Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/cTSVhh3qewO2oQ91Sx5107xhIHs.roa
File:                     cTSVhh3qewO2oQ91Sx5107xhIHs.roa (raw, json)
Hash identifier:          Nk561Vp1keJtv1edP4iilousUgq6z73BE5bYVsDyVto=
Subject key identifier:   71:34:95:86:1D:EA:7B:03:B6:A1:0F:75:4B:1E:75:D3:BC:61:20:7B
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       014F
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/cTSVhh3qewO2oQ91Sx5107xhIHs.roa
Signing time:             Wed 31 Jul 2024 01:31:14 +0000
ROA not before:           Wed 31 Jul 2024 01:31:14 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     2497
IP address blocks:        103.2.58.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:58:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 335 (0x14f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Jul 31 01:31:14 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=713495861DEA7B03B6A10F754B1E75D3BC61207B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:e2:09:fc:99:f0:89:7a:06:89:24:7d:ac:74:
                    86:8e:be:62:28:08:9e:ae:5e:2c:47:cb:d3:f6:3c:
                    11:32:77:4b:38:53:d6:1d:c4:8c:fd:ae:52:17:e6:
                    ff:7a:95:d4:0a:32:b9:2e:1b:e0:bf:80:02:49:8e:
                    29:3d:47:5e:c6:28:04:01:ce:66:7a:3d:c1:3e:d8:
                    cf:3d:b5:d5:cc:f8:fd:f4:d9:0e:44:2b:72:5a:ec:
                    02:ec:60:86:b1:26:d8:d2:f5:8a:a1:0e:f6:fb:f5:
                    22:21:f7:e3:d8:32:3e:04:63:7b:32:d7:9f:6c:fe:
                    84:5d:04:8c:be:95:2e:9a:e0:38:5e:5b:b5:b5:30:
                    09:d6:75:e3:78:48:5d:ef:12:ad:a5:44:77:a4:72:
                    63:5b:63:1f:d5:e9:a9:8c:d8:84:0f:11:aa:d8:d5:
                    dc:06:9f:29:e4:d9:ad:01:26:77:94:a3:c3:62:09:
                    b7:b2:99:be:fa:51:37:a9:5d:34:64:a3:eb:29:23:
                    72:db:48:41:12:4b:9e:aa:c1:f0:43:72:70:d3:35:
                    84:b4:8a:60:57:c6:b6:7d:fb:2b:19:c0:fd:2c:32:
                    d6:86:bb:d1:e2:ac:74:15:ea:96:6e:bc:e7:68:b3:
                    84:ba:d5:e0:68:ec:7e:6e:25:ff:8f:5a:b3:a7:ff:
                    e9:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:34:95:86:1D:EA:7B:03:B6:A1:0F:75:4B:1E:75:D3:BC:61:20:7B
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/cTSVhh3qewO2oQ91Sx5107xhIHs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.2.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6e:f7:76:30:9d:c4:fb:ae:84:c0:91:21:a0:22:f3:42:bf:81:
         d6:9e:b4:f0:65:75:40:27:11:3d:2a:2a:87:ed:cd:3c:55:b5:
         88:46:9d:08:72:16:34:e7:2b:b4:78:c5:19:61:75:88:7e:9a:
         d2:f0:58:ed:e7:d6:88:56:e6:0e:40:00:b5:df:28:ee:99:9e:
         de:57:27:53:50:49:a7:99:1e:78:30:fa:2f:c2:5d:c4:71:ef:
         5a:24:32:5a:7f:29:65:54:46:20:5e:da:e8:0b:40:f3:9d:79:
         3b:ef:83:b0:db:ef:5e:d0:a9:0e:b1:e3:3a:35:b1:db:26:f8:
         50:35:54:81:e6:44:d8:72:91:2d:de:53:c2:99:8e:80:66:74:
         d6:f6:42:a1:cb:7c:31:ff:07:68:d7:30:44:79:73:21:a6:0d:
         44:1b:17:7f:ef:d2:7a:47:22:4a:de:a8:69:df:24:90:d7:47:
         5f:ac:64:ff:a8:1f:5d:33:45:db:29:3f:e2:70:2e:68:20:c8:
         60:38:8f:28:55:d7:07:9e:9d:c1:4a:df:9f:2c:60:fb:05:1d:
         b8:a5:8d:a5:58:24:be:ef:78:1b:33:62:6a:ad:de:36:1a:a1:
         b7:c7:f7:db:11:ad:9c:ef:69:bd:78:a3:c5:8c:62:b3:39:5d:
         b9:3f:55:c9
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgICAU8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjk4
M0NGRDVGOENBRkEwMDY4RDJFQkEyNUVEMEY3MDEyNDRCMTJGOTAeFw0yNDA3MzEw
MTMxMTRaFw0yNTA3MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDcxMzQ5NTg2MURFQTdC
MDNCNkExMEY3NTRCMUU3NUQzQkM2MTIwN0IwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDr4gn8mfCJegaJJH2sdIaOvmIoCJ6uXixHy9P2PBEyd0s4U9Yd
xIz9rlIX5v96ldQKMrkuG+C/gAJJjik9R17GKAQBzmZ6PcE+2M89tdXM+P302Q5E
K3Ja7ALsYIaxJtjS9YqhDvb79SIh9+PYMj4EY3sy159s/oRdBIy+lS6a4DheW7W1
MAnWdeN4SF3vEq2lRHekcmNbYx/V6amM2IQPEarY1dwGnynk2a0BJneUo8NiCbey
mb76UTepXTRko+spI3LbSEESS56qwfBDcnDTNYS0imBXxrZ9+ysZwP0sMtaGu9Hi
rHQV6pZuvOdos4S61eBo7H5uJf+PWrOn/+mNAgMBAAGjggIgMIICHDAdBgNVHQ4E
FgQUcTSVhh3qewO2oQ91Sx5107xhIHswHwYDVR0jBBgwFoAUKYPP1fjK+gBo0uui
XtD3ASRLEvkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBkBgNVHR8EXTBbMFmg
V6BVhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzYvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JMRXZrLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JM
RXZrLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgbkGCCsGAQUFBwELBIGsMIGpMF8GCCsG
AQUFBzALhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzYvY1RTVmhoM3Fld08yb1E5MVN4NTEwN3hoSUhzLnJvYTBGBggr
BgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3JyZHAv
YXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
AWcCOjANBgkqhkiG9w0BAQsFAAOCAQEAbvd2MJ3E+66EwJEhoCLzQr+B1p608GV1
QCcRPSoqh+3NPFW1iEadCHIWNOcrtHjFGWF1iH6a0vBY7efWiFbmDkAAtd8o7pme
3lcnU1BJp5keeDD6L8JdxHHvWiQyWn8pZVRGIF7a6AtA8515O++DsNvvXtCpDrHj
OjWx2yb4UDVUgeZE2HKRLd5TwpmOgGZ01vZCoct8Mf8HaNcwRHlzIaYNRBsXf+/S
ekciSt6oad8kkNdHX6xk/6gfXTNF2yk/4nAuaCDIYDiPKFXXB56dwUrfnyxg+wUd
uKWNpVgkvu94GzNiaq3eNhqht8f32xGtnO9pvXijxYxiszlduT9VyQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:21:30 2024 by rpki-client on console-ams.rpki-client.org