Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/Do_QnV07uR1NxXtcQX6RaF0CGRY.roa
File:                     Do_QnV07uR1NxXtcQX6RaF0CGRY.roa (raw, json)
Hash identifier:          6VJJxYpasXDpXuN0ytNuUzu3vX+FFCktiKW6uUoaBzo=
Subject key identifier:   0E:8F:D0:9D:5D:3B:B9:1D:4D:C5:7B:5C:41:7E:91:68:5D:02:19:16
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       0145
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/Do_QnV07uR1NxXtcQX6RaF0CGRY.roa
Signing time:             Fri 31 May 2024 01:31:14 +0000
ROA not before:           Fri 31 May 2024 01:31:14 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     2497
IP address blocks:        203.180.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 325 (0x145)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: May 31 01:31:14 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=0E8FD09D5D3BB91D4DC57B5C417E91685D021916
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ba:d4:05:40:ae:d9:5f:16:7c:0f:b9:db:47:
                    81:b7:e3:65:d9:ba:61:f9:e8:09:a8:e5:12:9a:62:
                    2c:e7:9a:64:90:18:b4:cd:a1:c4:b5:5c:54:af:f6:
                    e8:1d:d0:fe:19:e8:64:28:7b:65:1e:5f:5a:d0:53:
                    46:22:d4:bd:9b:aa:ac:1a:f1:a7:6c:c8:1e:0e:46:
                    62:ef:93:f0:d3:0c:5d:6c:2a:68:a3:c2:86:e2:3b:
                    28:51:41:06:d7:c8:bd:20:e6:7e:52:ce:af:61:9d:
                    7d:a5:00:ac:26:d3:3f:50:32:da:36:24:b1:85:8b:
                    b4:3d:1d:02:67:e1:7c:19:36:3f:14:2a:a4:d3:fa:
                    99:29:d6:be:01:47:0b:2a:e5:6a:c8:75:07:2f:62:
                    d4:ed:78:e5:41:e6:1b:ef:a3:e4:e1:b0:c9:62:e0:
                    09:93:93:49:c5:73:87:34:2a:83:89:b8:7e:24:4b:
                    17:ba:b2:38:53:2a:82:c9:d0:cc:c4:ea:30:c9:cb:
                    f1:3f:c5:71:d8:1c:7d:a6:49:60:17:8d:dc:ed:4b:
                    44:cb:3a:4e:45:cf:d7:d6:45:9b:29:df:a6:14:d7:
                    82:6f:45:1e:71:6a:e3:43:8c:2e:55:22:f1:75:eb:
                    82:f4:53:19:09:36:2c:e4:93:26:6e:1a:cc:6e:12:
                    0a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:8F:D0:9D:5D:3B:B9:1D:4D:C5:7B:5C:41:7E:91:68:5D:02:19:16
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/Do_QnV07uR1NxXtcQX6RaF0CGRY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.180.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         7a:0d:29:4f:e4:fb:45:0e:1a:d3:ab:2c:8b:05:ab:43:b1:86:
         d9:1c:e9:6b:99:2b:da:b7:77:ee:fb:8a:bd:09:ee:7c:82:2a:
         49:a7:c1:2d:5b:88:c6:af:7f:b6:c2:38:e8:d6:f3:dc:3f:5f:
         3a:61:23:eb:0b:95:45:a1:1b:21:e4:07:3c:1a:96:72:8b:2b:
         cc:7d:f2:ce:98:fa:04:e0:f0:7e:7d:36:11:ec:1b:76:eb:93:
         b8:60:38:25:38:f4:74:96:7d:c7:c2:ca:00:d2:34:15:c7:6b:
         3f:6b:ed:32:57:c4:84:e1:5c:c2:f1:6d:3c:6f:8f:65:b4:21:
         8e:b0:e4:e5:be:81:cd:cb:70:7d:b8:29:73:5d:48:7f:5d:67:
         1b:43:e3:11:25:f6:c8:fb:7a:8b:1e:6d:cb:5b:e1:e5:85:16:
         47:02:48:65:d4:35:84:a1:49:b9:37:eb:38:5e:ba:b6:b5:31:
         07:56:83:85:62:74:93:83:08:c0:ee:a2:94:10:97:13:b7:76:
         71:db:d8:f5:df:04:aa:e1:39:55:34:b1:93:52:81:b2:c3:98:
         ea:b5:1d:e4:8b:6f:9b:a7:25:4f:e6:02:df:c9:85:e6:7d:c7:
         e6:3b:d1:88:52:9c:13:0a:10:65:e1:1a:d3:4f:0f:e1:9c:b7:
         cd:b6:40:ba
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgICAUUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjk4
M0NGRDVGOENBRkEwMDY4RDJFQkEyNUVEMEY3MDEyNDRCMTJGOTAeFw0yNDA1MzEw
MTMxMTRaFw0yNTA1MTUwMTMwMDNaMDMxMTAvBgNVBAMTKDBFOEZEMDlENUQzQkI5
MUQ0REM1N0I1QzQxN0U5MTY4NUQwMjE5MTYwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDGutQFQK7ZXxZ8D7nbR4G342XZumH56Amo5RKaYiznmmSQGLTN
ocS1XFSv9ugd0P4Z6GQoe2UeX1rQU0Yi1L2bqqwa8adsyB4ORmLvk/DTDF1sKmij
wobiOyhRQQbXyL0g5n5Szq9hnX2lAKwm0z9QMto2JLGFi7Q9HQJn4XwZNj8UKqTT
+pkp1r4BRwsq5WrIdQcvYtTteOVB5hvvo+ThsMli4AmTk0nFc4c0KoOJuH4kSxe6
sjhTKoLJ0MzE6jDJy/E/xXHYHH2mSWAXjdztS0TLOk5Fz9fWRZsp36YU14JvRR5x
auNDjC5VIvF164L0UxkJNizkkyZuGsxuEgobAgMBAAGjggIfMIICGzAdBgNVHQ4E
FgQUDo/QnV07uR1NxXtcQX6RaF0CGRYwHwYDVR0jBBgwFoAUKYPP1fjK+gBo0uui
XtD3ASRLEvkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBkBgNVHR8EXTBbMFmg
V6BVhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzYvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JMRXZrLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JM
RXZrLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgbkGCCsGAQUFBwELBIGsMIGpMF8GCCsG
AQUFBzALhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzYvRG9fUW5WMDd1UjFOeFh0Y1FYNlJhRjBDR1JZLnJvYTBGBggr
BgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3JyZHAv
YXAvbm90aWZpY2F0aW9uLnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMD
AMu0MA0GCSqGSIb3DQEBCwUAA4IBAQB6DSlP5PtFDhrTqyyLBatDsYbZHOlrmSva
t3fu+4q9Ce58gipJp8EtW4jGr3+2wjjo1vPcP186YSPrC5VFoRsh5Ac8GpZyiyvM
ffLOmPoE4PB+fTYR7Bt265O4YDglOPR0ln3HwsoA0jQVx2s/a+0yV8SE4VzC8W08
b49ltCGOsOTlvoHNy3B9uClzXUh/XWcbQ+MRJfbI+3qLHm3LW+HlhRZHAkhl1DWE
oUm5N+s4Xrq2tTEHVoOFYnSTgwjA7qKUEJcTt3Zx29j13wSq4TlVNLGTUoGyw5jq
tR3ki2+bpyVP5gLfyYXmfcfmO9GIUpwTChBl4RrTTw/hnLfNtkC6
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:24 2024 by rpki-client on console-fra.rpki-client.org