:94:
         31:89:9e:aa:f6:c9:9f:d1:7f:7d:62:ae:ec:66:7a:5e:bd:a5:
         e6:2a:c6:6b:6f:d6:90:72:cb:f4:72:fd:3b:33:46:34:b5:76:
         99:a6:f2:5d:e0:21:20:75:25:2f:48:5c:8c:5c:f4:cc:7d:cd:
         fc:a7:3c:8b:a8:b6:cb:bd:3a:1b:0c:9b:3a:f3:5c:a9:06:ca:
         a5:1e:6f:40:42:ce:6f:7e:14:2a:76:68:4b:db:ba:63:83:9c:
         35:cb:a3:af:91:85:a6:1a:ca:42:94:d7:bc:29:48:13:8e:4a:
         e2:70:4a:f9:fa:e4:c4:df:21:aa:f0:fd:65:3a:1d:7c:e2:58:
         fc:4b:54:aa:f5:74:14:d4:a1:1f:39:81:20:14:f4:ab:80:50:
         02:74:c1:17:93:84:73:b4:c4:2d:0c:0e:83:b3:e2:ce:0e:e8:
         4c:4c:a5:d2:16:20:de:53:34:eb:41:08:1c:a9:b8:fb:9e:f3:
         b4:36:af:9d:7a:54:8b:04:75:75:11:15:e7:73:ec:7e:59:d0:
         12:7e:1e:b5:a8:bb:8e:e6:d8:9e:bd:2c:70:50:8b:56:3e:c1:
         c5:ab:af:f1
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgICAZgwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjk4
M0NGRDVGOENBRkEwMDY4RDJFQkEyNUVEMEY3MDEyNDRCMTJGOTAeFw0yNDEwMzEw
MTMwMTdaFw0yNTEwMTUwMTMwMDJaMDMxMTAvBgNVBAMTKDBENTkxQzc3MUREMUM1
QTgwQkVDQ0UzMDYzQkY5NERBMDFEMzQyNkUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCkc9/lKj+fHktTB1+Dl2axP/oxQuc39bJR+rDtdG8iDf4mZw/S
p6L/RNX41bnIfXzwHSz8PBfLv2XdSJYinMDkL+H9j5mVOHzxMJB+oljz94W3Num5
I3CnuP8cpsl056H27e21tF/hDTKUgH1vSM8sZ0bUZa702aUbrdIRcpyQHTHM8CwU
WeWDENZNPCMXTaHN8MYAtxWuReua5S5ncHyLVET9MzVnZ2iRaulx4PgpSNPj1nIB
AEQeN/kxG4CGHW3PmA470ZzfrpfFM3dFWBrxIFd3zZsJTyhh0LcDQSYeJv43vRvr
hnFT/UoAWsYzGF8u2tsN5D1W97mfF8z5yPahAgMBAAGjggIgMIICHDAdBgNVHQ4E
FgQUDVkcdx3RxagL7M4wY7+U2gHTQm4wHwYDVR0jBBgwFoAUKYPP1fjK+gBo0uui
XtD3ASRLEvkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBkBgNVHR8EXTBbMFmg
V6BVhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzYvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JMRXZrLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JM
RXZrLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgbkGCCsGAQUFBwELBIGsMIGpMF8GCCsG
AQUFBzALhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzYvRFZrY2R4M1J4YWdMN000d1k3LVUyZ0hUUW00LnJvYTBGBggr
BgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3JyZHAv
YXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
A8r3oDANBgkqhkiG9w0BAQsFAAOCAQEAEL+U1mDWf+9putxk/y3IU1T7lT1+kJC6
NFC4miDv+7fov46UMYmeqvbJn9F/fWKu7GZ6Xr2l5irGa2/WkHLL9HL9OzNGNLV2
mabyXeAhIHUlL0hcjFz0zH3N/Kc8i6i2y706GwybOvNcqQbKpR5vQELOb34UKnZo
S9u6Y4OcNcujr5GFphrKQpTXvClIE45K4nBK+frkxN8hqvD9ZTodfOJY/EtUqvV0
FNShHzmBIBT0q4BQAnTBF5OEc7TELQwOg7Pizg7oTEyl0hYg3lM060EIHKm4+57z
tDavnXpUiwR1dREV53PsflnQEn4etai7jubYnr0scFCLVj7Bxauv8Q==
-----END CERTIFICATE-----
Generated at Mon Nov 25 21:33:05 2024 by rpki-client on console-ams.rpki-client.org